Package: firefox
Version: 1.0.7-1
Severity: normal

When Firefox executes external programs, it passes to them all file
descriptors it has open. This is undesirable, especially in the case of
/dev/dsp, since two programs cannot use it at the same time. This bug is
present in version 1.5, as well.


Steps to reproduce:

* Install flash plugin from Macromedia.

* Open some flash file that plays sound. Firefox should now have /dev/dsp
  open:

$ lsof /dev/dsp
COMMAND     PID  USER   FD   TYPE DEVICE SIZE NODE NAME
firefox-b 25038 hippy   43u   CHR   14,3      2144 /dev/dsp0

* Without closing the flash, ask Firefox to open some file in an external
  program. We can, for an example, open a pdf file in xpdf. Firefox will
  pass its file descriptors to xpdf:

$ lsof /dev/dsp
COMMAND     PID  USER   FD   TYPE DEVICE SIZE NODE NAME
xpdf.bin  17363 hippy   28u   CHR   14,3      2144 /dev/dsp0
firefox-b 25038 hippy   28u   CHR   14,3      2144 /dev/dsp0


Expected behaviour:

Firefox shouldn't pass any file descriptors other than
std{in,out,err} to external programs.

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (x86_64)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.15
Locale: LANG=C, LC_CTYPE=pl_PL.UTF8 (charmap=UTF-8)

Versions of packages mozilla-firefox depends on:
ii  debianutils              2.15.2          Miscellaneous utilities specific t
ii  fontconfig               2.3.2-1.1       generic font configuration library
ii  libatk1.0-0              1.10.3-1        The ATK accessibility toolkit
ii  libc6                    2.3.5-8         GNU C Library: Shared libraries an
ii  libfontconfig1           2.3.2-1.1       generic font configuration library
ii  libfreetype6             2.1.7-2.4       FreeType 2 font engine, shared lib
ii  libgcc1                  1:4.0.2-5       GCC support library
ii  libglib2.0-0             2.8.5-1         The GLib library of C routines
ii  libgtk2.0-0              2.8.9-2         The GTK+ graphical user interface
ii  libidl0                  0.8.5-1         library for parsing CORBA IDL file
ii  libjpeg62                6b-11           The Independent JPEG Group's JPEG
ii  libkrb53                 1.4.3-5         MIT Kerberos runtime libraries
ii  libpango1.0-0            1.10.1-2        Layout and rendering of internatio
ii  libpng12-0               1.2.8rel-5      PNG library - runtime
ii  libstdc++6               4.0.2-5         The GNU Standard C++ Library v3
ii  libx11-6                 6.8.2.dfsg.1-11 X Window System protocol client li
ii  libxext6                 6.8.2.dfsg.1-11 X Window System miscellaneous exte
ii  libxft2                  2.1.7-1         FreeType-based font drawing librar
ii  libxinerama1             6.8.2.dfsg.1-11 X Window System multi-head display
ii  libxp6                   6.8.2.dfsg.1-11 X Window System printing extension
ii  libxt6                   6.8.2.dfsg.1-11 X Toolkit Intrinsics
ii  psmisc                   21.8-1          Utilities that use the proc filesy
ii  xlibs                    6.8.2.dfsg.1-11 X Window System client libraries m
ii  zlib1g                   1:1.2.3-9       compression library - runtime

mozilla-firefox recommends no packages.

-- no debconf information

Reply via email to