1196073 - Firefox 40.0.2 crashes when trying to load mp4 video

Status: RESOLVED DUPLICATE of bug 1145230

(Core :: Audio/Video, defect)

Description

[Thomas Mittelstaedt]

User Agent: Mozilla/5.0 (X11; Linux i686; rv:38.0) Gecko/20100101 Firefox/38.0
Build ID: 20150806103657

Steps to reproduce:

clicking on a link to play an mp4 video either directly (e.g. http://www.wetteronline.de/wetterticker) or through youtube (e.g. http://www.youtube.com/watch?v=-dpfHYpfEXY&hd=1)


Actual results:

firefox immediately crashes, happens also with version 39.0.3, while current esr version (38.2.0) handles things properly. I have disabled adobe flash plugin!!

Comment 1

[Thomas Mittelstaedt]

stacktrace running under gdb. I am still running an (now unsupported) ubuntu Lucid Lynx (10.04 LTS), kernel 2.6.32-74, gnome 2.30.2. libc6 version is 2.11.

(firefox:5917): GStreamer-CRITICAL **: gst_plugin_feature_get_name: assertion `GST_IS_PLUGIN_FEATURE (feature)' failed

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7c8fdb70 (LWP 6062)]
__strcmp_ssse3 () at ../sysdeps/i386/i686/multiarch/strcmp-ssse3.S:77
77	../sysdeps/i386/i686/multiarch/strcmp-ssse3.S: Datei oder Verzeichnis nicht gefunden.
	in ../sysdeps/i386/i686/multiarch/strcmp-ssse3.S
(gdb) bt
#0  __strcmp_ssse3 () at ../sysdeps/i386/i686/multiarch/strcmp-ssse3.S:77
#1  0x01d2dc70 in ?? () from /home/tom/firefox40.0.2/libxul.so
#2  0x04b552d8 in IA__g_cclosure_marshal_VOID__OBJECT (closure=0x95ad2f40, return_value=0x0, n_param_values=2, param_values=0x96abda90, invocation_hint=0x7c8fc4d0, marshal_data=0x1d2dc20) at /build/buildd/glib2.0-2.24.1/gobject/gmarshal.c:636
#3  0x04b48252 in IA__g_closure_invoke (closure=0x95ad2f40, return_value=0x0, n_param_values=2, param_values=0x96abda90, invocation_hint=0x7c8fc4d0) at /build/buildd/glib2.0-2.24.1/gobject/gclosure.c:767
#4  0x04b5c99d in signal_emit_unlocked_R (node=<optimized out>, detail=<optimized out>, instance=0xa171d000, emission_return=0x0, instance_and_params=0x96abda90) at /build/buildd/glib2.0-2.24.1/gobject/gsignal.c:3248
#5  0x04b5ddb4 in IA__g_signal_emit_valist (instance=0xa171d000, signal_id=243, detail=0, var_args=0x7c8fc690 "\330S\304\004x\b") at /build/buildd/glib2.0-2.24.1/gobject/gsignal.c:2981
#6  0x04b5e256 in IA__g_signal_emit (instance=0xa171d000, signal_id=243, detail=0) at /build/buildd/glib2.0-2.24.1/gobject/gsignal.c:3038
#7  0x066ba50a in gst_bin_add_func (bin=0xa171d000, element=0xa1ecb600) at gstbin.c:1099
#8  0x066b6c11 in gst_bin_add (bin=0xa171d000, element=0xa1ecb600) at gstbin.c:1162
#9  0x0666677e in pad_added_cb (decodebin=0x95ec2640, pad=0xb11dc8a0, group=0xa171d2c4) at gstplaybin2.c:2513
#10 0x04b552d8 in IA__g_cclosure_marshal_VOID__OBJECT (closure=0x95bf20a0, return_value=0x0, n_param_values=2, param_values=0x96abd8e0, invocation_hint=0x7c8fc8f0, marshal_data=0x66660c0) at /build/buildd/glib2.0-2.24.1/gobject/gmarshal.c:636
#11 0x04b48252 in IA__g_closure_invoke (closure=0x95bf20a0, return_value=0x0, n_param_values=2, param_values=0x96abd8e0, invocation_hint=0x7c8fc8f0) at /build/buildd/glib2.0-2.24.1/gobject/gclosure.c:767
#12 0x04b5c99d in signal_emit_unlocked_R (node=<optimized out>, detail=<optimized out>, instance=0x95ec2640, emission_return=0x0, instance_and_params=0x96abd8e0) at /build/buildd/glib2.0-2.24.1/gobject/gsignal.c:3248
#13 0x04b5ddb4 in IA__g_signal_emit_valist (instance=0x95ec2640, signal_id=238, detail=0, var_args=0x7c8fcab0 "\b\320O\253\003\001\203\006\350ʏ|\"\237\264\004\b\320O\253p\v") at /build/buildd/glib2.0-2.24.1/gobject/gsignal.c:2981
#14 0x04b5e256 in IA__g_signal_emit (instance=0x95ec2640, signal_id=238, detail=0) at /build/buildd/glib2.0-2.24.1/gobject/gsignal.c:3038
#15 0x066cf5f7 in gst_element_add_pad (element=0x95ec2640, pad=0xb11dc8a0) at gstelement.c:773
#16 0x06827f19 in new_decoded_pad_cb (element=0xaac6ada0, pad=0xab4fd000, last=0, decoder=0x95ec2640) at gsturidecodebin.c:782
#17 0x0682d59f in gst_play_marshal_VOID__OBJECT_BOOLEAN (closure=0x95ec1580, return_value=0x0, n_param_values=3, param_values=0x9d137bc0, invocation_hint=0x7c8fcca0, marshal_data=0x6827df0) at gstplay-marshal.c:207
#18 0x04b48252 in IA__g_closure_invoke (closure=0x95ec1580, return_value=0x0, n_param_values=3, param_values=0x9d137bc0, invocation_hint=0x7c8fcca0) at /build/buildd/glib2.0-2.24.1/gobject/gclosure.c:767
#19 0x04b5c99d in signal_emit_unlocked_R (node=<optimized out>, detail=<optimized out>, instance=0xaac6ada0, emission_return=0x0, instance_and_params=0x9d137bc0) at /build/buildd/glib2.0-2.24.1/gobject/gsignal.c:3248
#20 0x04b5ddb4 in IA__g_signal_emit_valist (instance=0xaac6ada0, signal_id=287, detail=0, var_args=0x7c8fce64 "") at /build/buildd/glib2.0-2.24.1/gobject/gsignal.c:2981
#21 0x04b5e256 in IA__g_signal_emit (instance=0xaac6ada0, signal_id=287, detail=0) at /build/buildd/glib2.0-2.24.1/gobject/gsignal.c:3038
#22 0x0681fa19 in gst_decode_bin_expose (dbin=0xaac6ada0) at gstdecodebin2.c:3007
#23 0x068210bf in source_pad_blocked_cb (pad=0x7eada870, blocked=1, dpad=0xab4fd000) at gstdecodebin2.c:3135
#24 0x066e2fd1 in handle_pad_block (pad=0x7eada870) at gstpad.c:3932
#25 0x066e57a7 in gst_pad_push_event (pad=0x7eada870, event=0x90fe2b50) at gstpad.c:4876
#26 0x0697e15f in ?? () from /usr/lib/gstreamer-0.10/libgstffmpeg.so
#27 0x066e50c3 in gst_pad_send_event (pad=0xaaeee000, event=0x90fe2b50) at gstpad.c:5043
#28 0x066e563a in gst_pad_push_event (pad=0x7eada460, event=0x90fe2b50) at gstpad.c:4899
#29 0x0680dabb in gst_single_queue_push_one (object=<optimized out>, sq=<optimized out>, mq=<optimized out>) at gstmultiqueue.c:942
#30 gst_multi_queue_loop (pad=0x7eada460) at gstmultiqueue.c:1101
#31 0x06713d6b in gst_task_func (task=0x96aa3d70) at gsttask.c:238
#32 0x06715377 in default_func (tdata=0x9b7f8798, pool=0xb1340c80) at gsttaskpool.c:70
#33 0x04be3e0c in g_thread_pool_thread_proxy (data=0xae04f4c0) at /build/buildd/glib2.0-2.24.1/glib/gthreadpool.c:315
#34 0x04be1eef in g_thread_create_proxy (data=0x95ed51c0) at /build/buildd/glib2.0-2.24.1/glib/gthread.c:1893
#35 0x0013396e in start_thread (arg=0x7c8fdb70) at pthread_create.c:300
#36 0x0036351e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
Backtrace stopped: Not enough registers or memory available to unwind further
(gdb)

Comment 2

[Gingerbread Man]

Please reproduce the crash with a build from mozilla.org, submit the crash report, then post the report ID from about:crashes in a comment here.
https://developer.mozilla.org/docs/How_to_get_a_stacktrace_for_a_bug_report

Comment 3

[Thomas Mittelstaedt]

(In reply to Gingerbread Man from comment #2)
> Please reproduce the crash with a build from mozilla.org, submit the crash
> report, then post the report ID from about:crashes in a comment here.
> https://developer.mozilla.org/docs/How_to_get_a_stacktrace_for_a_bug_report

Just restarted version 40.0.2 with addons disabled (safe mode), reproduced the crash and here is the ID:
bp-d3823e49-2d7a-49f8-a44b-716b12150819

Comment 4

[Matthew Gregan [:kinetik]]

This looks like a duplicate of bug 1145230.

Comment 5

[:Gijs (he/him)]

(In reply to Matthew Gregan [:kinetik] from comment #4)
> This looks like a duplicate of bug 1145230.

That's supposed to be fixed in 40, and comment #3 suggests it's still happening in 40... is it not completely fixed in 40?

Comment 6

[Matthew Gregan [:kinetik]]

(In reply to :Gijs Kruitbosch from comment #5)
> That's supposed to be fixed in 40, and comment #3 suggests it's still
> happening in 40... is it not completely fixed in 40?

There hasn't been a build from the release branch since the fix landed there (note it only landed on mozilla-release ~14 hours ago).  So it'd be fixed in a 40.0.3 build, if one is ever created.  I guess there hasn't been a beta candidate rolled since it landed on m-b either, so it'd be best to verify the fix in an Aurora build for now.

Comment 7

[Thomas Mittelstaedt]

(In reply to Matthew Gregan [:kinetik] from comment #6)
> (In reply to :Gijs Kruitbosch from comment #5)
> > That's supposed to be fixed in 40, and comment #3 suggests it's still
> > happening in 40... is it not completely fixed in 40?
> 
> There hasn't been a build from the release branch since the fix landed there
> (note it only landed on mozilla-release ~14 hours ago).  So it'd be fixed in
> a 40.0.3 build, if one is ever created.  I guess there hasn't been a beta
> candidate rolled since it landed on m-b either, so it'd be best to verify
> the fix in an Aurora build for now.

Positiv, just downloaded that beta version, 41.0b2, and these mp4 videos would load correctly.
But I had those other crashes, which also frequently happened in version 40.0.2. See Crash-Id: d0cdcde8-59ae-4280-bacb-694712150819 ([@ libc-2.11.1.so@0x2d811 ]). Are you aware of those?

Comment 8

[Matthew Gregan [:kinetik]]

(In reply to Thomas Mittelstaedt from comment #7)
> Positiv, just downloaded that beta version, 41.0b2, and these mp4 videos
> would load correctly.
> But I had those other crashes, which also frequently happened in version
> 40.0.2. See Crash-Id: d0cdcde8-59ae-4280-bacb-694712150819 ([@
> libc-2.11.1.so@0x2d811 ]). Are you aware of those?

No idea about that one sorry, it's in (graphics) code I'm not at all familiar with.  Please file a new bug for that one.

Thanks for confirming this crash is fixed in 41.0b2, I'll mark this as a duplicate of bug 1145230.