Closed Bug 1014862 Opened 6 years ago Closed 5 years ago

Intermittent test_dataChannel_basicAudioVideoCombined.html | application crashed [@ resampler_basic_interpolate_single]

Categories

(Core :: WebRTC, defect)

ARM
Android
defect
Not set

Tracking

()

RESOLVED INCOMPLETE

People

(Reporter: RyanVM, Unassigned)

References

Details

(Keywords: crash, intermittent-failure)

Attachments

(1 file)

https://tbpl.mozilla.org/php/getParsedLog.php?id=40207219&tree=Fx-Team

Android 4.0 Panda fx-team debug test mochitest-6 on 2014-05-22 11:47:21 PDT for push 198035dfa405
slave: panda-0714

12:00:58     INFO -  338 INFO TEST-START | /tests/dom/media/tests/mochitest/test_dataChannel_basicAudioVideoCombined.html
12:01:18     INFO -  INFO | automation.py | Application ran for: 0:02:22.580066
12:01:18     INFO -  INFO | zombiecheck | Reading PID log: /tmp/tmpUQSeFBpidlog
12:01:18     INFO -  Contents of /data/anr/traces.txt:
12:01:20     INFO -  mozcrash INFO | Downloading symbols from: https://ftp-ssl.mozilla.org/pub/mozilla.org/mobile/tinderbox-builds/fx-team-android-debug/1400757656/fennec-32.0a1.en-US.android-arm.crashreporter-symbols.zip
12:01:25  WARNING -  PROCESS-CRASH | /tests/dom/media/tests/mochitest/test_dataChannel_basicAudioVideoCombined.html | application crashed [@ resampler_basic_interpolate_single]
12:01:25     INFO -  Crash dump filename: /tmp/tmpbgWEhH/039a1170-2759-1d9d-66241ee0-655441e1.dmp
12:01:25     INFO -  Operating system: Android
12:01:25     INFO -                    0.0.0 Linux 3.2.0+ #2 SMP PREEMPT Thu Nov 29 08:06:57 EST 2012 armv7l pandaboard/pandaboard/pandaboard:4.0.4/IMM76I/5:eng/test-keys
12:01:25     INFO -  CPU: arm
12:01:25     INFO -       2 CPUs
12:01:25     INFO -  Crash reason:  SIGSEGV
12:01:25     INFO -  Crash address: 0x150
12:01:25     INFO -  Thread 38 (crashed)
12:01:25     INFO -   0  libxul.so!resampler_basic_interpolate_single [resample.c:198035dfa405 : 466 + 0x2]
12:01:25     INFO -       r4 = 0x66865b20    r5 = 0xfff78f2a    r6 = 0x00000150    r7 = 0xfffffe0a
12:01:25     INFO -       r8 = 0x0000029d    r9 = 0x0000298d   r10 = 0x000001b7    fp = 0x00000051
12:01:25     INFO -       sp = 0x6cf47b40    lr = 0x62f3b4a9    pc = 0x62f3b60c
12:01:25     INFO -      Found by: given as instruction pointer in context
12:01:25     INFO -   1  libxul.so!speex_resampler_process_native [resample.c:198035dfa405 : 839 + 0x3]
12:01:25     INFO -       r4 = 0x66865b20    r5 = 0x6cf47c00    r6 = 0x00000000    r7 = 0x62f3b415
12:01:25     INFO -       r8 = 0x6cf47c04    r9 = 0x0000003f   r10 = 0x6b5a0800    fp = 0x6b5a0880
12:01:25     INFO -       sp = 0x6cf47bb8    pc = 0x62f3b673
12:01:25     INFO -      Found by: call frame info
12:01:25     INFO -   2  libxul.so!speex_resampler_process_int [resample.c:198035dfa405 : 902 + 0x13]
12:01:25     INFO -       r4 = 0x000001b9    r5 = 0x66865b20    r6 = 0x6f5c2108    r7 = 0x000000a0
12:01:25     INFO -       r8 = 0x00000000    r9 = 0x00000001   r10 = 0x6cf47c50    fp = 0x6b5a0880
12:01:25     INFO -       sp = 0x6cf47be0    pc = 0x62f3be23
12:01:25     INFO -      Found by: call frame info
12:01:25     INFO -   3  libxul.so!void mozilla::AudioSegment::Resample<short>(SpeexResamplerState_*, unsigned int, unsigned int) [AudioSegment.h:198035dfa405 : 201 + 0x13]
12:01:25     INFO -       r4 = 0x6dde7e88    r5 = 0x00000001    r6 = 0x00000000    r7 = 0x6cf47d28
12:01:25     INFO -       r8 = 0x0000ac44    r9 = 0x6cf47c6c   r10 = 0x00003e80    fp = 0x6b529c08
12:01:25     INFO -       sp = 0x6cf47c30    pc = 0x629cc563
12:01:25     INFO -      Found by: call frame info
12:01:25     INFO -   4  libxul.so!mozilla::AudioSegment::ResampleChunks(SpeexResamplerState_*) [AudioSegment.cpp:198035dfa405 : 143 + 0xb]
12:01:25     INFO -       r4 = 0x6cf47d28    r5 = 0x66865b20    r6 = 0x00000000    r7 = 0x00000000
12:01:25     INFO -       r8 = 0x00000001    r9 = 0x00000002   r10 = 0x00000020    fp = 0x00000000
12:01:25     INFO -       sp = 0x6cf47cb0    pc = 0x629cc68b
12:01:25     INFO -      Found by: call frame info
12:01:25     INFO -   5  libxul.so!mozilla::SourceMediaStream::AppendToTrack(int, mozilla::MediaSegment*, mozilla::MediaSegment*) [MediaStreamGraph.cpp:198035dfa405 : 2319 + 0x9]
12:01:25     INFO -       r4 = 0x6f5c1bc0    r5 = 0x6cf47d28    r6 = 0x68c2ab88    r7 = 0x00000000
12:01:25     INFO -       r8 = 0x00000001    r9 = 0x00000002   r10 = 0x00000020    fp = 0x00000000
12:01:25     INFO -       sp = 0x6cf47cd0    pc = 0x629d8a0b
12:01:25     INFO -      Found by: call frame info
http://hg.mozilla.org/integration/fx-team/annotate/198035dfa405/media/libspeex_resampler/src/resample.c#l466

in_len and out_len should both be unmodified pointers to the stack.
There are no stack arrays, so I don't know how they would have been corrupted if passed on the stack.
Blocks: 818822
I don't know whether this is related to what's going wrong, but at least we'll know if it happens again.
Attachment #8428413 - Flags: review?(paul)
Attachment #8428413 - Flags: review?(paul) → review+
Keywords: leave-open
Comment on attachment 8428413 [details] [diff] [review]
assert that source track resamplers are used with the correct channel count

https://hg.mozilla.org/integration/mozilla-inbound/rev/5181e577261e
Attachment #8428413 - Flags: checkin+
Looks like this hasn't happened for quite a while.
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → INCOMPLETE
Removing leave-open keyword from resolved bugs, per :sylvestre.
Keywords: leave-open
You need to log in before you can comment on or make changes to this bug.