1941119 - [Wayland] Firefox crashes after drag and drop file into a website (wl_data_offer unknown object)

Status: RESOLVED DUPLICATE of bug 1949726

(Core :: Widget: Gtk, defect, P2)

Description

[loxoron218]

Attachment: bugreport.txt

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0

Steps to reproduce:

I tried to drag and drop an image on gitlab.com and Firefox crashes 9 out of 10 times.

1. Select a file on GNOME's Nautilus (Linux) and drag it to the upload area on the website
2. Wait a second until the website recognizes the action (on GitLab it shows a paper clip that symbolizes that we can drop) and drop the file
3. It crashes
4. When trying it immediately after crashing (fresh start), the first time dragging and dropping still doesn't work, but at least it doesn't crash. The second time it crashes again.

Actual results:

Drag and drop doesn't work or (mostly) crashes.

I've experienced this on almost every website that allows drag and drop. Didn't bother to report the bug, because uploading via file manager selector always worked.

Expected results:

Upload the file to the website without crashing

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::Widget: Gtk' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Martin Stránský [:stransky] (ni? me)]

Is that a recent regression? Did you see that before?

Please try latest nightly with fresh profile:
https://fedoraproject.org/wiki/How_to_debug_Firefox_problems#Testing_Mozilla_Nightly_binaries

And if you can reproduce the crash, please submit them (see the about:crashes section):
https://fedoraproject.org/wiki/Debugging_guidelines_for_Mozilla_products#Using_Mozilla_crash_reporter

Thanks.

Comment 3

[loxoron218]

I tried the latest Firefox nightly version available on my system ( Arch Linux - Choatic AUR - 136.0a1 ) and the problem was still there.

Here is my crash log:
https://crash-stats.mozilla.org/report/index/6faefe66-e601-46a0-87b2-3ff6b0250113

Comment 4

[loxoron218]

And I wouldn't consider this a regression. I've been experiencing this for quite a long time, through different FIrefox versions.

Comment 5

[Martin Stránský [:stransky] (ni? me)]

That's interesting, Thanks.

Can you please run Firefox on terminal as:

WAYLAND_DEBUG=1 MOZ_LOG="WidgetDrag:5 WidgetPopup:5" firefox > log.txt 2>&1

reproduce the crash and attach the log here?

Looks like there's a problem with D&D popup rendering and we're using wrong wayland object (perhaps wl_surface or so?).
Thanks.

Comment 6

[loxoron218]

https://crash-stats.mozilla.org/report/index/36f130b3-d2f5-4703-b28d-a53710250116

Comment 7

[Martin Stránský [:stransky] (ni? me)]

I need you to attach the log.txt file here which is produced by the terminal command I posted at comment 5.
Thanks.

Comment 8

[loxoron218]

Attachment: log.txt

Comment 9

[loxoron218]

(In reply to Martin Stránský [:stransky] (ni? me) from comment #7)

I need you to attach the log.txt file here which is produced by the terminal command I posted at comment 5.
Thanks.

I just attached it :)

Comment 10

[Martin Stránský [:stransky] (ni? me)]

Thanks a lot. This crashreport is very important as it catches one of top Firefox/Wayland crashes we see (Bug 1890074). I wonder how to reproduce it locally as I can't. Do you mind to create a screencast of it for instance? How do you reproduce it?
https://fedoraproject.org/wiki/How_to_debug_Firefox_problems#Create_screenshot/screencast_for_a_bug_report
Thanks.

Comment 11

[Martin Stránský [:stransky] (ni? me)]

There's the related part of Wayland log:

[2217104.163] {Default Queue}  -> wl_data_offer#4278190080.set_actions(7, 2)
[2217104.178] {Default Queue}  -> wl_data_offer#4278190080.finish()
[2217104.189] {Default Queue}  -> wl_data_offer#4278190080.destroy()
[...]
[GFX1-]: (gnome) Wayland protocol error: unknown object (4278190080), message error(ous)

I wonder where and how is the wl_data_offer#4278190080 reused so we see the unknown object message. It's not present in the log.

Comment 12

[The 8472]

I have previously reported a similar issue under sway, bug 1792754 but back then the wayland proxy didn't exist.

Comment 13

[Martin Stránský [:stransky] (ni? me)]

Okay, will try google images / nemo combination.

Comment 14

[loxoron218]

Attachment: Firefox.mp4

Comment 15

[loxoron218]

I just attached a screencast of mine using Firefox and reproducing the crash. Hopefully it helps and I didn't leak any private data :)

Comment 16

[Martin Stránský [:stransky] (ni? me)]

Thanks! So do I understand correctly that you copy/paste the file from Open file dialog? Do you use any containerized/sandboxed Firefox like Snap/Flatpak? Please attach your about:support page.

Comment 17

[Martin Stránský [:stransky] (ni? me)]

Ahh I see, you do the D&D operation from file manager opened by Firefox from download folder, right?

Comment 18

[loxoron218]

Yes, Firefox only breaks when drag and dropping. When uploading a file via the "Open file" dialog (as I did to upload the video), it works perfectly.

I'm not using a containerized package, but I'm quite sure it broke too when I was using the Flatpak version a couple of months ago.

I just attached a file with my about:support info.

Comment 19

[loxoron218]

Attachment: support.txt

Comment 20

[Martin Stránský [:stransky] (ni? me)]

Thanks. I can reproduce it too...it's interesting. I suspect it's more Gtk3 bug than Firefox one. Looks like the wl_data_offer is deleted too early.

Comment 21

[Raul Bucata]

This happens for me on Windows as well, using the latest version of Firefox Nightly, but not on the Release version or Beta version, even on the homepage when launching Firefox.

Crash report ID: 06fff818-1fee-4314-aa92-5dc920250205
Crash report link: https://crash-stats.mozilla.org/report/index/06fff818-1fee-4314-aa92-5dc920250205

Tested with:

Browser / Version: Firefox Release 135.0 (64-bit)/ Firefox Nightly 137.0a1 (2025-02-04) (64-bit) /Firefox Beta 135.b1 (64-bit)
Operating System: Windows 10 PRO x64

Comment 22

[Stéphane Guillou]

I experience what I think is the same thing, since a few versions ago. Crashes directly when drag-and-dropping a file from the GNOME file browser into a website's preexisting "drop zone", or one that appears automatically e.g. when attaching something to an email on Outlook Web.

I tried reproducing with Firefox launched with:

WAYLAND_DEBUG=1 MOZ_LOG="WidgetDrag:5 WidgetPopup:5" firefox > log.txt 2>&1

... as suggested in comment 5, but couldn't crash it as the drop zone would just refuse to "take" the file.

System details

Firefox version: 134.0.2

Hardware Information:

• Hardware Model: TUXEDO N230WU
• Memory: 32.0 GiB
• Processor: Intel® Core™ i7-8550U × 8
• Graphics: Intel® UHD Graphics 620 (KBL GT2)

Software Information:

• Firmware Version: 1.07.12
• OS Name: Ubuntu 24.04.2 LTS
• OS Type: 64-bit
• GNOME Version: 46
• Windowing System: Wayland
• Kernel Version: Linux 6.8.0-53-generic

apt-cache show mutter | grep Version
Version: 46.2-1ubuntu0.24.04.5
Version: 46.0-1ubuntu9

Comment 23

[Martin Stránský [:stransky] (ni? me)]

Bug 1949726 may help here.