Closed Bug 1410702 Opened 7 years ago Closed 7 years ago

Crash in mozalloc_abort | abort | core::result::unwrap_failed<T> | cubeb_backend::capi::capi_get_max_channel_count<T>

Categories

(Core :: Audio/Video: cubeb, defect, P3)

58 Branch
x86_64
Linux
defect

Tracking

()

RESOLVED FIXED
mozilla58
Tracking Status
firefox-esr52 --- unaffected
firefox56 --- unaffected
firefox57 --- unaffected
firefox58 --- fixed

People

(Reporter: philipp, Assigned: u480271)

References

Details

(Keywords: crash, regression)

Crash Data

Attachments

(2 files)

This bug was filed from the Socorro interface and is 
report bp-ef5e7917-aa00-4907-8b1c-b80d40171022.
=============================================================
Crashing Thread (0)
Frame 	Module 	Signature 	Source
0 	firefox 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:33
1 	firefox 	abort 	memory/mozalloc/mozalloc_abort.cpp:80
2 	libxul.so 	std::panicking::rust_panic 	src/libpanic_abort/lib.rs:59
3 	libxul.so 	std::panicking::rust_panic_with_hook 	src/libstd/panicking.rs:627
4 	libxul.so 	std::panicking::begin_panic<alloc::string::String> 	src/libstd/panicking.rs:572
5 	libxul.so 	std::panicking::begin_panic_fmt 	src/libstd/panicking.rs:522
6 	libxul.so 	core::panicking::panic_fmt 	src/libstd/panicking.rs:498
7 	libxul.so 	core::result::unwrap_failed<audioipc::errors::Error> 	src/libcore/macros.rs:41
8 	libxul.so 	cubeb_backend::capi::capi_get_max_channel_count<audioipc_client::context::ClientContext> 	src/libcore/result.rs:772
9 	libxul.so 	mozilla::CubebUtils::MaxNumberOfChannels 	dom/media/CubebUtils.cpp:526
10 	libxul.so 	mozilla::dom::AudioContext::Constructor 	dom/media/webaudio/AudioContext.cpp:209
11 	libxul.so 	mozilla::dom::AudioContextBinding::_constructor 	dom/bindings/AudioContextBinding.cpp:393
12 	libxul.so 	InternalConstruct(JSContext*, js::AnyConstructArgs const&) 	
13 	libxul.so 	Interpret(JSContext*, js::RunState&) 	
14 	libxul.so 	js::RunScript(JSContext*, js::RunState&) 	
15 	libxul.so 	js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) 	
16 	libxul.so 	js::Call 	js/src/vm/Interpreter.cpp:541
17 	libxul.so 	js::fun_call(JSContext*, unsigned int, JS::Value*) 	
18 	libxul.so 	js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) 	
19 	libxul.so 	Interpret(JSContext*, js::RunState&) 	
20 	libxul.so 	js::RunScript(JSContext*, js::RunState&) 	
21 	libxul.so 	js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JSObject&, JS::Value const&, js::AbstractFramePtr, JS::Value*) 	
22 	libxul.so 	js::Execute(JSContext*, JS::Handle<JSScript*>, JSObject&, JS::Value*) 	
23 	libxul.so 	ExecuteScript(JSContext*, JS::AutoObjectVector&, JS::Handle<JSScript*>, JS::Value*) 	
24 	libxul.so 	nsJSUtils::ExecutionContext::CompileAndExec(JS::CompileOptions&, JS::SourceBufferHolder&, JS::MutableHandle<JSScript*>) 	
25 	libxul.so 	mozilla::dom::ScriptLoader::EvaluateScript(mozilla::dom::ScriptLoadRequest*) 	
26 	libxul.so 	mozilla::dom::ScriptLoader::ProcessRequest(mozilla::dom::ScriptLoadRequest*) 	
27 	libxul.so 	mozilla::dom::ScriptLoader::ProcessScriptElement(nsIScriptElement*) 	
28 	libxul.so 	mozilla::dom::ScriptElement::MaybeProcessScript() 	
29 	libxul.so 	nsIScriptElement::AttemptToExecute 	dom/script/nsIScriptElement.h:231
30 	libxul.so 	nsHtml5TreeOpExecutor::RunScript(nsIContent*) 	
31 	libxul.so 	nsHtml5TreeOpExecutor::RunFlushLoop() 	
32 	libxul.so 	BackgroundFlushCallback(mozilla::TimeStamp) 	
33 	libxul.so 	mozilla::IdleTaskRunner::Run() 	
34 	libxul.so 	nsThread::ProcessNextEvent(bool, bool*) 	
35 	libxul.so 	NS_ProcessNextEvent(nsIThread*, bool) 	
36 	libxul.so 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) 	
37 	libxul.so 	MessageLoop::Run() 	
38 	libxul.so 	nsBaseAppShell::Run 	widget/nsBaseAppShell.cpp:158
39 	libxul.so 	XRE_RunAppShell 	toolkit/xre/nsEmbedFunctions.cpp:877
40 	libxul.so 	MessageLoop::Run() 	
41 	libxul.so 	XRE_InitChildProcess 	toolkit/xre/nsEmbedFunctions.cpp:703
42 	firefox 	content_process_main 	ipc/contentproc/plugin-container.cpp:63
43 	firefox 	main.cold.3 	
Ø 44 	libc-2.26.so 	libc-2.26.so@0x211c0 	
45 	firefox 	firefox@0x178ef 	
46 	firefox 	double_conversion::BignumDtoa(double, double_conversion::BignumDtoaMode, int, double_conversion::Vector<char>, int*, int*) 	
47 	firefox 	firefox@0x178ef 	
48 	firefox 	mozilla::ReadAheadLib(char const*) 	
49 	firefox 	double_conversion::BignumDtoa(double, double_conversion::BignumDtoaMode, int, double_conversion::Vector<char>, int*, int*) 	
50 	firefox 	_start

these content crashes on linux started with firefox 58.0a1 build 20171019100107.
all crashes come with MOZ_CRASH Reason "called `Result::unwrap()` on an `Err` value: Error(Msg("socket write"), State { next_error: None })"
Version: 57 Branch → 58 Branch
Assignee: nobody → dglastonbury
Status: NEW → ASSIGNED
I've cleaned up the error handling in send_recv! macro to not panic on the result received from conn.receive().
Comment on attachment 8921748 [details]
Bug 1410702 - P1: Handle errors in send_recv!

https://reviewboard.mozilla.org/r/192766/#review197918
Attachment #8921748 - Flags: review?(kinetik) → review+
Comment on attachment 8921749 [details]
Bug 1410702 - P2: Handle EINTR from recvmsg/sendmsg calls.

https://reviewboard.mozilla.org/r/192768/#review197920
Attachment #8921749 - Flags: review?(kinetik) → review+
Pushed by dglastonbury@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/19ddbbb25d0c
P1: Handle errors in send_recv! r=kinetik
https://hg.mozilla.org/integration/autoland/rev/faad7024bafc
P2: Handle EINTR from recvmsg/sendmsg calls. r=kinetik
https://hg.mozilla.org/mozilla-central/rev/19ddbbb25d0c
https://hg.mozilla.org/mozilla-central/rev/faad7024bafc
Status: ASSIGNED → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla58
(In reply to OrangeFactor Robot from comment #10)
> For more details, see:
> https://brasstacks.mozilla.com/orangefactor/
> ?display=Bug&bugid=1410702&startday=2017-10-23&endday=2017-10-29&tree=all

Fix landed several hours after this, so hopefully this is now addressed.
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: