github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

[GH-ISSUE #7002] firefox: crash when dragging a bookmark (glycin) #3450

New issue
Closed
opened 2026-05-05 10:00:24 -06:00 by gitea-mirror · 6 comments
gitea-mirror commented 2026-05-05 10:00:24 -06:00
Owner
Copy link

Originally created by @Gerenuk on GitHub (Dec 28, 2025).
Original GitHub issue: https://github.com/netblue30/firejail/issues/7002

Description

Firefox crashes when dragging bookmarks

Steps to Reproduce

Open Firefox with default Firejail. Drag a bookmark in the bookmark bar or the bookmark manager.

Expected behavior

Bookmark can be dropped.

Actual behavior

Firefox crashes.

Behavior without a profile

It works.

Additional context

Wayland, KDE Plasma

My Firefox is downloaded and installed directly from Mozilla.

Environment

  • Name/version/arch of the Linux kernel (uname -srm): Linux 6.18.2-1-MANJARO x86_64
  • Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): Manjaro
  • Name/version of the relevant program(s)/package(s) (e.g. "firefox 134.0-1,
    mesa 1:24.3.3-2"): Firefox 146.0.1
  • Version of Firejail (firejail --version): 0.9.76

gdk-pixbuf2 2.44.4-1
lib32-gdk-pixbuf2 2.44.4-1

Log

Output of LC_ALL=C firejail .../firefox 

Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-proc.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
firejail version 0.9.76

Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Parent pid 186078, child pid 186082
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Private /etc installed in 55.91 ms
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Base filesystem installed in 185.69 ms
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Warning: Replacing profile instead of stacking it. It is a legacy behavior that can result in relaxation of the protection. It is here as a temporary measure to unbreak the software that has been broken by switching to the stacking behavior.
Child process initialized in 324.09 ms
[Parent 39, Main Thread] WARNING: Could not load a pixbuf from icon theme.
This may indicate that pixbuf loaders or the mime database could not be found.: 'glib warning', file /builds/worker/checkouts/gecko/toolkit/xre/nsSigHandlers.cpp:201

(firefox:39): Gtk-WARNING **: 20:13:34.034: Could not load a pixbuf from icon theme.
This may indicate that pixbuf loaders or the mime database could not be found.
**
Gtk:ERROR:../gtk/gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/breeze/status/64/image-missing.svg: No image loaders are configured. You might need to install a package like glycin-loaders.
Used config: Config {
    image_loader: {},
    image_editor: {},
} (gdk-pixbuf-error-quark, 0)
Bail out! Gtk:ERROR:../gtk/gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/breeze/status/64/image-missing.svg: No image loaders are configured. You might need to install a package like glycin-loaders. Used config: Config {     image_loader: {},     image_editor: {}, } (gdk-pixbuf-error-quark, 0)
Redirecting call to abort() to mozalloc_abort

ExceptionHandler::GenerateDump attempting to generate:~/.mozilla/firefox/35vq8zhs.test/minidumps/126dbea9-7369-0a6f-d012-777ecfd08936.dmp
ExceptionHandler::GenerateDump cloned child 425
ExceptionHandler::WaitForContinueSignal waiting for continue signal...
ExceptionHandler::SendContinueSignalToChild sent continue signal to child
ExceptionHandler::GenerateDump minidump generation failed
Exiting due to channel error.
Exiting due to channel error.
Exiting due to channel error.
Exiting due to channel error.
Exiting due to channel error.

(process:426): Gtk-CRITICAL **: 20:13:43.901: gtk_window_set_default_icon: assertion 'GDK_IS_PIXBUF (icon)' failed

(crashreporter:426): GLib-GObject-CRITICAL **: 20:13:46.207: g_object_unref: assertion 'G_IS_OBJECT (object)' failed

Parent is shutting down, bye...

Output of journalctl 

Dec 28 20:23:21 host systemd[1215]: Started Firefox.
Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/firefox.profile
Dec 28 20:23:21 host firejail[203017]: Reading profile ~/.config/firejail/firefox.local
Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/firefox-common.profile
Dec 28 20:23:21 host firejail[203017]: Reading profile ~/.config/firejail/firefox-common.local
Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/disable-common.inc
Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/disable-devel.inc
Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/disable-exec.inc
Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/disable-interpreters.inc
Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/disable-proc.inc
Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/disable-programs.inc
Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/whitelist-common.inc
Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/whitelist-run-common.inc
Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/whitelist-runuser-common.inc
Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/whitelist-usr-share-common.inc
Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/whitelist-var-common.inc
Dec 28 20:23:21 host firejail[203017]: firejail version 0.9.76
Dec 28 20:23:21 host firejail[203017]: Seccomp list in: !chroot,!mount,!pivot_root,!umount2, check list: @default-keep, prelist: unknown,unknown,unknown,unknown,
Dec 28 20:23:21 host firejail[203017]: Parent pid 203017, child pid 203021
Dec 28 20:23:21 host firejail[203021]: 7 programs installed in 10.55 ms
Dec 28 20:23:21 host firejail[203021]: Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Dec 28 20:23:21 host firejail[203021]: Private /etc installed in 71.32 ms
Dec 28 20:23:21 host firejail[203021]: Warning: /sbin directory link was not blacklisted
Dec 28 20:23:21 host firejail[203021]: Warning: /usr/sbin directory link was not blacklisted
Dec 28 20:23:21 host firejail[203021]: Base filesystem installed in 73.72 ms
Dec 28 20:23:21 host firejail[203072]: Seccomp list in: !chroot,!mount,!pivot_root,!umount2, check list: @default-keep, prelist: unknown,unknown,unknown,unknown,
Dec 28 20:23:21 host firejail[203074]: Warning: Replacing profile instead of stacking it. It is a legacy behavior that can result in relaxation of the protection. It is here as a temporary measure to unbreak the software that has been broken by switching to the stacking behavior.
Dec 28 20:23:21 host firejail[203074]: Child process initialized in 244.02 ms
Dec 28 20:23:21 host firejail[203074]: [53, Main Thread] WARNING: Locale not supported by C library.
Dec 28 20:23:21 host firejail[203074]:         Using the fallback 'C' locale.: 'glib warning', file /builds/worker/checkouts/gecko/toolkit/xre/nsSigHandlers.cpp:201
Dec 28 20:23:21 host firefox[203074]: Locale not supported by C library.
                                                Using the fallback 'C' locale.
Dec 28 20:23:22 host firejail[203074]: [Parent 53, Main Thread] WARNING: Could not load a pixbuf from icon theme.
Dec 28 20:23:22 host firejail[203074]: This may indicate that pixbuf loaders or the mime database could not be found.: 'glib warning', file /builds/worker/checkouts/gecko/toolkit/xre/nsSigHandlers.cpp:201
Dec 28 20:23:22 host firefox[203074]: Could not load a pixbuf from icon theme.
                                        This may indicate that pixbuf loaders or the mime database could not be found.
Dec 28 20:23:55 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 233, syscall 72, args 29 1027 26 0 138006330957840 98572652.
Dec 28 20:23:55 host firejail[203224]: libva info: VA-API version 1.22.0
Dec 28 20:23:55 host firejail[203224]: libva info: Trying to open /usr/lib/dri/radeonsi_drv_video.so
Dec 28 20:23:55 host firejail[203224]: libva info: Found init function __vaDriverInit_1_22
Dec 28 20:23:55 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 233, syscall 72, args 29 1027 30 1 4096 138004357191056.
Dec 28 20:23:55 host firejail[203224]: libva info: va_openDriver() returns 0
Dec 28 20:23:55 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 3283, syscall 72, args 32 1027 37 1 16777216 138004636112896.
Dec 28 20:23:55 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 3283, syscall 72, args 29 1027 37 32 37 138004384845824.
Dec 28 20:24:02 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 233, syscall 72, args 39 1027 31 1 67108864 138004357191512.
Dec 28 20:24:02 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 233, syscall 72, args 29 1027 31 39 31 138004384845824.
Dec 28 20:24:05 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 233, syscall 72, args 39 1027 31 1 131072 138004271204128.
Dec 28 20:24:05 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 233, syscall 72, args 29 1027 31 39 31 138004384845824.


<dragging bookmark happens now>


Dec 28 20:24:25 host firejail[203074]: **
Dec 28 20:24:25 host firejail[203074]: Gtk:ERROR:../gtk/gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/breeze/status/64/image-missing.svg: Could not spawn `"bwrap" "--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr" "--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache" "--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs" "/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv" "XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000" "--symlink" "/usr/lib" "/lib" "--symlink" "/usr/lib" "/lib64" "--ro-bind-try" "/etc/fonts/conf.d" "/etc/fonts/conf.d" "--ro-bind-try" "/etc/fonts/fonts.conf" "/etc/fonts/fonts.conf" "--ro-bind-try" "~/.cache/fontconfig" "~/.cache/fontconfig" "--ro-bind-try" "/var/cache/fontconfig" "/var/cache/fontconfig" "--bind-try" "~/.cache/glycin/usr/lib/glycin-loaders/2+/glycin-svg" "~/.cache/glycin/usr/lib/glycin-loaders/2+/glycin-svg" "--setenv" "XDG_CACHE_HOME" "~/.cache/glycin/usr/lib/glycin-loaders/2+/glycin-svg" "--seccomp" "215" "/usr/lib/glycin-loaders/2+/glycin-svg" "--dbus-fd" "214"`: Permission denied (os error 13) (gdk-pixbuf-error-quark, 0)
Dec 28 20:24:25 host firejail[203074]: Bail out! Gtk:ERROR:../gtk/gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/breeze/status/64/image-missing.svg: Could not spawn `"bwrap" "--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr" "--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache" "--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs" "/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv" "XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000" "--symlink" "/usr/lib" "/lib" "--symlink" "/usr/lib" "/lib64" "--ro-bind-try" "/etc/fonts/conf.d" "/etc/fonts/conf.d" "--ro-bind-try" "/etc/fonts/fonts.conf" "/etc/fonts/fonts.conf" "--ro-bind-try" "~/.cache/fontconfig" "~/.cache/fontconfig" "--ro-bind-try" "/var/cache/fontconfig" "/var/cache/fontconfig" "--bind-try" "~/.cache/glycin/usr/lib/glycin-loaders/2+/glycin-svg" "~/.cache/glycin/usr/lib/glycin-loaders/2+/glycin-svg" "--setenv" "XDG_CACHE_HOME" "~/.cache/glycin/usr/lib/glycin-loaders/2+/glycin-svg" "--seccomp" "215" "/usr/lib/glycin-loaders/2+/glycin-svg" "--dbus-fd" "214"`: Permission denied (os error 13) (gdk-pixbuf-error-quark, 0)
Dec 28 20:24:25 host firejail[203074]: Redirecting call to abort() to mozalloc_abort
Dec 28 20:24:25 host firejail[203074]: ExceptionHandler::GenerateDump attempting to generate:
Dec 28 20:24:25 host firejail[203074]: ~/.mozilla/firefox/ik0z6bha.secure/minidumps/7eb2ea82-0639-65c9-de95-7a0fe8c8e31b.dmp
Dec 28 20:24:25 host firejail[203074]: ExceptionHandler::GenerateDump cloned child 5328
Dec 28 20:24:25 host firejail[208358]: ExceptionHandler::WaitForContinueSignal waiting for continue signal...
Dec 28 20:24:25 host firejail[203074]: ExceptionHandler::SendContinueSignalToChild sent continue signal to child
Dec 28 20:24:25 host firejail[203074]: ExceptionHandler::GenerateDump minidump generation
Dec 28 20:24:25 host firejail[203074]: failed
Dec 28 20:24:25 host firejail[204780]: Exiting due to channel error.
Dec 28 20:24:25 host firejail[204763]: Exiting due to channel error.
Dec 28 20:24:25 host crashreporter[208359]: gtk_window_set_default_icon: assertion 'GDK_IS_PIXBUF (icon)' failed
Dec 28 20:24:25 host crashreporter[208359]: Locale not supported by C library.
                                                      Using the fallback 'C' locale.
Dec 28 20:24:28 host crashreporter[208359]: g_object_unref: assertion 'G_IS_OBJECT (object)' failed
Dec 28 20:24:28 host firejail[203017]: Parent is shutting down, bye...
Dec 28 20:24:28 host systemd[1215]: app-Firefox@f5d50e2f5d944c08bac8b0ced020c622.service: Main process exited, code=exited, status=1/FAILURE
Dec 28 20:24:28 host systemd[1215]: app-Firefox@f5d50e2f5d944c08bac8b0ced020c622.service: Failed with result 'exit-code'.

Originally created by @Gerenuk on GitHub (Dec 28, 2025). Original GitHub issue: https://github.com/netblue30/firejail/issues/7002 ### Description Firefox crashes when dragging bookmarks ### Steps to Reproduce Open Firefox with default Firejail. Drag a bookmark in the bookmark bar or the bookmark manager. ### Expected behavior Bookmark can be dropped. ### Actual behavior Firefox crashes. ### Behavior without a profile It works. ### Additional context Wayland, KDE Plasma My Firefox is downloaded and installed directly from Mozilla. ### Environment - Name/version/arch of the Linux kernel (`uname -srm`): Linux 6.18.2-1-MANJARO x86_64 - Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): Manjaro - Name/version of the relevant program(s)/package(s) (e.g. "firefox 134.0-1, mesa 1:24.3.3-2"): Firefox 146.0.1 - Version of Firejail (`firejail --version`): 0.9.76 gdk-pixbuf2 2.44.4-1 lib32-gdk-pixbuf2 2.44.4-1 ### Log <details> <summary>Output of <code>LC_ALL=C firejail .../firefox</code></summary> <p> ``` Reading profile /etc/firejail/firefox.profile Reading profile /etc/firejail/firefox-common.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-proc.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-run-common.inc Reading profile /etc/firejail/whitelist-runuser-common.inc Reading profile /etc/firejail/whitelist-usr-share-common.inc Reading profile /etc/firejail/whitelist-var-common.inc firejail version 0.9.76 Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Parent pid 186078, child pid 186082 Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Private /etc installed in 55.91 ms Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Base filesystem installed in 185.69 ms Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Warning: Replacing profile instead of stacking it. It is a legacy behavior that can result in relaxation of the protection. It is here as a temporary measure to unbreak the software that has been broken by switching to the stacking behavior. Child process initialized in 324.09 ms [Parent 39, Main Thread] WARNING: Could not load a pixbuf from icon theme. This may indicate that pixbuf loaders or the mime database could not be found.: 'glib warning', file /builds/worker/checkouts/gecko/toolkit/xre/nsSigHandlers.cpp:201 (firefox:39): Gtk-WARNING **: 20:13:34.034: Could not load a pixbuf from icon theme. This may indicate that pixbuf loaders or the mime database could not be found. ** Gtk:ERROR:../gtk/gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/breeze/status/64/image-missing.svg: No image loaders are configured. You might need to install a package like glycin-loaders. Used config: Config { image_loader: {}, image_editor: {}, } (gdk-pixbuf-error-quark, 0) Bail out! Gtk:ERROR:../gtk/gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/breeze/status/64/image-missing.svg: No image loaders are configured. You might need to install a package like glycin-loaders. Used config: Config { image_loader: {}, image_editor: {}, } (gdk-pixbuf-error-quark, 0) Redirecting call to abort() to mozalloc_abort ExceptionHandler::GenerateDump attempting to generate:~/.mozilla/firefox/35vq8zhs.test/minidumps/126dbea9-7369-0a6f-d012-777ecfd08936.dmp ExceptionHandler::GenerateDump cloned child 425 ExceptionHandler::WaitForContinueSignal waiting for continue signal... ExceptionHandler::SendContinueSignalToChild sent continue signal to child ExceptionHandler::GenerateDump minidump generation failed Exiting due to channel error. Exiting due to channel error. Exiting due to channel error. Exiting due to channel error. Exiting due to channel error. (process:426): Gtk-CRITICAL **: 20:13:43.901: gtk_window_set_default_icon: assertion 'GDK_IS_PIXBUF (icon)' failed (crashreporter:426): GLib-GObject-CRITICAL **: 20:13:46.207: g_object_unref: assertion 'G_IS_OBJECT (object)' failed Parent is shutting down, bye... ``` </p> </details> <details> <summary>Output of <code>journalctl</code></summary> <p> ``` Dec 28 20:23:21 host systemd[1215]: Started Firefox. Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/firefox.profile Dec 28 20:23:21 host firejail[203017]: Reading profile ~/.config/firejail/firefox.local Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/firefox-common.profile Dec 28 20:23:21 host firejail[203017]: Reading profile ~/.config/firejail/firefox-common.local Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/disable-common.inc Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/disable-devel.inc Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/disable-exec.inc Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/disable-interpreters.inc Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/disable-proc.inc Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/disable-programs.inc Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/whitelist-common.inc Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/whitelist-run-common.inc Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/whitelist-runuser-common.inc Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/whitelist-usr-share-common.inc Dec 28 20:23:21 host firejail[203017]: Reading profile /etc/firejail/whitelist-var-common.inc Dec 28 20:23:21 host firejail[203017]: firejail version 0.9.76 Dec 28 20:23:21 host firejail[203017]: Seccomp list in: !chroot,!mount,!pivot_root,!umount2, check list: @default-keep, prelist: unknown,unknown,unknown,unknown, Dec 28 20:23:21 host firejail[203017]: Parent pid 203017, child pid 203021 Dec 28 20:23:21 host firejail[203021]: 7 programs installed in 10.55 ms Dec 28 20:23:21 host firejail[203021]: Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Dec 28 20:23:21 host firejail[203021]: Private /etc installed in 71.32 ms Dec 28 20:23:21 host firejail[203021]: Warning: /sbin directory link was not blacklisted Dec 28 20:23:21 host firejail[203021]: Warning: /usr/sbin directory link was not blacklisted Dec 28 20:23:21 host firejail[203021]: Base filesystem installed in 73.72 ms Dec 28 20:23:21 host firejail[203072]: Seccomp list in: !chroot,!mount,!pivot_root,!umount2, check list: @default-keep, prelist: unknown,unknown,unknown,unknown, Dec 28 20:23:21 host firejail[203074]: Warning: Replacing profile instead of stacking it. It is a legacy behavior that can result in relaxation of the protection. It is here as a temporary measure to unbreak the software that has been broken by switching to the stacking behavior. Dec 28 20:23:21 host firejail[203074]: Child process initialized in 244.02 ms Dec 28 20:23:21 host firejail[203074]: [53, Main Thread] WARNING: Locale not supported by C library. Dec 28 20:23:21 host firejail[203074]: Using the fallback 'C' locale.: 'glib warning', file /builds/worker/checkouts/gecko/toolkit/xre/nsSigHandlers.cpp:201 Dec 28 20:23:21 host firefox[203074]: Locale not supported by C library. Using the fallback 'C' locale. Dec 28 20:23:22 host firejail[203074]: [Parent 53, Main Thread] WARNING: Could not load a pixbuf from icon theme. Dec 28 20:23:22 host firejail[203074]: This may indicate that pixbuf loaders or the mime database could not be found.: 'glib warning', file /builds/worker/checkouts/gecko/toolkit/xre/nsSigHandlers.cpp:201 Dec 28 20:23:22 host firefox[203074]: Could not load a pixbuf from icon theme. This may indicate that pixbuf loaders or the mime database could not be found. Dec 28 20:23:55 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 233, syscall 72, args 29 1027 26 0 138006330957840 98572652. Dec 28 20:23:55 host firejail[203224]: libva info: VA-API version 1.22.0 Dec 28 20:23:55 host firejail[203224]: libva info: Trying to open /usr/lib/dri/radeonsi_drv_video.so Dec 28 20:23:55 host firejail[203224]: libva info: Found init function __vaDriverInit_1_22 Dec 28 20:23:55 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 233, syscall 72, args 29 1027 30 1 4096 138004357191056. Dec 28 20:23:55 host firejail[203224]: libva info: va_openDriver() returns 0 Dec 28 20:23:55 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 3283, syscall 72, args 32 1027 37 1 16777216 138004636112896. Dec 28 20:23:55 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 3283, syscall 72, args 29 1027 37 32 37 138004384845824. Dec 28 20:24:02 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 233, syscall 72, args 39 1027 31 1 67108864 138004357191512. Dec 28 20:24:02 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 233, syscall 72, args 29 1027 31 39 31 138004384845824. Dec 28 20:24:05 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 233, syscall 72, args 39 1027 31 1 131072 138004271204128. Dec 28 20:24:05 host firejail[203224]: [202] Sandbox: seccomp sandbox violation: pid 202, tid 233, syscall 72, args 29 1027 31 39 31 138004384845824. <dragging bookmark happens now> Dec 28 20:24:25 host firejail[203074]: ** Dec 28 20:24:25 host firejail[203074]: Gtk:ERROR:../gtk/gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/breeze/status/64/image-missing.svg: Could not spawn `"bwrap" "--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr" "--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache" "--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs" "/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv" "XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000" "--symlink" "/usr/lib" "/lib" "--symlink" "/usr/lib" "/lib64" "--ro-bind-try" "/etc/fonts/conf.d" "/etc/fonts/conf.d" "--ro-bind-try" "/etc/fonts/fonts.conf" "/etc/fonts/fonts.conf" "--ro-bind-try" "~/.cache/fontconfig" "~/.cache/fontconfig" "--ro-bind-try" "/var/cache/fontconfig" "/var/cache/fontconfig" "--bind-try" "~/.cache/glycin/usr/lib/glycin-loaders/2+/glycin-svg" "~/.cache/glycin/usr/lib/glycin-loaders/2+/glycin-svg" "--setenv" "XDG_CACHE_HOME" "~/.cache/glycin/usr/lib/glycin-loaders/2+/glycin-svg" "--seccomp" "215" "/usr/lib/glycin-loaders/2+/glycin-svg" "--dbus-fd" "214"`: Permission denied (os error 13) (gdk-pixbuf-error-quark, 0) Dec 28 20:24:25 host firejail[203074]: Bail out! Gtk:ERROR:../gtk/gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/breeze/status/64/image-missing.svg: Could not spawn `"bwrap" "--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr" "--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache" "--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs" "/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv" "XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000" "--symlink" "/usr/lib" "/lib" "--symlink" "/usr/lib" "/lib64" "--ro-bind-try" "/etc/fonts/conf.d" "/etc/fonts/conf.d" "--ro-bind-try" "/etc/fonts/fonts.conf" "/etc/fonts/fonts.conf" "--ro-bind-try" "~/.cache/fontconfig" "~/.cache/fontconfig" "--ro-bind-try" "/var/cache/fontconfig" "/var/cache/fontconfig" "--bind-try" "~/.cache/glycin/usr/lib/glycin-loaders/2+/glycin-svg" "~/.cache/glycin/usr/lib/glycin-loaders/2+/glycin-svg" "--setenv" "XDG_CACHE_HOME" "~/.cache/glycin/usr/lib/glycin-loaders/2+/glycin-svg" "--seccomp" "215" "/usr/lib/glycin-loaders/2+/glycin-svg" "--dbus-fd" "214"`: Permission denied (os error 13) (gdk-pixbuf-error-quark, 0) Dec 28 20:24:25 host firejail[203074]: Redirecting call to abort() to mozalloc_abort Dec 28 20:24:25 host firejail[203074]: ExceptionHandler::GenerateDump attempting to generate: Dec 28 20:24:25 host firejail[203074]: ~/.mozilla/firefox/ik0z6bha.secure/minidumps/7eb2ea82-0639-65c9-de95-7a0fe8c8e31b.dmp Dec 28 20:24:25 host firejail[203074]: ExceptionHandler::GenerateDump cloned child 5328 Dec 28 20:24:25 host firejail[208358]: ExceptionHandler::WaitForContinueSignal waiting for continue signal... Dec 28 20:24:25 host firejail[203074]: ExceptionHandler::SendContinueSignalToChild sent continue signal to child Dec 28 20:24:25 host firejail[203074]: ExceptionHandler::GenerateDump minidump generation Dec 28 20:24:25 host firejail[203074]: failed Dec 28 20:24:25 host firejail[204780]: Exiting due to channel error. Dec 28 20:24:25 host firejail[204763]: Exiting due to channel error. Dec 28 20:24:25 host crashreporter[208359]: gtk_window_set_default_icon: assertion 'GDK_IS_PIXBUF (icon)' failed Dec 28 20:24:25 host crashreporter[208359]: Locale not supported by C library. Using the fallback 'C' locale. Dec 28 20:24:28 host crashreporter[208359]: g_object_unref: assertion 'G_IS_OBJECT (object)' failed Dec 28 20:24:28 host firejail[203017]: Parent is shutting down, bye... Dec 28 20:24:28 host systemd[1215]: app-Firefox@f5d50e2f5d944c08bac8b0ced020c622.service: Main process exited, code=exited, status=1/FAILURE Dec 28 20:24:28 host systemd[1215]: app-Firefox@f5d50e2f5d944c08bac8b0ced020c622.service: Failed with result 'exit-code'. ``` </p> </details>
gitea-mirror 2026-05-05 10:00:24 -06:00
gitea-mirror commented 2026-05-05 10:00:27 -06:00
Author
Owner
Copy link

@netblue30 commented on GitHub (Dec 30, 2025):

Probably fixed, new firejail release coming at the end of this week.

The original gpixbuf2 bug is here https://github.com/netblue30/firejail/issues/6906. It crashes most GTK applications,

<!-- gh-comment-id:3699575611 --> @netblue30 commented on GitHub (Dec 30, 2025): Probably fixed, new firejail release coming at the end of this week. The original gpixbuf2 bug is here https://github.com/netblue30/firejail/issues/6906. It crashes most GTK applications,
gitea-mirror commented 2026-05-05 10:00:27 -06:00
Author
Owner
Copy link

@kmk3 commented on GitHub (Dec 30, 2025):

Closing as a duplicate of:

If that is not the case, please clarify.

<!-- gh-comment-id:3700491105 --> @kmk3 commented on GitHub (Dec 30, 2025): Closing as a duplicate of: * #6906 If that is not the case, please clarify.
gitea-mirror commented 2026-05-05 10:00:28 -06:00
Author
Owner
Copy link

@Gerenuk commented on GitHub (Dec 31, 2025):

Where can I find the settings to fix it?

I've tried

whitelist /usr/share/glycin-loaders
noblacklist /usr/bin/bwrap
noblacklist /proc/sys/kernel/overflowuid
noblacklist /proc/sys/kernel/overflowgid

ignore seccomp !chroot
seccomp !chroot,!mount,!pivot_root,!umount2

in my firefox.local, but it didn't work.

Even worse, these settings make Firefox very slow, because it uses the CPU all the time.

<!-- gh-comment-id:3701559569 --> @Gerenuk commented on GitHub (Dec 31, 2025): Where can I find the settings to fix it? I've tried ``` whitelist /usr/share/glycin-loaders noblacklist /usr/bin/bwrap noblacklist /proc/sys/kernel/overflowuid noblacklist /proc/sys/kernel/overflowgid ignore seccomp !chroot seccomp !chroot,!mount,!pivot_root,!umount2 ``` in my firefox.local, but it didn't work. Even worse, these settings make Firefox very slow, because it uses the CPU all the time.
gitea-mirror commented 2026-05-05 10:00:29 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Dec 31, 2025):

https://github.com/netblue30/firejail/wiki/Using-firejail-from-git

<!-- gh-comment-id:3701747988 --> @rusty-snake commented on GitHub (Dec 31, 2025): https://github.com/netblue30/firejail/wiki/Using-firejail-from-git
gitea-mirror commented 2026-05-05 10:00:29 -06:00
Author
Owner
Copy link

@kmk3 commented on GitHub (Jan 2, 2026):

Can you reproduce the crash from #6906?

For example, by trying to save a page (Ctrl+S)?

What happens with firejail-git?

<!-- gh-comment-id:3706012050 --> @kmk3 commented on GitHub (Jan 2, 2026): Can you reproduce the crash from #6906? For example, by trying to save a page (Ctrl+S)? What happens with firejail-git?
gitea-mirror commented 2026-05-05 10:00:30 -06:00
Author
Owner
Copy link

@Gerenuk commented on GitHub (Jan 5, 2026):

@kmk3 Yes, I did get the same crash. And a friendly AI suggested to use the Plasma dialog instead with

env GTK_USE_PORTAL=1

noblacklist ${RUNUSER}/bus
ignore dbus-user none
dbus-user filter
dbus-user.talk org.freedesktop.portal.Desktop
dbus-user.talk org.freedesktop.portal.Documents

in my firefox.local. I like that dialog better anyway. Is that ok security-wise?

This also means I haven't really fixed the original crash issue.

However, I still observe the issue with the bookmarks and also the window minimize/maximize/close buttons have the image missing.

As I wrote, I tried some lines in my firefox.local that I've found in forums here, but that did not solve it. I'm a bit concerned that the next firejail update does not fix it for me yet.

I have not tried firejail-git, since I don't want to mess up my current firejail and I don't know how to install firejail-git in parallel. Also, AUR firejail-git seems outdated.

But I'd be happy to try out lines in firefox.local if you have a suggestion.

<!-- gh-comment-id:3710572005 --> @Gerenuk commented on GitHub (Jan 5, 2026): @kmk3 Yes, I did get the same crash. And a friendly AI suggested to use the Plasma dialog instead with ``` env GTK_USE_PORTAL=1 noblacklist ${RUNUSER}/bus ignore dbus-user none dbus-user filter dbus-user.talk org.freedesktop.portal.Desktop dbus-user.talk org.freedesktop.portal.Documents ``` in my `firefox.local`. I like that dialog better anyway. Is that ok security-wise? This also means I haven't really fixed the original crash issue. However, I still observe the issue with the bookmarks and also the window minimize/maximize/close buttons have the image missing. As I wrote, I tried some lines in my `firefox.local` that I've found in forums here, but that did not solve it. I'm a bit concerned that the next firejail update does not fix it for me yet. I have not tried firejail-git, since I don't want to mess up my current firejail and I don't know how to install firejail-git in parallel. Also, AUR firejail-git seems outdated. But I'd be happy to try out lines in `firefox.local` if you have a suggestion.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
serialize_remounts_v2
landlock_v4
landlock
release-0.9.64
release-0.9.62
gitlab_ci
LTSbase
fred_ctests
docs
0.9.80
0.9.80-rc1
0.9.78
0.9.76
0.9.76-rc4
0.9.76-rc3
0.9.76-rc2
0.9.76-rc1
0.9.74
landlock-split
0.9.72
0.9.72rc1
0.9.70
0.9.68
0.9.68rc1
0.9.66
0.9.66rc1
0.9.64.4
0.9.64.2
0.9.64
0.9.64rc1
0.9.62.4
0.9.62.2
0.9.62
0.9.56.2-LTS
0.9.60
0.9.60-rc1
0.9.58.2
0.9.58
0.9.58-rc1
0.9.56-LTS-release
0.9.56-LTS
0.9.56
0.9.56-rc1
0.9.54
0.9.54-rc2
0.9.54-rc1
0.9.52
0.9.38.12
0.9.50
0.9.50-rc1
0.9.48
0.9.46
0.9.46-rc1
0.9.44.10
0.9.44.8
0.9.44.6
0.9.38.10
0.9.44.4
0.9.38.8
0.9.44.2
0.9.44
0.9.44-rc1
0.9.38.4
0.9.42
0.9.42-rc2
0.9.38.2
0.9.42-rc1
disable-globalcfg
0.9.40
0.9.40-rc1
0.9.38
0.9.38-rc1
0.9.36
0.9.36-rc1
0.9.34
0.9.34-rc1
0.9.32
0.9.32-rc1
0.9.30
0.9.30-rc1
Labels
Clear labels   
LTS merge

   
LTS merge

   
bug

   
bug

   
converted-to-discussion

   
doc-todo

   
documentation

   
duplicate

   
enhancement

   
file-transfer

   
firecfg

   
firejail-in-firejail

   
firetools

   
graphics

   
help wanted

   
information_old

   
installation

   
invalid

   
modif

   
moved

   
needinfo

   
networking

   
notabug

   
notourbug

   
old-version

   
overlayfs

   
packaging

   
profile-request

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
question_old

   
removal

   
runtime-permissions

   
sandbox-ipc

   
security

   
stale

   
wiki

   
wiki

   
wontfix

   
wordpress

   
workaround
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3450
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?