New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.
Starred by 47 users

Issue metadata

Status: WontFix
Owner:
Last visit > 30 days ago
Closed: Oct 2015
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied

Reported by bugabu...@gmail.com, Aug 7 2011 Back to list

Issue description

Chrome Version       : 15.0.845.0 (Developer Build 95552) Ubuntu 11.10

What steps will reproduce the problem?
1. start valgrind to figure a memleak on an extension

What is the expected result?
normal output logged

What happens instead?
CLI shows permission errors

G_SLICE=always-malloc G_DEBUG=gc-friendly  valgrind -v --tool=memcheck --leak-check=full --num-callers=40 --log-file=/tmp/valgrind%p.log

[4102:4102:208786571:ERROR:content_settings_pref_provider.cc(985)] Invalid pattern strings: ,*
[3:3:209218866:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[6:6:209331990:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied

 
Labels: -Area-Undefined Area-Internals Internals-Network-SSL Stability-Valgrind OS-Linux
Do you run into this without valgrind? What are the file permissions on libsoftokn3.so? 
$ mlocate  libsoftokn3.so
/usr/lib/firefox-6.0/libsoftokn3.so
/usr/lib/firefox-trunk-8.0a1/libsoftokn3.so
/usr/lib/thunderbird-6.0/libsoftokn3.so
/usr/lib/x86_64-linux-gnu/nss/libsoftokn3.so
/usr/lib32/nss/libsoftokn3.so

$ ll /usr/lib/firefox-6.0/libsoftokn3.so /usr/lib/firefox-trunk-8.0a1/libsoftokn3.so /usr/lib/thunderbird-6.0/libsoftokn3.so /usr/lib/x86_64-linux-gnu/nss/libsoftokn3.so /usr/lib32/nss/libsoftokn3.so
-rw-r--r-- 1 root root 223K 2011-04-20 15:01 /usr/lib32/nss/libsoftokn3.so
-rw-r--r-- 1 root root 239K 2011-08-05 22:23 /usr/lib/firefox-6.0/libsoftokn3.so
-rw-r--r-- 1 root root 239K 2011-08-04 16:32 /usr/lib/firefox-trunk-8.0a1/libsoftokn3.so
-rw-r--r-- 1 root root 237K 2011-08-01 11:19 /usr/lib/thunderbird-6.0/libsoftokn3.so
-rw-r--r-- 1 root root 265K 2011-05-17 16:01 /usr/lib/x86_64-linux-gnu/nss/libsoftokn3.so

Comment 3 by wtc@chromium.org, Aug 9 2011

Cc: hclam@chromium.org wtc@chromium.org
hclam: does this error message come from your code, which tries to initialize NSS
in a sandbox?  I think it's unlikely because I don't think your code is enabled by
default.

Comment 4 by mccfr...@gmail.com, Aug 11 2011

I get this on every startup.


Google Chrome	14.0.835.35 (Official Build 96116) dev
OS	Linux
WebKit	535.1 (branches/chromium/835@92745)
JavaScript	V8 3.4.14.10
Flash	10.3 r183
User Agent	Mozilla/5.0 (X11; Linux i686) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.835.35 Safari/535.1
Command Line	 /usr/bin/google-chrome --flag-switches-begin --flag-switches-end
Executable Path	/opt/google/chrome/google-chrome
Profile Path	/home/frank/.config/google-chrome/Default


my .xsessions.error  log


[11:11:5109083061:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[15:15:5109327503:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[19:19:5111415067:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[25:25:5240409363:ERROR:nss_util.cc(397)]  database: libsoftokn3.so: cannot open shared Error initializing NSS without a persistentobject file: Permission denied

My libraries:

/home/frank/firefox/libsoftokn3.so
/opt/firefox/libsoftokn3.so
/opt/thunderbird/libsoftokn3.so
/usr/lib/i386-linux-gnu/nss/libsoftokn3.so

Permissions are as the original reporter



Comment 5 by f...@sofaraway.org, Aug 15 2011

Status: Untriaged (was: NULL)
Same here, on Ubuntu Oneiric.

[3:3:442308411676:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied

That's with my ubuntu dailies.
I bisected it to [ 15.0.840.0~svn20110801r94864 .. 15.0.841.0~svn20110802r95030 ]
There's no packaging changes in this interval.

$ locate libsoftokn3.so | xargs ls -l
-rwxr-xr-x 1 root root 566200 2011-05-17 16:49 /usr/lib/debug/usr/lib/i386-linux-gnu/nss/libsoftokn3.so
-rw-r--r-- 1 root root 264024 2011-08-10 04:29 /usr/lib/firefox-6.0/libsoftokn3.so
-rw-r--r-- 1 root root 264684 2011-05-17 16:49 /usr/lib/i386-linux-gnu/nss/libsoftokn3.so

$ locate libsoftokn3.so | xargs dpkg -S
libnss3-dbgsym: /usr/lib/debug/usr/lib/i386-linux-gnu/nss/libsoftokn3.so
firefox: /usr/lib/firefox-6.0/libsoftokn3.so
libnss3: /usr/lib/i386-linux-gnu/nss/libsoftokn3.so

for the records, that's with libnss3 version 3.12.9+ckbi-1.82-0ubuntu4
(https://edge.launchpad.net/ubuntu/+source/nss)
but a/ it's 13 weeks old and b/ i can reproduce just by up/downgrading chromium without touching anything else on my otherwise-up-to-date system.

Looking at http://build.chromium.org/f/chromium/perf/dashboard/ui/changelog.html?url=/trunk/src&range=94864:95030,
only http://src.chromium.org/viewvc/chrome?view=rev&revision=94989 is related to NSS.

(it's not related to valgrind at all)
Labels: -Stability-Valgrind Mstone-16
Owner: hclam@chromium.org
Status: Assigned (was: NULL)
@hclam, could you respond to wtc@'s question in comment #3?

Comment 7 by wtc@chromium.org, Aug 22 2011

Owner: wtc@chromium.org
mccfr...: which Linux distribution (and its version) are you using?

fta: I cannot reproduce this error message on Ubuntu Lucid 10.04, so
I need your help to track this down.  The original bug reporter said
he had Ubuntu 11.10.  Is that the same as Ubuntu Oneiric?

The code that emits this error message is in src/crypto/nss_util.cc:

394     if (nodb_init) {
395       status = NSS_NoDB_Init(NULL);
396       if (status != SECSuccess) {
397         LOG(ERROR) << "Error initializing NSS without a persistent "
398                       "database: " << GetNSSErrorMessage();
399       }

On Linux, nodb_init is true only if crypto::ForceNSSNoDBInit() is called.
crypto::ForceNSSNoDBInit() is only called in
src/chrome/renderer/chrome_render_process_observer.cc, on line 377:

371 #if defined(OS_POSIX) && !defined(OS_MACOSX) && defined(USE_NSS)
372   // Remoting requires NSS to function properly.
373   if (!command_line.HasSwitch(switches::kSingleProcess)) {
374     // We are going to fork to engage the sandbox and we have not loaded
375     // any security modules so it is safe to disable the fork check in NSS.
376     crypto::DisableNSSForkCheck();
377     crypto::ForceNSSNoDBInit();
378     crypto::EnsureNSSInit();
379 
380     // Disable OCSP. OCSP needs to make HTTP requests, and currently
381     // it doesn't work in sandbox. SSL is used in renderer process
382     // only for peer-to-peer connections with self-signed certs. OCSP
383     // is not useful in this case, thus it is safe to disable it.
384     net::DisableOCSP();
385   }

Could you set a breakpoint at the LOG(ERROR) statement on nss_util.cc:397
and get the stack trace when the breakpoint is hit?  I wonder if the call
stack contains the crypto::EnsureNSSInit() call shown above, on
chrome_render_process_observer.cc:378.

Thank you for your help.
Yep, oneiric is 11.10!
Let me know if you guys need anything else.
I can send logs of today's *build*

Comment 9 by wtc@chromium.org, Aug 22 2011

ferna...: thank you.  Right now I need someone to confirm with
gdb that the error message comes from the crypto::EnsureNSSInit()
call at src/chrome/renderer/chrome_render_process_observer.cc:378.

If that's confirmed, then I can ask hclam to assess how serious
it is for that crypto::EnsureNSSInit() call to fail.  In parallel,
we (fta or someone else) need to track down why that
crypto::EnsureNSSInit() call cannot load libsoftokn3.so.  The
source code comment seems to imply that the sandbox has not engaged
yet at that point.
I'll install gdb package and try to debug it in single instance.
If you have a full set of debug instructions, feel free to tell me
15.0.860.0~svn20110821r97598-0ubuntu1~ucd1


$ $(mktemp -d)";chromiumdiskcache="$(mktemp -d)";chromium-browser --user-data-dir=$chromiumdatadir --disk-cache-dir=$chromiumdiskcache -g
[3:3:796209175:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[6:6:796279883:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied

Comment 12 by evan@chromium.org, Aug 22 2011

Just wanted to note that

[3:3:209218866:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied

The initial "3" in the log message is the PID.  The low PID here is almost certainly due to the PID namespace used in the renderer sandbox, which means that yes, this code is running within the sandbox. 


Line 394 in chrome_render_process_observer.cc indicates that this function already is within the sandbox:
  // Note that under Linux, the media library will normally already have
  // been initialized by the Zygote before this instance became a Renderer.

Comment 13 by Deleted ...@, Aug 28 2011

This is a Debian multiarch issue, IMO. Please install libnss3-1d from Debian Sid and try starting Chromium again, maybe this already helps.
matthi while running a devel version of Ubuntu, i dont feel very confortable going out of it's repos to a debian package
FYI Ubuntu has  3.12.9+ckbi-1.82-0ubuntu4

Comment 15 by cy8...@gmail.com, Sep 19 2011

I have the problem too. libnss3-1d is installed. No change of the problem. Version 14.0.835.163

Comment 16 by Deleted ...@, Sep 20 2011

This glitch breaks http_proxy= support in Chromium 14.0.835.126 (Developer Build 99097 Linux) on Ubuntu 11.10 Oneiric.

I did the upgrade to the Xubuntu beta and noticed this ticket. Installing the multiarch packages does not resolve the problem.

Comment 17 by Deleted ...@, Sep 20 2011

On Chrome 13 no problem but when installing v14 or v15 the error's back.
Still waiting for a solution.
This happens also on Debian sid with chromium 14.0.835.163~r101024-1

Comment 19 by Deleted ...@, Sep 21 2011

Only when you use "PERSISTENT" with v14 and also v15

Comment 20 by Deleted ...@, Sep 28 2011

don't know if this is relevant here but I have this too on debian with google-chrome-unstable. 
it happens I guess cause I'm trying to get java to run in chrome.

Google Chrome 15.0.874.21 dev

Linux kompjoeter 2.6.31.6 #1 SMP Sun Mar 21 16:19:26 CET 2010 x86_64 GNU/Linux
i am also expieriencing on linux mint debian ed

startup
 $ google-chrome
[3:3:4046414245:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[7:7:4046453980:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[4:4:4046461336:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[10:10:4046513643:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[18:18:4047474605:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[21:21:4047668852:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[24:24:4047849128:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[4483:4483:4049121134:ERROR:extension_prefs.cc(955)] Bad or missing pref 'state' for extension 'picdndbpdnapajibahnnogkjofaeooof'


$ uname -a
Linux travis-laptop 3.0.0-1-686-pae #1 SMP Sun Jul 24 14:27:32 UTC 2011 i686 GNU/Linux

$ dpkg -l google*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name           Version        Description
+++-==============-==============-============================================
un  google-chrome  <none>         (no description available)
ii  google-chrome- 14.0.835.186-r The web browser from Google


strace google-chrome
210 KB View Download
i have it too

(chromium-browser:7038): GdkPixbuf-CRITICAL **: gdk_pixbuf_new_from_data: assertion `width > 0' failed
[7038:7038:1995653778:ERROR:browser_main.cc(573)] Gdk: IA__gdk_cursor_new_from_pixbuf: assertion `GDK_IS_PIXBUF (pixbuf)' failed
[7038:7038:1995653865:ERROR:browser_main.cc(573)] GLib-GObject: g_object_unref: assertion `G_IS_OBJECT (object)' failed
[1957:1957:1999729309:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[3635:3635:2423772366:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied

15.0.865.0 (Сборка для разработчиков 98568 Linux) Ubuntu 11.10

Comment 23 by Deleted ...@, Sep 30 2011

me too on mint LDME
[3:3:2423065110:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied

Labels: -Mstone-16 Mstone-15 Merge-Requested
Fixed in http://crrev.com/104421 .  Request approval for merge to M15.

Comment 25 by wtc@chromium.org, Oct 7 2011

Owner: lambroslambrou@chromium.org
Status: Started (was: NULL)
kareng: I support merging the fix to M15. The fix is safe and will
eliminate an error message that has confused many users, and a crash
if Chromoting is used (see  bug 99053 ).  The fix affects Linux only.

Comment 26 by kareng@google.com, Oct 10 2011

Labels: -Merge-Requested Merge-Approved
okie ;)
Project Member

Comment 27 by bugdroid1@chromium.org, Oct 10 2011

Labels: -merge-approved merge-merged-874
Summary: ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied (was: NULL)
The following revision refers to this bug:
    http://src.chromium.org/viewvc/chrome?view=rev&revision=104798

------------------------------------------------------------------------
r104798 | lambroslambrou@google.com | Mon Oct 10 15:14:15 PDT 2011

Changed paths:
 M http://src.chromium.org/viewvc/chrome/branches/874/src/crypto/nss_util.cc?r1=104798&r2=104797&pathrev=104798

Merge 104421 - Fix library paths for preloading NSS on Ubuntu 11.10.


BUG= 99053 , 91962 
TEST=Manual


Review URL: http://codereview.chromium.org/8143012

TBR=lambroslambrou@chromium.org
Review URL: http://codereview.chromium.org/8216025
------------------------------------------------------------------------

Comment 28 by gcies...@gmail.com, Oct 18 2011

I hate to jump into this because I don't really understand what's going on, but I'm on 11.10 and have gotten the error message you're referring to. Any idea on how I can fix it?
not a solution, but the browser that assembly work --> http://commondatastorage.googleapis.com/chromium-browser-continuous/index.html

Comment 30 by tagr...@gmail.com, Oct 18 2011

This error seems to happen on chromium 15.0.871.0 (Developer Build 99583 Linux) Built on Ubuntu 11.04, running on Ubuntu 11.10

The command fills the console with repeated

[XX:XX:XXXXXXXXX:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied

This is without running valgrind

Comment 31 by dmasc...@gmail.com, Oct 19 2011

You can do an evil work-around (until the next build is ready) for this by symlinking the nss libraries into /usr/lib/nss:

# ln -s /usr/lib/x86_64-linux-gnu/nss/ /usr/lib/nss


Workaround in #31 works, but I have a 32-bit machine so had to change it to:

# ln -s /usr/lib/i386-linux-gnu/nss/ /usr/lib/nss
I am also experiencing this bug. Many seem to be using Ubuntu 11.10 (oneiric), so I followed a launchpad bug at https://bugs.launchpad.net/chromium-browser/+bug/881607
> Workaround in #31 works, but I have a 32-bit machine so had to change it to:

> # ln -s /usr/lib/i386-linux-gnu/nss/ /usr/lib/nss

Its work, very big thanks man

Comment 35 by inani...@gmail.com, Nov 13 2011

Same for me on oneiric. I start from the command line
chromium-browser --prox-server=localhost:3128
and I see the messages scrolling on my terminal.


[94:94:57785475228:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[98:98:57786977353:ERROR:nss_util.cc(397)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied

Status: Fixed (was: NULL)
http://crrev.com/104421 should have fixed this.  For those people still seeing the problem, please check your browser's version (Chromium build >= 104421, or Chrome version >= 15).

Comment 37 by thakis@google.com, Dec 5 2011

 Issue 96026  has been merged into this issue.
Problem still appears on Debian Sid as of 16 Dec, 2011.

$ chromium
[3:3:2996560378:ERROR:nss_util.cc(394)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[6:6:2996618242:ERROR:nss_util.cc(394)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[9:9:2996644655:ERROR:nss_util.cc(394)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied
[14:14:2996985718:ERROR:nss_util.cc(394)] Error initializing NSS without a persistent database: libsoftokn3.so: cannot open shared object file: Permission denied

$ apt-cache policy chromium-browser
chromium-browser:
  Installed: 15.0.874.121~r109964-1
  Candidate: 15.0.874.121~r109964-1
  Version table:
 *** 15.0.874.121~r109964-1 0
        500 http://mirrors.usc.edu/pub/linux/distributions/debian/ sid/main amd64 Packages
        100 /var/lib/dpkg/status

Thanks for the info.  It would be useful to know where libsoftokn3.so lives on your system.  Have a look in /usr/lib/nss or one of the locations from the patch: http://codereview.chromium.org/8143012/diff/12001/crypto/nss_util.cc

Or try
dpkg -S libsoftokn3.so

At r109964 (on the m15 branch), I believe your browser has the patch, so something else might be going on here.

I also have installed chromium from debian sid (15.0.874.121~r109964-1).
libsoftokn3.so is in /usr/lib/x86_64-linux-gnu/nss/libsoftokn3.so

Starting chromium log the same message to the console, however I couldn't find any problems, so what does that library do? (What should be broken without it?)

I tried to link /usr/lib/x86_64-linux-gnu/nss to /usr/lib/nss, however after doing that chromium does not work: nothing is logged to the console any more (no errors, but also no "Started GoogleTalkPlugin, path=/opt/google/talkplugin/GoogleTalkPlugin" and the like), and all my restored tabs show this "broken" message.
I removed the link again, so I can use chromium again now.
Labels: Feature-Chromoting
Status: Assigned (was: NULL)
It looks as if there's something new going on here, so I've reopened this for now.

I understand that normal browsing is unaffected, and I think it's still possible to browse encrypted (https) websites (please could someone confirm this?)

However, I believe this breaks Chromoting (Chrome Remote Desktop), and possibly other Chrome extensions/apps/plugins.  So I've tagged this with Feature-Chromoting.

Comment 42 by wtc@chromium.org, Dec 19 2011

lambroslambrou: can you find the chromium command-line option that enables
this VLOG(3) statement at the end of LoadNSSLibraries() in nss_util.cc?

  if (loaded == libs.size()) {
    VLOG(3) << "NSS libraries loaded.";
  } else {
    LOG(ERROR) << "Failed to load NSS libraries.";
  }

Then, we can ask t.riemenschneider to run chromium with that command-line
option and see if NSS libraries are successfully loaded.
With a local Debug build of chromium, just adding --v=3 switches on the extra logging.  I don't know how Debian Sid's build will behave, but this page has info on how to increase logging:
http://www.chromium.org/for-testers/enable-logging

I think this command ought to work for Debian Sid, please give it a try:

chromium-browser --enable-logging --v=3

You'll know if you've turned it on, as there will be lots of "VERBOSE1" messages on the console, or in somewhere like ~/.config/chromium/chrome_debug.log .  The message we're looking for will be at "VERBOSE3" level.


I did that now, it logs "Failed to load NSS libraries." (so it's the else-path in that if)

The reason is, that Debian reverted the Ubuntu-multipath-patch, see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=647992 for reference.

It was reverted because of the "Aw, shucks!"-message that I noticed with the symlink.
see ==> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651912

(Another user was hit by this on a backported system, where the nss-libraries actually reside in /usr/lib/nss (instead of /usr/lib/<architecture>/nss , which was "worked around" by removing/mangling even /usr/lib/nss , that is preventing loading of nss-libraries )

As I stated above, surfing works fine without nss (even https), so for now I will ignore these messages ( I came to this bug by searching for "Error initializing NSS ..." to find out if they pose a problem, or not....)
This is making my head spin!  Am I right in thinking that Debian deliberately cripples the loading of NSS in chromium (either by patching their chromium build, or by moving the location of the NSS modules)?  Is this because they are seeing an "Aw, shucks" message if NSS is enabled?

wtc: do you happen to know anything about the underlying "Aw, shucks" problem that Debian is trying to avoid?  Is it fixed in newer versions of chrome (or libnss)?  Is it something that might affect Ubuntu or other distros in future?

If Debian is deliberately breaking NSS in Chrome (perfectly understandable if it avoids a crash), this will unfortunately break Chromoting (among other things).

Comment 46 by gland...@gmail.com, Jan 28 2012

libsoftokn3 has been under a nss/ subdirectory since 3.12.0~1.9b1-1, released in november 2007. In other words, it has been this way since before Chrome was released to the public. The only thing that changed since then is that now, instead of the base directory being /usr/lib, it now is /usr/lib/$multiarch, where $multiarch depends on the architecture. This change has nothing to do with Chrome, and has not been done to break Chrome. It has been done to be able to install multiple variants of nss for different architectures (most notably, x86 AND x86-64).

Comment 47 by wtc@chromium.org, Jan 31 2012

t.riemenschneider: thanks a lot for the info.

lambroslambrou: I'm sorry I missed your question for me in comment 45.
We should understand why NSS crashes in a renderer process on Debian
but seems to work fine on Ubuntu.  I don't know what difference between
Debian and Ubuntu caused this.


Comment 48 by hclam@chromium.org, Mar 20 2012

Labels: -Mstone-15 Mstone-18

Comment 49 by hclam@chromium.org, Mar 20 2012

Labels: -Mstone-18 Mstone-19

Comment 50 by w...@chromium.org, Mar 20 2012

Labels: -Mstone-19 Mstone-21
Owner: ----
Status: Available (was: NULL)

Comment 51 by jrnieder@gmail.com, May 26 2012

> We should understand why NSS crashes in a renderer process on Debian
> but seems to work fine on Ubuntu.

This is tracked in Debian at <http://bugs.debian.org/651912>.  The
stack signature matched  issue 21540 , if I remember correctly.

There was also some discussion on launchpad at some point indicating
that packagers on Ubuntu had run into the same problem.  I don't know
how they resolved it --- maybe a libc or nss change took care of it.
jrnieder: Does this repro with the latest Chromium version?

I'm curious if some sandbox+NSS related changes (http://crrev.com/132106 in particular) recently fixed this. 

Comment 53 by jrnieder@gmail.com, May 26 2012

Awesome!  That did it. :)

I'll go bug the Debian chromium maintainers to back out the
workaround now.

Comment 54 by jrnieder@gmail.com, May 26 2012

Wait, something else did it.

I wasn't able to reproduce the problem in current Debian sid.  I mean, not at all --- I couldn't even get the "cannot open shared object file" file from not being able to find libsoftok3.so in /usr/lib/nss.

Luckily, downgrading Debian libnss3-1d from 2:3.13.4-2 to 3.13.4-1 brought the ERROR:nss_util.cc ( issue 91962 ) back.

Having gotten that far, I set LD_LIBRARY_PATH and made a /usr/lib/nss -> i386-linux-gnu/nss symlink for good measure to make sure chromium could find the NSS plugins.  Sure enough, the warning went away. Even better, no "Aw, snap".  Promising.

Except that in this configuration there is no "Aw, snap" even with old versions of chromium 16 that had produced it before.

Downgrading Debian libnspr4-0d from 2:4.9-2 to 4.9-1 brings the renderer crashes ("Aw snap",  issue 21540 ) back.

Changelogs, for reference:
http://packages.debian.org/changelogs/pool/main/n/nspr/current/changelog
http://packages.debian.org/changelogs/pool/main/n/nss/current/changelog

Whatever "Move to unversioned library" means (what version went away? soname? pathname? package name? something else?), it seems to have done a good job of fixing things.

Comment 55 by wtc@chromium.org, May 26 2012

jrnieder: thank you for the info.

The "unversioned library" in the Debian nspr and nss package changelogs
refers to not adding the ".0d" or ".1d" suffix to .so file names.  For
example,

/usr/lib/x86_64-linux-gnu/libnss3.so.1d is a "versioned" library.
/usr/lib/x86_64-linux-gnu/libnss3.so    is an "unversioned" library.

Note that the "3" in "libnss3.so" is the NSS major version number,
so "libnss3.so" is already versioned, but in a nonstandard way.
The Debian changelogs are referring to the version number suffix
after the ".so".

Comment 56 by jrnieder@gmail.com, May 26 2012

Any time.

I think it's referring to the soname rather than the filename, since version
3.13.4-1 already has a symlink libnss3.so -> libnss3.so.1d.

$ wget http://snapshot.debian.org/archive/debian/20120429T153651Z/pool/main/n/nss/libnss3-1d_3.13.4-1_i386.deb
$ dpkg-deb --contents libnss3-1d_3.13.4-1_i386.deb | grep nss3.so

-rw-r--r-- root/root   1320816 2012-04-29 04:04 ./usr/lib/i386-linux-gnu/libnss3.so.1d
lrwxrwxrwx root/root         0 2012-04-29 04:04 ./usr/lib/i386-linux-gnu/libnss3.so -> libnss3.so.1d

Comment 57 by w...@chromium.org, Jun 12 2012

Labels: -Feature-Chromoting

Comment 58 by wtc@chromium.org, Jun 21 2012

Labels: -Mstone-21 Mstone-22
Owner: wtc@chromium.org
Status: Assigned (was: NULL)

Comment 59 by k...@google.com, Aug 31 2012

Labels: -Mstone-22 MovedFrom-22 Mstone-23
Moving all non-blocking 22 issues to 23.

Comment 60 by kareng@google.com, Nov 20 2012

Labels: -Mstone-23 MstoneRemoved
Bugs that have been moved 5 or more times. Removing Mstone label.

Comment 61 by kareng@google.com, Nov 20 2012

Bugs that have been moved 5 or more times. Removing Mstone label.
Project Member

Comment 62 by bugdroid1@chromium.org, Mar 10 2013

Labels: -Area-Internals -Internals-Network-SSL Cr-Internals Cr-Internals-Network-SSL

Comment 63 by laforge@google.com, Apr 28 2015

Cc: -wtc@chromium.org
Labels: Hotlist-Recharge
This issue likely requires triage.  The current issue owner may be inactive (i.e. hasn't fixed an issue in the last 30 days or commented in this particular issue in the last 90 days).  Thanks for helping out!

-Anthony
Status: WontFix (was: NULL)
Closing. With remoting out of the renderer process, the logic around NSS_NoDB_Init is gone. Linux never calls that function anymore.

Sign in to add a comment