Closed Bug 1302174 Opened 9 years ago Closed 9 years ago

Crash in byteorder::new::Error.error..Error::cause::h0463adcbe8b18c4dgda (called from mp4_demuxer::MP4MetadataRust::MP4MetadataRust)

Categories

(Core :: Audio/Video, defect)

Product:
Core
Component:
Audio/Video
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: MatsPalmgren_bugz, Unassigned)

References

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is report bp-90b34f16-10dc-4897-999d-ac6a82160911. ============================================================= All reported crashes for this signature are from 32-bit Linux Firefox 48.* Both e10s and non-e10s are affected. All crashes have SIGILL as the crash reason; I suspect this means it could be exploitable. byteorder::new::Error.error..Error::cause::h0463adcbe8b18c4dgda mp4_demuxer::MP4MetadataRust::MP4MetadataRust mp4_demuxer::MP4Metadata::MP4Metadata mozilla::MP4Demuxer::Init mozilla::MediaFormatReader::AsyncReadMetadata mozilla::detail::ProxyRunnable<mozilla::MozPromise<RefPtr<mozilla::MetadataHolder>, mozilla::ReadMetadataFailureReason, true>, mozilla::MediaDecoderReader>::Run mozilla::AutoTaskDispatcher::TaskGroupRunnable::Run mozilla::TaskQueue::Runner::Run nsThreadPool::Run nsThread::ProcessNextEvent NS_ProcessNextEvent mozilla::ipc::MessagePumpForNonMainThreads::Run MessageLoop::Run nsThread::ThreadFunc
Comments in crash reports talk about Facebook video or Facebook chat. Lots of Facebook URLs.
Group: core-security → media-core-security
kinetik, is this something you could look into? Thanks.
Flags: needinfo?(kinetik)
This is an SSE2 issue, not any kind of security issue. 53 crashes across: AuthenticAMD family 6 model 10 stepping 0 | 1 AuthenticAMD family 6 model 8 stepping 1 | 1 AuthenticAMD family 6 model 6 stepping 2 | 1 AuthenticAMD family 6 model 2 stepping 2 | 1 These are all AMD K7 (Palomino+), which lacks SSE2. GenuineIntel family 6 model 11 stepping 1 | 1 GenuineIntel family 6 model 11 stepping 4 | 1 GenuineIntel family 6 model 11 stepping 4 | 2 These are all Pentium III, which also lacks SSE2. This is wontfix for 48 but is fixed in 49 by disabling the Rust code for linux32 in bug 1299690 and fix properly in 51 by building for i586 on linux32 in bug 1299864.
Group: media-core-security
Status: NEW → RESOLVED
Closed: 9 years ago
Depends on: 1299690, 1299864
Flags: needinfo?(kinetik)
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.