Package: chromium
Version: 150.0.7871.46-1~deb12u1
Severity: important
X-Debbugs-Cc: [email protected]
Since 150.0.7871.46-1~deb12u1, chromium crashes with SIGTRAP within
about one second of startup when --no-first-run is on the command
line. Nothing is logged before the trap (it looks like a release-build
CHECK/NOTREACHED). Because chromedriver adds --no-first-run to every
launch by default, every chromedriver/selenium session fails with
"session not created: Chrome instance exited. Examine ChromeDriver
verbose log to determine the cause."
Reproduced on arm64 and amd64, in Docker containers based on
bookworm-slim (tested in node:24-bookworm-slim), with Xvfb as the display
server.
Reproduce (no chromedriver needed):
apt-get update && apt-get install -y chromium xvfb
Xvfb :99 -screen 0 1280x720x24 &
DISPLAY=:99 chromium --no-sandbox --disable-gpu \
--disable-dev-shm-usage --kiosk --enable-logging \
--remote-debugging-port=0 --user-data-dir=/tmp/ud \
--no-first-run "data:,"
Result: the process dies with "Trace/breakpoint trap". Removing
--no-first-run makes it start normally and write DevToolsActivePort.
A/B verification on identical stock containers, same Xvfb setup and
identical command line, only the chromium version differing:
149.0.7827.196-1~deb12u1 (from snapshot.debian.org): starts, prints
"DevTools listening on ws://127.0.0.1:...", keeps running
150.0.7871.46-1~deb12u1: Trace/breakpoint trap
Additional detail from debugging: the trap is at a fixed location,
ELF vaddr 0xaf711d8 in the arm64 binary (a "bti j; brk #0" landing
pad). The adjacent crash-annotation string in the binary is
"TemplateURLRef::HandleReplacement" (components/search_engines). The
crash also reproduces through a plain chromedriver InitSession even
when --no-first-run is removed via excludeSwitches, so there appear
to be additional triggers on the same code path; --no-first-run is
the simplest deterministic one.
Impact: any automation (selenium/chromedriver, CI, kiosk recorders)
using Debian's chromium is broken on bookworm since this version. We
are pinning 149.0.7827.196-1~deb12u1 from snapshot.debian.org as a
workaround.
