github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #6950] firefox: crash when saving an image / opening the file browser dialog (glycin) #3434

New issue

Closed

opened 2026-05-05 09:59:52 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 09:59:52 -06:00

Owner

Originally created by @ipaqmaster on GitHub (Oct 30, 2025).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6950

Description

Describe the bug

Firefox 144.0 crashing when saving an image (Upon opening the file browser dialog) showing its crash window

Steps to Reproduce

Right click any image and select Save Image As... to crash the browser.

Steps to reproduce the behavior

Run in bash LC_ALL=C firejail /path/to/program (LC_ALL=C to get a consistent
output in English that can be understood by everybody)
Click on '....'
Scroll down to '....'
See error ERROR

Expected behavior

Let me select which directory to save the image into as usual

Actual behavior

It crashes.

Behavior without a profile

What changed calling LC_ALL=C firejail --noprofile /path/to/program in a
terminal?

Additional context

Any other detail that may help to understand/debug the problem

Only started happening after my latest system update the other day.

Environment

Name/version/arch of the Linux kernel (uname -srm): Linux 6.12.55-1-lts x86_64
Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): Arch Linux
Name/version of the relevant program(s)/package(s) (e.g. "firefox 134.0-1,
mesa 1:24.3.3-2"): Mozilla Firefox 144.0
Version of Firejail (firejail --version): firejail version 0.9.76
If you use a development version of firejail, also the commit from which it
was compiled (git rev-parse HEAD):

Checklist

The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
I can reproduce the issue without custom modifications (e.g. globals.local).
The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
The profile (and redirect profile if exists) hasn't already been fixed upstream.
I have performed a short search for similar issues (to avoid opening a duplicate).
- I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Log

Output of LC_ALL=C firejail /path/to/program

15:50:44 me@pc ~ $ LC_ALL=C firejail /usr/bin/firefox
Reading profile /etc/firejail/firefox.profile
Reading profile /home/me/.config/firejail/firefox.local
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-proc.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
firejail version 0.9.76

Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Parent pid 982053, child pid 982057
Warning: NVIDIA card detected, nogroups command ignored
Warning: not remounting /var/lib/mysql/log
Warning: not remounting /var/lib/mysql/log
Warning: not remounting /var/lib/mysql/log
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning fcopy: cannot create symbolic link /etc/fonts/conf.d/70-noto-cjk.conf
Private /etc installed in 60.19 ms
Warning: NVIDIA card detected, nogroups command ignored
Warning: NVIDIA card detected, nogroups command ignored
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Base filesystem installed in 206.39 ms
Warning: NVIDIA card detected, nogroups command ignored
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Warning: NVIDIA card detected, nogroups command ignored
Warning: NVIDIA card detected, nogroups command ignored
Warning: Replacing profile instead of stacking it. It is a legacy behavior that can result in relaxation of the protection. It is here as a temporary measure to unbreak the software that has been broken by switching to the stacking behavior.
Warning: Cannot confine the application using AppArmor.
Maybe firejail-default AppArmor profile is not loaded into the kernel.
As root, run "aa-enforce firejail-default" to load it.
Child process initialized in 364.63 ms
[Parent 42, Main Thread] WARNING: Could not load a pixbuf from icon theme.
This may indicate that pixbuf loaders or the mime database could not be found.: 'glib warning', file /usr/src/debug/firefox/firefox-144.0/toolkit/xre/nsSigHandlers.cpp:201

(firefox:42): Gtk-WARNING **: 15:50:45.145: Could not load a pixbuf from icon theme.
This may indicate that pixbuf loaders or the mime database could not be found.
[Parent 42, Main Thread] WARNING: Unable to connect to ibus: Could not connect: Connection refused: 'glib warning', file /usr/src/debug/firefox/firefox-144.0/toolkit/xre/nsSigHandlers.cpp:201

(firefox:42): IBUS-WARNING **: 15:50:45.152: Unable to connect to ibus: Could not connect: Connection refused
[Parent 42, Main Thread] WARNING: Failed to create DBus proxy for org.freedesktop.UPower: Could not connect: Permission denied
: 'glib warning', file /usr/src/debug/firefox/firefox-144.0/toolkit/xre/nsSigHandlers.cpp:201

** (firefox:42): WARNING **: 15:50:45.173: Failed to create DBus proxy for org.freedesktop.UPower: Could not connect: Permission denied

[Parent 42, Main Thread] WARNING: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/1337/at-spi/bus_0: No such file or directory: 'glib warning', file /usr/src/debug/firefox/firefox-144.0/toolkit/xre/nsSigHandlers.cpp:201

(firefox:42): dbind-WARNING **: 15:50:45.363: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/1337/at-spi/bus_0: No such file or directory
**
Gtk:ERROR:../gtk/gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/elementary/status/16/image-missing.svg: No image loaders are configured. You might need to install a package like glycin-loaders.
Used config: Config {
    image_loader: {},
    image_editor: {},
} (gdk-pixbuf-error-quark, 0)
Bail out! Gtk:ERROR:../gtk/gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/elementary/status/16/image-missing.svg: No image loaders are configured. You might need to install a package like glycin-loaders. Used config: Config {     image_loader: {},     image_editor: {}, } (gdk-pixbuf-error-quark, 0)
Redirecting call to abort() to mozalloc_abort

ExceptionHandler::GenerateDump attempting to generate:/home/me/.mozilla/firefox/r2dr6b0e.default-release-1633662332286/minidumps/3d80a727-1236-d0de-9aad-450c4fef0f58.dmp
ExceptionHandler::GenerateDump cloned child 469
ExceptionHandler::WaitForContinueSignal waiting for continue signal...
ExceptionHandler::SendContinueSignalToChild sent continue signal to child
ExceptionHandler::GenerateDump minidump generation failed
Exiting due to channel error.
Exiting due to channel error.
Exiting due to channel error.
Exiting due to channel error.
Exiting due to channel error.

(process:470): Gtk-CRITICAL **: 15:50:50.761: gtk_window_set_default_icon: assertion 'GDK_IS_PIXBUF (icon)' failed

(crashreporter:470): dbind-WARNING **: 15:50:50.829: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/1337/at-spi/bus_0: No such file or directory

(crashreporter:470): IBUS-WARNING **: 15:50:50.839: Unable to connect to ibus: Could not connect: Connection refused

Output of LC_ALL=C firejail --debug /path/to/program

output goes here

Originally created by @ipaqmaster on GitHub (Oct 30, 2025). Original GitHub issue: https://github.com/netblue30/firejail/issues/6950  ### Description _Describe the bug_ Firefox 144.0 crashing when saving an image (Upon opening the file browser dialog) showing its crash window ### Steps to Reproduce Right click any image and select `Save Image As...` to crash the browser. _Steps to reproduce the behavior_ 1. Run in bash `LC_ALL=C firejail /path/to/program` (`LC_ALL=C` to get a consistent output in English that can be understood by everybody) 2. Click on '....' 3. Scroll down to '....' 4. See error `ERROR` ### Expected behavior Let me select which directory to save the image into as usual ### Actual behavior It crashes. ### Behavior without a profile _What changed calling `LC_ALL=C firejail --noprofile /path/to/program` in a terminal?_ ### Additional context _Any other detail that may help to understand/debug the problem_ Only started happening after my latest system update the other day. ### Environment - Name/version/arch of the Linux kernel (`uname -srm`): `Linux 6.12.55-1-lts x86_64` - Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): `Arch Linux` - Name/version of the relevant program(s)/package(s) (e.g. "firefox 134.0-1, mesa 1:24.3.3-2"): `Mozilla Firefox 144.0` - Version of Firejail (`firejail --version`): `firejail version 0.9.76` - If you use a development version of firejail, also the commit from which it was compiled (`git rev-parse HEAD`): ### Checklist  - [x] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [x] I can reproduce the issue without custom modifications (e.g. globals.local). - [x] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [ ] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] I have performed a short search for similar issues (to avoid opening a duplicate). - [x] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [ ] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages) ### Log <details> <summary>Output of <code>LC_ALL=C firejail /path/to/program</code></summary> <p> ``` 15:50:44 me@pc ~ $ LC_ALL=C firejail /usr/bin/firefox Reading profile /etc/firejail/firefox.profile Reading profile /home/me/.config/firejail/firefox.local Reading profile /etc/firejail/firefox-common.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-proc.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-run-common.inc Reading profile /etc/firejail/whitelist-runuser-common.inc Reading profile /etc/firejail/whitelist-usr-share-common.inc Reading profile /etc/firejail/whitelist-var-common.inc firejail version 0.9.76 Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Parent pid 982053, child pid 982057 Warning: NVIDIA card detected, nogroups command ignored Warning: not remounting /var/lib/mysql/log Warning: not remounting /var/lib/mysql/log Warning: not remounting /var/lib/mysql/log Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning fcopy: cannot create symbolic link /etc/fonts/conf.d/70-noto-cjk.conf Private /etc installed in 60.19 ms Warning: NVIDIA card detected, nogroups command ignored Warning: NVIDIA card detected, nogroups command ignored Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Base filesystem installed in 206.39 ms Warning: NVIDIA card detected, nogroups command ignored Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Warning: NVIDIA card detected, nogroups command ignored Warning: NVIDIA card detected, nogroups command ignored Warning: Replacing profile instead of stacking it. It is a legacy behavior that can result in relaxation of the protection. It is here as a temporary measure to unbreak the software that has been broken by switching to the stacking behavior. Warning: Cannot confine the application using AppArmor. Maybe firejail-default AppArmor profile is not loaded into the kernel. As root, run "aa-enforce firejail-default" to load it. Child process initialized in 364.63 ms [Parent 42, Main Thread] WARNING: Could not load a pixbuf from icon theme. This may indicate that pixbuf loaders or the mime database could not be found.: 'glib warning', file /usr/src/debug/firefox/firefox-144.0/toolkit/xre/nsSigHandlers.cpp:201 (firefox:42): Gtk-WARNING **: 15:50:45.145: Could not load a pixbuf from icon theme. This may indicate that pixbuf loaders or the mime database could not be found. [Parent 42, Main Thread] WARNING: Unable to connect to ibus: Could not connect: Connection refused: 'glib warning', file /usr/src/debug/firefox/firefox-144.0/toolkit/xre/nsSigHandlers.cpp:201 (firefox:42): IBUS-WARNING **: 15:50:45.152: Unable to connect to ibus: Could not connect: Connection refused [Parent 42, Main Thread] WARNING: Failed to create DBus proxy for org.freedesktop.UPower: Could not connect: Permission denied : 'glib warning', file /usr/src/debug/firefox/firefox-144.0/toolkit/xre/nsSigHandlers.cpp:201 ** (firefox:42): WARNING **: 15:50:45.173: Failed to create DBus proxy for org.freedesktop.UPower: Could not connect: Permission denied [Parent 42, Main Thread] WARNING: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/1337/at-spi/bus_0: No such file or directory: 'glib warning', file /usr/src/debug/firefox/firefox-144.0/toolkit/xre/nsSigHandlers.cpp:201 (firefox:42): dbind-WARNING **: 15:50:45.363: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/1337/at-spi/bus_0: No such file or directory ** Gtk:ERROR:../gtk/gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/elementary/status/16/image-missing.svg: No image loaders are configured. You might need to install a package like glycin-loaders. Used config: Config { image_loader: {}, image_editor: {}, } (gdk-pixbuf-error-quark, 0) Bail out! Gtk:ERROR:../gtk/gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/elementary/status/16/image-missing.svg: No image loaders are configured. You might need to install a package like glycin-loaders. Used config: Config { image_loader: {}, image_editor: {}, } (gdk-pixbuf-error-quark, 0) Redirecting call to abort() to mozalloc_abort ExceptionHandler::GenerateDump attempting to generate:/home/me/.mozilla/firefox/r2dr6b0e.default-release-1633662332286/minidumps/3d80a727-1236-d0de-9aad-450c4fef0f58.dmp ExceptionHandler::GenerateDump cloned child 469 ExceptionHandler::WaitForContinueSignal waiting for continue signal... ExceptionHandler::SendContinueSignalToChild sent continue signal to child ExceptionHandler::GenerateDump minidump generation failed Exiting due to channel error. Exiting due to channel error. Exiting due to channel error. Exiting due to channel error. Exiting due to channel error. (process:470): Gtk-CRITICAL **: 15:50:50.761: gtk_window_set_default_icon: assertion 'GDK_IS_PIXBUF (icon)' failed (crashreporter:470): dbind-WARNING **: 15:50:50.829: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/1337/at-spi/bus_0: No such file or directory (crashreporter:470): IBUS-WARNING **: 15:50:50.839: Unable to connect to ibus: Could not connect: Connection refused ``` </p> </details> <details> <summary>Output of <code>LC_ALL=C firejail --debug /path/to/program</code></summary> <p>  ``` output goes here ``` </p> </details>

gitea-mirror

2026-05-05 09:59:52 -06:00

closed this issue
added the
duplicate
label

gitea-mirror commented

2026-05-05 09:59:55 -06:00

Author

Owner

@ipaqmaster commented on GitHub (Oct 30, 2025):

It's probably this: https://bbs.archlinux.org/viewtopic.php?id=302145&p=3

And it seems there is an open issue already after all: https://github.com/netblue30/firejail/issues/6906

Moving on.

@ipaqmaster commented on GitHub (Oct 30, 2025): It's probably this: https://bbs.archlinux.org/viewtopic.php?id=302145&p=3 And it seems there is an open issue already after all: https://github.com/netblue30/firejail/issues/6906 Moving on.

gitea-mirror referenced this issue

2026-05-05 10:40:51 -06:00

[PR #5600] [MERGED] modif: Stop forwarding own double-dash to the shell #5567

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3434

No description provided.

Rows
Columns