Closed Bug 1288101 Opened 8 years ago Closed 8 years ago

Crash in mozilla::MediaDecoderStateMachine::GetDecodedAudioDuration

Categories

(Core :: Audio/Video: Playback, defect)

Product:
Core
Component:
Audio/Video: Playback
Platform:
Unspecified
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: padenot, Unassigned)

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-67a53e0a-fe10-46ed-bbd3-251262160720.
=============================================================

I can repro this on my macbook pro when scrolling twitter.
https://hg.mozilla.org/integration/mozilla-inbound/annotate/aac8ff1024c5/dom/media/MediaDecoderStateMachine.cpp#l445

It looks like mMediaSink is null. But MDSM never sets it to null.

How reproducible is the crash?
Three times in a couple minutes, I'd say it's pretty reproducible.
Can't repro it on my Mac. Which twitter page were you browsing?
stack frame:
 "rax": "0x0000000000000000",

It looks like the pointer to the virtual table is null. This is either a UAF or memory corruption.
Any twitter page that has video in tweets reproduces for me.
Paul - can you give a specific example please?

Jean-Yves - can you repro this issue?
Flags: needinfo?(padenot)
Flags: needinfo?(jyavenard)
I can't really, I'm just scrolling my timeline (twitter.com) when logged in, it crashes often. Maybe scrolling a twitter page where there are a lot of videos will help. For example, https://twitter.com/franceinfo.
Flags: needinfo?(padenot)
Hi Paul,
Since you are able to repro this issue, can you attach a debugger and confirm if comment 4 is true?
I can't repro anymore, sorry. I'll reopen if I have more info or if I can repro.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → INVALID
Flags: needinfo?(jyavenard)
You need to log in before you can comment on or make changes to this bug.