1340289 - Crash in jemalloc_crash | arena_dalloc_small | je_free | `anonymous namespace''::wasapi_stream_destroy

Status: RESOLVED DUPLICATE of bug 1347944

(Core :: Audio/Video: cubeb, defect, P2)

Description

[[:philipp]]

This bug was filed from the Socorro interface and is 
report bp-76b1dc67-8e4c-452e-bab3-c78972170215.
=============================================================
Crashing Thread (56)
Frame 	Module 	Signature 	Source
0 	mozglue.dll 	jemalloc_crash 	memory/mozjemalloc/jemalloc.c:1631
1 	mozglue.dll 	arena_dalloc_small 	memory/mozjemalloc/jemalloc.c:4618
2 	mozglue.dll 	je_free 	memory/mozjemalloc/jemalloc.c:6485
3 	xul.dll 	`anonymous namespace'::wasapi_stream_destroy 	media/libcubeb/src/cubeb_wasapi.cpp:1804
4 	xul.dll 	cubeb_stream_destroy 	media/libcubeb/src/cubeb.c:271
5 	xul.dll 	mozilla::UniquePtr<cubeb_stream, mozilla::CubebDestroyPolicy>::reset(cubeb_stream*) 	obj-firefox/dist/include/mozilla/UniquePtr.h:343
6 	xul.dll 	mozilla::AudioStream::Shutdown() 	dom/media/AudioStream.cpp:470
7 	xul.dll 	mozilla::media::DecodedAudioDataSink::Shutdown() 	dom/media/mediasink/DecodedAudioDataSink.cpp:146
8 	xul.dll 	mozilla::media::AudioSinkWrapper::Stop() 	dom/media/mediasink/AudioSinkWrapper.cpp:214
9 	xul.dll 	mozilla::media::VideoSink::Stop() 	dom/media/mediasink/VideoSink.cpp:217
10 	xul.dll 	mozilla::MediaDecoderStateMachine::StopMediaSink() 	dom/media/MediaDecoderStateMachine.cpp:2476
11 	xul.dll 	mozilla::MediaDecoderStateMachine::ShutdownState::Enter() 	dom/media/MediaDecoderStateMachine.cpp:1633
12 	xul.dll 	mozilla::MediaDecoderStateMachine::StateObject::SetState<mozilla::MediaDecoderStateMachine::ShutdownState>() 	dom/media/MediaDecoderStateMachine.cpp:262
13 	xul.dll 	mozilla::MediaDecoderStateMachine::StateObject::HandleShutdown() 	dom/media/MediaDecoderStateMachine.cpp:1164
14 	xul.dll 	mozilla::MediaDecoderStateMachine::Shutdown() 	dom/media/MediaDecoderStateMachine.cpp:2372
15 	xul.dll 	mozilla::detail::ProxyRunnable<mozilla::MozPromise<bool, bool, 0>, mozilla::MediaDecoderReader>::Run() 	obj-firefox/dist/include/mozilla/MozPromise.h:961
16 	xul.dll 	mozilla::AutoTaskDispatcher::TaskGroupRunnable::Run() 	obj-firefox/dist/include/mozilla/TaskDispatcher.h:193
17 	xul.dll 	mozilla::TaskQueue::Runner::Run() 	xpcom/threads/TaskQueue.cpp:232
18 	xul.dll 	nsThreadPool::Run() 	xpcom/threads/nsThreadPool.cpp:226
19 	xul.dll 	nsThread::ProcessNextEvent(bool, bool*) 	xpcom/threads/nsThread.cpp:1216
20 	xul.dll 	NS_ProcessNextEvent(nsIThread*, bool) 	xpcom/glue/nsThreadUtils.cpp:361
21 	xul.dll 	mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) 	ipc/glue/MessagePump.cpp:338
22 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc:225
23 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc:205
24 	xul.dll 	nsThread::ThreadFunc(void*) 	xpcom/threads/nsThread.cpp:467
25 	nss3.dll 	_PR_NativeRunThread 	nsprpub/pr/src/threads/combined/pruthr.c:397
26 	nss3.dll 	pr_root 	nsprpub/pr/src/md/windows/w95thred.c:95
27 	ucrtbase.dll 	_o__CIpow 	
28 	kernel32.dll 	BaseThreadInitThunk 	
29 	ntdll.dll 	__RtlUserThreadStart 	
30 	ntdll.dll 	_RtlUserThreadStart

this crash signature on windows started regressing in 52.0b4 (same pattern as in bug 1340278 - not sure if it's a duplicate).

https://hg.mozilla.org/releases/mozilla-beta/pushloghtml?fromchange=FIREFOX_52_0b3_RELEASE&tochange=FIREFOX_52_0b4_RELEASE

Comment 1

[Randell Jesup [:jesup] (needinfo me)]

Very likely the same bug as bug 1340278

Comment 2

[Ryan VanderMeulen [:RyanVM]]

IIUC, this was fixed on the release branches by bug 1347944.

Comment 3

[Emma Humphries ☕️🎸🧞‍♀️✨ (she/they) [:emceeaich] (Pacific Time) use needinfo]

This is a P1 bug without an assignee. 

P1 are bugs which are being worked on for the current release cycle/iteration/sprint. 

If the bug is not assigned by Monday, 28 August, the bug's priority will be reset to '--'.

Comment 4

[Bulk Bug Changes for mreavy's org]

Mass change P1->P2 to align with new Mozilla triage process