1408608 - Intermittent TEST-UNEXPECTED-TIMEOUT | dom/media/mediasource/test/test_DurationUpdated_mp4.html | application timed out after 330 seconds with no output after Assertion failure: !mOwningThread (destroying a still-owned lock!)

Status: NEW

(Core :: Graphics, defect, P5)

Description

[Treeherder Bug Filer]

Filed by: philringnalda [at] gmail.com

https://treeherder.mozilla.org/logviewer.html#?job_id=136768506&repo=mozilla-central

https://queue.taskcluster.net/v1/task/DVVVMv90SGWWt68ivWQgRA/runs/0/artifacts/public/logs/live_backing.log

Comment 1

[Intermittent Failures Robot]

1 failures in 947 pushes (0.001 failures/push) were associated with this bug in the last 7 days.    

Repository breakdown:
* mozilla-central: 1

Platform breakdown:
* macosx64-stylo-disabled: 1

For more details, see:
https://brasstacks.mozilla.com/orangefactor/?display=Bug&bugid=1408608&startday=2017-10-09&endday=2017-10-15&tree=all

Comment 2

[JW Wang [:jwwang] [:jw_wang]]

https://treeherder.mozilla.org/logviewer.html#?repo=mozilla-central&job_id=136768506&lineNumber=1727

GECKO(1707) | Assertion failure: !mOwningThread (destroying a still-owned lock!), at /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/Mutex.h:57
GECKO(1707) | [Child 1710, MediaPlayback #1] WARNING: NS_ERROR_DOM_MEDIA_FATAL_ERR (0x806e0005) - RefPtr<MediaSourceTrackDemuxer::SamplesPromise> mozilla::MediaSourceTrackDemuxer::DoGetSamples(int32_t): manager is detached.: file /builds/worker/workspace/build/src/dom/media/MediaFormatReader.cpp, line 1810
GECKO(1707) | [Child 1710, MediaPlayback #2] WARNING: Decoder=121f37e00 Decode error: file /builds/worker/workspace/build/src/dom/media/MediaDecoderStateMachine.cpp, line 3350
GECKO(1707) | #01: mozilla::TrackBuffersManager::~TrackBuffersManager() [mfbt/RefPtr.h:78]

Comment 3

[Intermittent Failures Robot]

4 failures in 857 pushes (0.005 failures/push) were associated with this bug in the last 7 days.    

Repository breakdown:
* autoland: 4

Platform breakdown:
* windows7-32: 3
* windows10-64: 1

For more details, see:
https://brasstacks.mozilla.com/orangefactor/?display=Bug&bugid=1408608&startday=2017-10-30&endday=2017-11-05&tree=all

Comment 4

[JW Wang [:jwwang] [:jw_wang]]

https://treeherder.mozilla.org/logviewer.html#?repo=autoland&job_id=142124501&lineNumber=8551

Assertion failure: !mOwningThread (destroying a still-owned lock!), at z:\build\build\src\obj-firefox\dist\include\mozilla/Mutex.h:57
#01: mozilla::OffTheBooksMutex::~OffTheBooksMutex() [xpcom/threads/Mutex.h:57]
#02: mozilla::detail::RefCounted<mozilla::gfx::SourceSurface,0>::Release() [mfbt/RefCounted.h:210]
#03: mozilla::gfx::MaskSurfaceCommand::~MaskSurfaceCommand()
#04: mozilla::gfx::CaptureCommandList::~CaptureCommandList() [gfx/2d/CaptureCommandList.cpp:16]
#05: mozilla::gfx::SourceSurfaceCapture::~SourceSurfaceCapture() [gfx/2d/SourceSurfaceCapture.cpp:29]
#06: mozilla::detail::RefCounted<mozilla::gfx::SourceSurface,0>::Release() [mfbt/RefCounted.h:210]
#07: std::_Destroy_range<std::allocator<RefPtr<mozilla::gfx::SourceSurface> > >(RefPtr<mozilla::gfx::SourceSurface> *,RefPtr<mozilla::gfx::SourceSurface> *,std::allocator<RefPtr<mozilla::gfx::SourceSurface> > &) [vs2017_15.4.1/VC/include/xmemory0:1116]
#08: std::vector<RefPtr<mozilla::gfx::SourceSurface>,std::allocator<RefPtr<mozilla::gfx::SourceSurface> > >::_Tidy() [vs2017_15.4.1/VC/include/vector:2007]
#09: mozilla::detail::RefCounted<mozilla::gfx::FilterNode,1>::Release() [mfbt/RefCounted.h:210]
#10: std::_Destroy_range<std::allocator<RefPtr<mozilla::gfx::FilterNodeSoftware> > >(RefPtr<mozilla::gfx::FilterNodeSoftware> *,RefPtr<mozilla::gfx::FilterNodeSoftware> *,std::allocator<RefPtr<mozilla::gfx::FilterNodeSoftware> > &) [vs2017_15.4.1/VC/include/xmemory0:1116]
#11: std::vector<RefPtr<mozilla::gfx::FilterNodeSoftware>,std::allocator<RefPtr<mozilla::gfx::FilterNodeSoftware> > >::_Tidy() [vs2017_15.4.1/VC/include/vector:2007]
#12: mozilla::detail::RefCounted<mozilla::gfx::FilterNode,1>::Release() [mfbt/RefCounted.h:210]
#13: std::_Destroy_range<std::allocator<RefPtr<mozilla::gfx::FilterNodeSoftware> > >(RefPtr<mozilla::gfx::FilterNodeSoftware> *,RefPtr<mozilla::gfx::FilterNodeSoftware> *,std::allocator<RefPtr<mozilla::gfx::FilterNodeSoftware> > &) [vs2017_15.4.1/VC/include/xmemory0:1116]
#14: std::vector<RefPtr<mozilla::gfx::FilterNodeSoftware>,std::allocator<RefPtr<mozilla::gfx::FilterNodeSoftware> > >::_Tidy() [vs2017_15.4.1/VC/include/vector:2007]
#15: mozilla::detail::RefCounted<mozilla::gfx::FilterNode,1>::Release() [mfbt/RefCounted.h:210]
#16: mozilla::gfx::CaptureCommandList::~CaptureCommandList() [gfx/2d/CaptureCommandList.cpp:16]
#17: mozilla::gfx::DrawTargetCaptureImpl::~DrawTargetCaptureImpl() [gfx/2d/DrawTargetCapture.cpp:22]

Looks like we have a UAF in gfx.

Comment 5

[Intermittent Failures Robot]

1 failures in 2561 pushes (0.0 failures/push) were associated with this bug in the last 7 days.

Repository breakdown:

• autoland: 1

Platform breakdown:

• windows10-64: 1

For more details, see:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1408608&startday=2019-03-18&endday=2019-03-24&tree=all

Comment 6

[Intermittent Failures Robot]

1 failures in 4314 pushes (0.0 failures/push) were associated with this bug in the last 7 days.

Repository breakdown:

• autoland: 1

Platform breakdown:

• linux64: 1

For more details, see:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1408608&startday=2019-10-28&endday=2019-11-03&tree=all