Closed Bug 1190144 Opened 9 years ago Closed 9 years ago

Stagefright: crash [@mp4_demuxer::Moof::ParseTraf]

Categories

(Core :: Audio/Video: Playback, defect, P1)

Product:
Core
Component:
Audio/Video: Playback
Platform:
x86_64
macOS
Type:
defect

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: posidron, Assigned: rillian)

References

Details

(Keywords: crash, testcase)

Crash Data

Attachments

(1 file)

Testcase
113.98 KB, application/octet-stream
Details 
The following testcase crashes on mozilla-inbound-linux64-asan revision a48677d48570

See attachment.

Backtrace:

==2056==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x00000048e0ee sp 0x7f666832b120 bp 0x7f666832b130 T41)
    #0 0x48e0ed in mozalloc_abort(char const*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/memory/mozalloc/mozalloc_abort.cpp:33
    #1 0x7f6692ad2985 in Abort(char const*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/base/nsDebugImpl.cpp:472
    #2 0x7f6692ad2651 in NS_DebugBreak /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/base/nsDebugImpl.cpp:425
    #3 0x7f669a0f5969 in fpehandler(int, siginfo*, void*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/toolkit/xre/nsSigHandlers.cpp:156
    #4 0x7f66a01a633f (/lib/x86_64-linux-gnu/libpthread.so.0+0x1033f)
    #5 0x7f6692a224c0 in mp4_demuxer::Moof::ParseTraf(mp4_demuxer::Box&, mp4_demuxer::Trex&, mp4_demuxer::Mvhd&, mp4_demuxer::Mdhd&, mp4_demuxer::Edts&, mp4_demuxer::Sinf&, bool) /builds/slave/m-in-l64-asan-0000000000000000/build/src/media/libstagefright/binding/MoofParser.cpp:417
    #6 0x7f6692a2116b in mp4_demuxer::Moof::Moof(mp4_demuxer::Box&, mp4_demuxer::Trex&, mp4_demuxer::Mvhd&, mp4_demuxer::Mdhd&, mp4_demuxer::Edts&, mp4_demuxer::Sinf&, bool) /builds/slave/m-in-l64-asan-0000000000000000/build/src/media/libstagefright/binding/MoofParser.cpp:316
    #7 0x7f6692a1c67f in mp4_demuxer::MoofParser::RebuildFragmentedIndex(mp4_demuxer::BoxContext&) /builds/slave/m-in-l64-asan-0000000000000000/build/src/media/libstagefright/binding/MoofParser.cpp:53
    #8 0x7f6692a167e6 in RebuildFragmentedIndex /builds/slave/m-in-l64-asan-0000000000000000/build/src/media/libstagefright/binding/MoofParser.cpp:39
    #9 0x7f6692a167e6 in mp4_demuxer::Index::UpdateMoofIndex(nsTArray<mozilla::MediaByteRange> const&) /builds/slave/m-in-l64-asan-0000000000000000/build/src/media/libstagefright/binding/Index.cpp:274
    #10 0x7f66976efcfe in mozilla::MP4TrackDemuxer::EnsureUpToDateIndex() /builds/slave/m-in-l64-asan-0000000000000000/build/src/dom/media/fmp4/MP4Demuxer.cpp:253
    #11 0x7f66976ef65c in mozilla::MP4TrackDemuxer::MP4TrackDemuxer(mozilla::MP4Demuxer*, mozilla::TrackInfo::TrackType, unsigned int) /builds/slave/m-in-l64-asan-0000000000000000/build/src/dom/media/fmp4/MP4Demuxer.cpp:220
    #12 0x7f66976ee011 in mozilla::MP4Demuxer::GetTrackDemuxer(mozilla::TrackInfo::TrackType, unsigned int) /builds/slave/m-in-l64-asan-0000000000000000/build/src/dom/media/fmp4/MP4Demuxer.cpp:145
    #13 0x7f66972c2d76 in mozilla::MediaFormatReader::OnDemuxerInitDone(nsresult) /builds/slave/m-in-l64-asan-0000000000000000/build/src/dom/media/MediaFormatReader.cpp:309
    #14 0x7f669732bb46 in RejectValue /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/../../dist/include/mozilla/MozPromise.h:433
    #15 0x7f669732bb46 in mozilla::MozPromise<nsresult, mozilla::DemuxerFailureReason, true>::MethodThenValue<mozilla::MediaFormatReader, void (mozilla::MediaFormatReader::*)(nsresult), void (mozilla::MediaFormatReader::*)(mozilla::DemuxerFailureReason)>::DoResolveOrRejectInternal(mozilla::MozPromise<nsresult, mozilla::DemuxerFailureReason, true>::ResolveOrRejectValue const&) /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/../../dist/include/mozilla/MozPromise.h:485
    #16 0x7f6697329722 in mozilla::MozPromise<nsresult, mozilla::DemuxerFailureReason, true>::ThenValueBase::DoResolveOrReject(mozilla::MozPromise<nsresult, mozilla::DemuxerFailureReason, true>::ResolveOrRejectValue const&) /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/../../dist/include/mozilla/MozPromise.h:383
    #17 0x7f66973290cf in mozilla::MozPromise<nsresult, mozilla::DemuxerFailureReason, true>::ThenValueBase::ResolveOrRejectRunnable::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/../../dist/include/mozilla/MozPromise.h:316
    #18 0x7f66972375ba in mozilla::AutoTaskDispatcher::TaskGroupRunnable::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/../../dist/include/mozilla/TaskDispatcher.h:180
    #19 0x7f66973cfb95 in mozilla::TaskQueue::Runner::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/dom/media/TaskQueue.cpp:257
    #20 0x7f6692bf05f1 in nsThreadPool::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThreadPool.cpp:228
    #21 0x7f6692bf09ac in non-virtual thunk to nsThreadPool::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/xpcom/threads/Unified_cpp_xpcom_threads0.cpp:242
    #22 0x7f6692bea4f7 in nsThread::ProcessNextEvent(bool, bool*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThread.cpp:867
    #23 0x7f6692c5791a in NS_ProcessNextEvent(nsIThread*, bool) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/glue/nsThreadUtils.cpp:277
    #24 0x7f66934c6fcf in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/glue/MessagePump.cpp:326
    #25 0x7f6693452f9c in RunInternal /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:234
    #26 0x7f6693452f9c in RunHandler /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:227
    #27 0x7f6693452f9c in MessageLoop::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:201
    #28 0x7f6692be6915 in nsThread::ThreadFunc(void*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThread.cpp:360
    #29 0x7f669fb5f4b5 in _pt_root /builds/slave/m-in-l64-asan-0000000000000000/build/src/nsprpub/pr/src/pthreads/ptthread.c:212
    #30 0x7f66a019e181 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x8181)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /builds/slave/m-in-l64-asan-0000000000000000/build/src/memory/mozalloc/mozalloc_abort.cpp:33 mozalloc_abort(char const*)
Thread T41 (MediaPl~back #8) created by T35 (MediaPl~back #3) here:
    #0 0x461855 in pthread_create /builds/slave/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:175
    #1 0x7f669fb5be3d in _PR_CreateThread /builds/slave/m-in-l64-asan-0000000000000000/build/src/nsprpub/pr/src/pthreads/ptthread.c:453
    #2 0x7f669fb5b9ba in PR_CreateThread /builds/slave/m-in-l64-asan-0000000000000000/build/src/nsprpub/pr/src/pthreads/ptthread.c:544
    #3 0x7f6692be7f0d in nsThread::Init() /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThread.cpp:470
    #4 0x7f6692bedf0e in nsThreadManager::NewThread(unsigned int, unsigned int, nsIThread**) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThreadManager.cpp:249
    #5 0x7f6692bef5de in nsThreadPool::PutEvent(already_AddRefed<nsIRunnable>&&) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThreadPool.cpp:109
    #6 0x7f6692bf0eb7 in nsThreadPool::Dispatch(already_AddRefed<nsIRunnable>&&, unsigned int) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThreadPool.cpp:276
    #7 0x7f66973cff30 in operator nsIEventTarget * /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/../../dist/include/nsIEventTarget.h:37
    #8 0x7f66973cff30 in operator-> /builds/slave/m-in-l64-asan-0000000000000000/build/src/dom/media/SharedThreadPool.h:51
    #9 0x7f66973cff30 in mozilla::TaskQueue::Runner::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/dom/media/TaskQueue.cpp:283
    #10 0x7f6692bf05f1 in nsThreadPool::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThreadPool.cpp:228
    #11 0x7f6692bf09ac in non-virtual thunk to nsThreadPool::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/xpcom/threads/Unified_cpp_xpcom_threads0.cpp:242
    #12 0x7f6692bea4f7 in nsThread::ProcessNextEvent(bool, bool*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThread.cpp:867
    #13 0x7f6692c5791a in NS_ProcessNextEvent(nsIThread*, bool) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/glue/nsThreadUtils.cpp:277
    #14 0x7f66934c6fcf in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/glue/MessagePump.cpp:326
    #15 0x7f6693452f9c in RunInternal /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:234
    #16 0x7f6693452f9c in RunHandler /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:227
    #17 0x7f6693452f9c in MessageLoop::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:201
    #18 0x7f6692be6915 in nsThread::ThreadFunc(void*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThread.cpp:360
    #19 0x7f669fb5f4b5 in _pt_root /builds/slave/m-in-l64-asan-0000000000000000/build/src/nsprpub/pr/src/pthreads/ptthread.c:212
    #20 0x7f66a019e181 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x8181)

Thread T35 (MediaPl~back #3) created by T33 (MediaPl~back #1) here:
    #0 0x461855 in pthread_create /builds/slave/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:175
    #1 0x7f669fb5be3d in _PR_CreateThread /builds/slave/m-in-l64-asan-0000000000000000/build/src/nsprpub/pr/src/pthreads/ptthread.c:453
    #2 0x7f669fb5b9ba in PR_CreateThread /builds/slave/m-in-l64-asan-0000000000000000/build/src/nsprpub/pr/src/pthreads/ptthread.c:544
    #3 0x7f6692be7f0d in nsThread::Init() /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThread.cpp:470
    #4 0x7f6692bedf0e in nsThreadManager::NewThread(unsigned int, unsigned int, nsIThread**) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThreadManager.cpp:249
    #5 0x7f6692bef5de in nsThreadPool::PutEvent(already_AddRefed<nsIRunnable>&&) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThreadPool.cpp:109
    #6 0x7f6692bf0eb7 in nsThreadPool::Dispatch(already_AddRefed<nsIRunnable>&&, unsigned int) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThreadPool.cpp:276
    #7 0x7f66973cff30 in operator nsIEventTarget * /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/../../dist/include/nsIEventTarget.h:37
    #8 0x7f66973cff30 in operator-> /builds/slave/m-in-l64-asan-0000000000000000/build/src/dom/media/SharedThreadPool.h:51
    #9 0x7f66973cff30 in mozilla::TaskQueue::Runner::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/dom/media/TaskQueue.cpp:283
    #10 0x7f6692bf05f1 in nsThreadPool::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThreadPool.cpp:228
    #11 0x7f6692bf09ac in non-virtual thunk to nsThreadPool::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/xpcom/threads/Unified_cpp_xpcom_threads0.cpp:242
    #12 0x7f6692bea4f7 in nsThread::ProcessNextEvent(bool, bool*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThread.cpp:867
    #13 0x7f6692c5791a in NS_ProcessNextEvent(nsIThread*, bool) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/glue/nsThreadUtils.cpp:277
    #14 0x7f66934c6fcf in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/glue/MessagePump.cpp:326
    #15 0x7f6693452f9c in RunInternal /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:234
    #16 0x7f6693452f9c in RunHandler /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:227
    #17 0x7f6693452f9c in MessageLoop::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:201
    #18 0x7f6692be6915 in nsThread::ThreadFunc(void*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThread.cpp:360
    #19 0x7f669fb5f4b5 in _pt_root /builds/slave/m-in-l64-asan-0000000000000000/build/src/nsprpub/pr/src/pthreads/ptthread.c:212
    #20 0x7f66a019e181 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x8181)

Thread T33 (MediaPl~back #1) created by T0 (Web Content) here:
    #0 0x461855 in pthread_create /builds/slave/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:175
    #1 0x7f669fb5be3d in _PR_CreateThread /builds/slave/m-in-l64-asan-0000000000000000/build/src/nsprpub/pr/src/pthreads/ptthread.c:453
    #2 0x7f669fb5b9ba in PR_CreateThread /builds/slave/m-in-l64-asan-0000000000000000/build/src/nsprpub/pr/src/pthreads/ptthread.c:544
    #3 0x7f6692be7f0d in nsThread::Init() /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThread.cpp:470
    #4 0x7f6692bedf0e in nsThreadManager::NewThread(unsigned int, unsigned int, nsIThread**) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThreadManager.cpp:249
    #5 0x7f6692bef5de in nsThreadPool::PutEvent(already_AddRefed<nsIRunnable>&&) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThreadPool.cpp:109
    #6 0x7f6692bf0eb7 in nsThreadPool::Dispatch(already_AddRefed<nsIRunnable>&&, unsigned int) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThreadPool.cpp:276
    #7 0x7f66973ce2f9 in operator nsIEventTarget * /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/../../dist/include/nsIEventTarget.h:37
    #8 0x7f66973ce2f9 in operator-> /builds/slave/m-in-l64-asan-0000000000000000/build/src/dom/media/SharedThreadPool.h:51
    #9 0x7f66973ce2f9 in mozilla::TaskQueue::DispatchLocked(already_AddRefed<nsIRunnable>, mozilla::TaskQueue::DispatchMode, mozilla::AbstractThread::DispatchFailureHandling, mozilla::AbstractThread::DispatchReason) /builds/slave/m-in-l64-asan-0000000000000000/build/src/dom/media/TaskQueue.cpp:66
    #10 0x7f66973869dc in mozilla::TaskQueue::Dispatch(already_AddRefed<nsIRunnable>, mozilla::AbstractThread::DispatchFailureHandling, mozilla::AbstractThread::DispatchReason) /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/platforms/../../../dist/include/mozilla/TaskQueue.h:47
    #11 0x7f6697236f2c in mozilla::AutoTaskDispatcher::DispatchTaskGroup(mozilla::UniquePtr<mozilla::AutoTaskDispatcher::PerThreadTaskGroup, mozilla::DefaultDelete<mozilla::AutoTaskDispatcher::PerThreadTaskGroup> >) /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/../../dist/include/mozilla/TaskDispatcher.h:232
    #12 0x7f6697235bd2 in mozilla::AutoTaskDispatcher::~AutoTaskDispatcher() /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/../../dist/include/mozilla/TaskDispatcher.h:87
    #13 0x7f6697234d21 in reset /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/../../dist/include/mozilla/Maybe.h:373
    #14 0x7f6697234d21 in mozilla::XPCOMThreadWrapper::FireTailDispatcher() /builds/slave/m-in-l64-asan-0000000000000000/build/src/dom/media/AbstractThread.cpp:76
    #15 0x7f6697234ec0 in apply<mozilla::XPCOMThreadWrapper, void (mozilla::XPCOMThreadWrapper::*)()> /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/../../dist/include/nsThreadUtils.h:661
    #16 0x7f6697234ec0 in nsRunnableMethodImpl<void (mozilla::XPCOMThreadWrapper::*)(), true>::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/dom/media/../../dist/include/nsThreadUtils.h:868
    #17 0x7f66982abd45 in assign_assuming_AddRef /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/widget/../dist/include/nsCOMPtr.h:337
    #18 0x7f66982abd45 in forget /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/widget/../dist/include/nsCOMPtr.h:575
    #19 0x7f66982abd45 in Forget /builds/slave/m-in-l64-asan-0000000000000000/build/src/widget/nsBaseAppShell.h:110
    #20 0x7f66982abd45 in nsBaseAppShell::RunSyncSectionsInternal(bool, unsigned int) /builds/slave/m-in-l64-asan-0000000000000000/build/src/widget/nsBaseAppShell.cpp:381
    #21 0x7f66982ac8ed in RunSyncSections /builds/slave/m-in-l64-asan-0000000000000000/build/src/widget/nsBaseAppShell.h:95
    #22 0x7f66982ac8ed in AfterProcessNextEvent /builds/slave/m-in-l64-asan-0000000000000000/build/src/widget/nsBaseAppShell.cpp:435
    #23 0x7f66982ac8ed in non-virtual thunk to nsBaseAppShell::AfterProcessNextEvent(nsIThreadInternal*, unsigned int, bool) /builds/slave/m-in-l64-asan-0000000000000000/build/src/obj-firefox/widget/Unified_cpp_widget1.cpp:437
    #24 0x7f6692bea9c0 in nsThread::ProcessNextEvent(bool, bool*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/threads/nsThread.cpp:881
    #25 0x7f6692c5791a in NS_ProcessNextEvent(nsIThread*, bool) /builds/slave/m-in-l64-asan-0000000000000000/build/src/xpcom/glue/nsThreadUtils.cpp:277
    #26 0x7f66934c6059 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/glue/MessagePump.cpp:95
    #27 0x7f6693452f9c in RunInternal /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:234
    #28 0x7f6693452f9c in RunHandler /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:227
    #29 0x7f6693452f9c in MessageLoop::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:201
    #30 0x7f66982aa4f7 in nsBaseAppShell::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/widget/nsBaseAppShell.cpp:165
    #31 0x7f669a0ea902 in XRE_RunAppShell /builds/slave/m-in-l64-asan-0000000000000000/build/src/toolkit/xre/nsEmbedFunctions.cpp:785
    #32 0x7f6693452f9c in RunInternal /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:234
    #33 0x7f6693452f9c in RunHandler /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:227
    #34 0x7f6693452f9c in MessageLoop::Run() /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/chromium/src/base/message_loop.cc:201
    #35 0x7f669a0e9ff9 in XRE_InitChildProcess /builds/slave/m-in-l64-asan-0000000000000000/build/src/toolkit/xre/nsEmbedFunctions.cpp:621
    #36 0x48d670 in content_process_main(int, char**) /builds/slave/m-in-l64-asan-0000000000000000/build/src/ipc/app/../contentproc/plugin-container.cpp:237
    #37 0x7f6690648ec4 (/lib/x86_64-linux-gnu/libc.so.6+0x21ec4)
Attached file Testcase — 
Assignee: nobody → jyavenard

    
    

    
  
I don't understand this backtrace ... It's supposed to show data races right?

There can't be a concurrent access to the MP4Demuxer by the MediaFormatReader ; it's all done on the same thread (and we have strict assert on every single methods that it's within that task queue)

so would that be the TaskQueue itself ??
Flags: needinfo?(cpearce)

    
    

    
  
just read what asan is on MDN :)
Flags: needinfo?(cpearce)

    
  
Component: Audio/Video → Audio/Video: Playback
Priority: -- → P1

    
  
Assignee: jyavenard → giles

    
    

    
  
Just to confirm, I renamed data_1_output_Output.txt to test.mp4 and loaded that in firefox. Is that sufficient to trigger the issue?

I couldn't reproduce with https://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-central-linux64-asan-debug/1440613986/
Flags: needinfo?(cdiehl)

    
    

    
  
That's normally correct.

It also did not pop up anymore on our cluster, it got probably "side-fixed" in the last patches.
Flags: needinfo?(cdiehl)

    
    

    
  
Ok, thanks for checking. Please re-open if it reappears.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: