Closed Bug 877118 Opened 11 years ago Closed 11 years ago

SEGV on mozilla::AudioChannelsDownMix

Categories

(Core :: Audio/Video, defect)

x86_64
Linux
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 876215

People

(Reporter: attekett, Unassigned)

Details

(Whiteboard: [sg:dupe 876215])

Attachments

(1 file)

Attached file Repro-file
Tested on:

OS: Ubuntu 12.04

Firefox: ASAN opt-build from https://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-central-linux64-asan/1369790612/



ASAN-report:

=================================================================
==30039== ERROR: AddressSanitizer: SEGV on unknown address 0x7f13a5351efc (pc 0x7f0fa0613336 sp 0x7f0f795de300 bp 0x7f0f795de3f0 T28)
AddressSanitizer can not provide additional info.
    #0 0x7f0fa0613335 in mozilla::AudioChannelsDownMix(nsTArray<void const*> const&, float**, unsigned int, unsigned int) /builds/slave/m-cen-l64-asan-000000000000000/build/content/media/AudioChannelFormat.cpp:175
    #1 0x7f0fa06170b7 in mozilla::AudioNodeStream::ObtainInputBlock(mozilla::AudioChunk&, unsigned int) /builds/slave/m-cen-l64-asan-000000000000000/build/content/media/AudioNodeStream.cpp:355
    #2 0x7f0fa0618385 in mozilla::AudioNodeStream::ProduceOutput(long, long) /builds/slave/m-cen-l64-asan-000000000000000/build/content/media/AudioNodeStream.cpp:421
    #3 0x7f0fa06862d2 in mozilla::AudioNodeStream::SampleRate() const /builds/slave/m-cen-l64-asan-000000000000000/build/content/media/MediaStreamGraph.cpp:937
    #4 0x7f0fa0698815 in mozilla::(anonymous namespace)::MediaStreamGraphThreadRunnable::Run() /builds/slave/m-cen-l64-asan-000000000000000/build/content/media/MediaStreamGraph.cpp:1184
    #5 0x7f0fa2d6c432 in NS_ProcessNextEvent(nsIThread*, bool) /builds/slave/m-cen-l64-asan-000000000000000/build/obj-firefox/xpcom/build/nsThreadUtils.cpp:238
.
.
.
This is not reproducible anymore.

Tested with m-i changeset: 133183:1c67a51e0fe5
Reproduces for me on m-c changeset: 133192:e58336e81395 

I'll let you know if this reproduces after next merge.
Attachment #755281 - Attachment mime type: text/plain → text/html
Dupe of bug 876215.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → DUPLICATE
Group: core-security
Whiteboard: [sg:dupe 876215]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: