1072891 - Crash @xul!mozilla::WMFVideoMFTManager::WMFVideoMFTManager+ed

Status: RESOLVED WORKSFORME

(Core :: Audio/Video, defect)

Description

[Carsten Book [:Tomcat]]

found via bughunter:

Steps to reproduce: 
-> Load http://bethelmusic.com/you-make-me-brave
-> Debug Build on Windows 7 Crashes/exists

Windbg data:

FAULTING_IP: 
xul!mozilla::WMFVideoMFTManager::WMFVideoMFTManager+ed [c:\users\mozilla\debug-builds\mozilla-central\content\media\fmp4\wmf\wmfvideomftmanager.cpp @ 50]
572b85ed c705000000007b000000 mov dword ptr ds:[0],7Bh

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 572b85ed (xul!mozilla::WMFVideoMFTManager::WMFVideoMFTManager+0x000000ed)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000001
   Parameter[1]: 00000000
Attempt to write to address 00000000

CONTEXT:  00000000 -- (.cxr 0x0;r)
eax=00000000 ebx=00000000 ecx=5c56e0c2 edx=00000015 esi=01ca08e8 edi=00000000
eip=572b85ed esp=0240f46c ebp=0240f470 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010206
xul!mozilla::WMFVideoMFTManager::WMFVideoMFTManager+0xed:
572b85ed c705000000007b000000 mov dword ptr ds:[0],7Bh ds:0023:00000000=????????

FAULTING_THREAD:  00000a44

DEFAULT_BUCKET_ID:  NULL_POINTER_WRITE

PROCESS_NAME:  firefox.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  00000001

EXCEPTION_PARAMETER2:  00000000

WRITE_ADDRESS:  00000000 

FOLLOWUP_IP: 
xul!mozilla::WMFVideoMFTManager::WMFVideoMFTManager+ed [c:\users\mozilla\debug-builds\mozilla-central\content\media\fmp4\wmf\wmfvideomftmanager.cpp @ 50]
572b85ed c705000000007b000000 mov dword ptr ds:[0],7Bh

NTGLOBALFLAG:  70

APPLICATION_VERIFIER_FLAGS:  0

APP:  firefox.exe

ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) x86fre

PRIMARY_PROBLEM_CLASS:  NULL_POINTER_WRITE

BUGCHECK_STR:  APPLICATION_FAULT_NULL_POINTER_WRITE

LAST_CONTROL_TRANSFER:  from 572b9c6f to 572b85ed

STACK_TEXT:  
0240f470 572b9c6f 0f5d8a00 00000001 00000000 xul!mozilla::WMFVideoMFTManager::WMFVideoMFTManager+0xed
0240f4a0 572b5840 0240f4ec 0f5d8a00 00000001 xul!mozilla::WMFDecoderModule::CreateH264Decoder+0x4f
0240f564 571c6d9c 0240f574 0e0dbc10 00000000 xul!mozilla::MP4Reader::ReadMetadata+0x820
0240f694 571c28b8 0e0f1274 0e0f1224 0e0dbc00 xul!mozilla::MediaDecoderStateMachine::DecodeMetadata+0x16c
0240f6d4 571e4d7a 0240f714 571e5f2e 0e8a1c40 xul!mozilla::MediaDecoderStateMachine::CallDecodeMetadata+0x58
0240f6dc 571e5f2e 0e8a1c40 0daf0bc4 0de9aeb0 xul!nsRunnableMethodImpl<void (__thiscall mozilla::MediaDecoderStateMachine::*)(void),void,1>::Run+0x1a
0240f714 550830e2 0f4bdb90 00000010 0240f75c xul!mozilla::MediaTaskQueue::Runner::Run+0x17e
0240f768 5507fbb2 046d4714 0240f77c 5c408d56 xul!nsThreadPool::Run+0x2c2
0240f878 550bb9e2 0e094d70 00000001 0240f891 xul!nsThread::ProcessNextEvent+0x592
0240f894 554cda31 0e094d70 00000001 01c9fab0 xul!NS_ProcessNextEvent+0x62
0240f8cc 55470dbd 0e8d73d0 0240f944 5546588d xul!mozilla::ipc::MessagePumpForNonMainThreads::Run+0x2e1
0240f8f0 55470d52 a92250d5 00000000 01ca08e8 xul!MessageLoop::RunInternal+0x4d
0240f928 55470a0d 00000001 0240f900 00000000 xul!MessageLoop::RunHandler+0x82
0240f948 55085de8 0240f970 773e8500 00000000 xul!MessageLoop::Run+0x1d
0240f988 5c407a4b 0e094d70 0de9aeb0 0240f9a8 xul!nsThread::ThreadFunc+0x128
0240f998 5c3f2119 0de9aeb0 0de9aeb0 0240f9e0 nss3!_PR_NativeRunThread+0xdb
0240f9a8 5c57db10 0de9aeb0 a9b48057 00000000 nss3!pr_root+0x19
0240f9e0 5c57daf4 00000000 0240f9f8 773fed6c MSVCR110!_beginthreadex+0xb4
0240f9ec 773fed6c 01c9fab0 0240fa38 7765377b MSVCR110!_endthreadex+0x102
0240f9f8 7765377b 01c9fab0 74c304ee 00000000 kernel32!BaseThreadInitThunk+0xe
0240fa38 7765374e 5c57dab5 01c9fab0 00000000 ntdll!__RtlUserThreadStart+0x70
0240fa50 00000000 5c57dab5 01c9fab0 00000000 ntdll!_RtlUserThreadStart+0x1b


STACK_COMMAND:  .cxr 0x0 ; kb

FAULTING_SOURCE_LINE:  c:\users\mozilla\debug-builds\mozilla-central\content\media\fmp4\wmf\wmfvideomftmanager.cpp

FAULTING_SOURCE_FILE:  c:\users\mozilla\debug-builds\mozilla-central\content\media\fmp4\wmf\wmfvideomftmanager.cpp

FAULTING_SOURCE_LINE_NUMBER:  50

FAULTING_SOURCE_CODE:  
    46:   , mLayersBackend(aLayersBackend)
    47:   , mUseHwAccel(false)
    48: {
    49:   NS_ASSERTION(!NS_IsMainThread(), "Should not be on main thread.");
>   50:   MOZ_ASSERT(mImageContainer);
    51:   MOZ_COUNT_CTOR(WMFVideoMFTManager);
    52: }
    53: 
    54: WMFVideoMFTManager::~WMFVideoMFTManager()
    55: {


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  xul!mozilla::WMFVideoMFTManager::WMFVideoMFTManager+ed

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: xul

IMAGE_NAME:  xul.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  5423dab8

FAILURE_BUCKET_ID:  NULL_POINTER_WRITE_c0000005_xul.dll!mozilla::WMFVideoMFTManager::WMFVideoMFTManager

BUCKET_ID:  APPLICATION_FAULT_NULL_POINTER_WRITE_xul!mozilla::WMFVideoMFTManager::WMFVideoMFTManager+ed

ANALYSIS_SOURCE:  UM

FAILURE_ID_HASH_STRING:  um:null_pointer_write_c0000005_xul.dll!mozilla::wmfvideomftmanager::wmfvideomftmanager

FAILURE_ID_HASH:  {c1f9cd0e-90a3-00e2-3f22-b9693cc367be}

Followup: MachineOwner

Comment 1

[Bob Clary [:bc] (inactive)]

Retested with OSX 10.{6,8,9}, RHEL6 {32,64}bit, Windows 7 {32,64}bit, Beta/38, Aurora/39, Nightly/40 and no crash. -> WFM.