Closed Bug 1461904 Opened 4 years ago Closed 4 years ago

Intermittent AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/media/mtransport/sigslot.h:318:13 in ~lock_block

Categories

(Core :: WebRTC, defect, P2)

defect

Tracking

()

RESOLVED FIXED
mozilla62
Tracking Status
firefox62 --- fixed

People

(Reporter: aryx, Assigned: bwc)

References

(Blocks 1 open bug)

Details

(Keywords: csectype-uaf, sec-other, Whiteboard: [adv-main62-])

Attachments

(1 file)

See also bug 1458957.

Only affects test?

Log: https://treeherder.mozilla.org/logviewer.html#?job_id=178361320&repo=mozilla-inbound

[task 2018-05-14T16:18:48.999Z] 16:18:48     INFO -  TEST-START | TransportTest.TestTransferIceMultiple
[task 2018-05-14T16:18:49.015Z] 16:18:49     INFO -  Got candidate candidate:0 1 UDP 2122055935 127.0.0.1 45016 typ host
[task 2018-05-14T16:18:49.015Z] 16:18:49     INFO -  Got candidate candidate:2 1 UDP 2122187007 172.17.0.4 36300 typ host
[task 2018-05-14T16:18:49.016Z] 16:18:49     INFO -  Got candidate candidate:4 1 UDP 2122121471 ::1 55332 typ host
[task 2018-05-14T16:18:49.016Z] 16:18:49     INFO -  Got candidate candidate:6 1 UDP 2122252543 fd15:4ba5:5a2b:100a:0:242:ac11:4 37300 typ host
[task 2018-05-14T16:18:49.016Z] 16:18:49     INFO -  Got candidate candidate:8 1 TCP 2105311487 127.0.0.1 49782 typ host tcptype passive
[task 2018-05-14T16:18:49.017Z] 16:18:49     INFO -  Got candidate candidate:8 1 TCP 2105327871 127.0.0.1 9 typ host tcptype active
[task 2018-05-14T16:18:49.017Z] 16:18:49     INFO -  Got candidate candidate:8 1 TCP 2105295103 127.0.0.1 55179 typ host tcptype so
[task 2018-05-14T16:18:49.017Z] 16:18:49     INFO -  Got candidate candidate:9 1 TCP 2105442559 172.17.0.4 61403 typ host tcptype passive
[task 2018-05-14T16:18:49.018Z] 16:18:49     INFO -  Got candidate candidate:9 1 TCP 2105458943 172.17.0.4 9 typ host tcptype active
[task 2018-05-14T16:18:49.018Z] 16:18:49     INFO -  Got candidate candidate:9 1 TCP 2105426175 172.17.0.4 58100 typ host tcptype so
[task 2018-05-14T16:18:49.018Z] 16:18:49     INFO -  Got candidate candidate:10 1 TCP 2105377023 ::1 50409 typ host tcptype passive
[task 2018-05-14T16:18:49.019Z] 16:18:49     INFO -  Got candidate candidate:10 1 TCP 2105393407 ::1 9 typ host tcptype active
[task 2018-05-14T16:18:49.019Z] 16:18:49     INFO -  Got candidate candidate:10 1 TCP 2105360639 ::1 49582 typ host tcptype so
[task 2018-05-14T16:18:49.019Z] 16:18:49     INFO -  Got candidate candidate:11 1 TCP 2105508095 fd15:4ba5:5a2b:100a:0:242:ac11:4 60441 typ host tcptype passive
[task 2018-05-14T16:18:49.020Z] 16:18:49     INFO -  Got candidate candidate:11 1 TCP 2105524479 fd15:4ba5:5a2b:100a:0:242:ac11:4 9 typ host tcptype active
[task 2018-05-14T16:18:49.020Z] 16:18:49     INFO -  Got candidate candidate:11 1 TCP 2105491711 fd15:4ba5:5a2b:100a:0:242:ac11:4 49156 typ host tcptype so
[task 2018-05-14T16:18:49.020Z] 16:18:49     INFO -  Got candidate candidate:0 1 UDP 2122055935 127.0.0.1 54303 typ host
[task 2018-05-14T16:18:49.021Z] 16:18:49     INFO -  Got candidate candidate:2 1 UDP 2122187007 172.17.0.4 47850 typ host
[task 2018-05-14T16:18:49.021Z] 16:18:49     INFO -  Got candidate candidate:4 1 UDP 2122121471 ::1 37504 typ host
[task 2018-05-14T16:18:49.021Z] 16:18:49     INFO -  Got candidate candidate:6 1 UDP 2122252543 fd15:4ba5:5a2b:100a:0:242:ac11:4 34632 typ host
[task 2018-05-14T16:18:49.021Z] 16:18:49     INFO -  Got candidate candidate:8 1 TCP 2105311487 127.0.0.1 63194 typ host tcptype passive
[task 2018-05-14T16:18:49.021Z] 16:18:49     INFO -  Got candidate candidate:8 1 TCP 2105327871 127.0.0.1 9 typ host tcptype active
[task 2018-05-14T16:18:49.022Z] 16:18:49     INFO -  Got candidate candidate:8 1 TCP 2105295103 127.0.0.1 49633 typ host tcptype so
[task 2018-05-14T16:18:49.022Z] 16:18:49     INFO -  Got candidate candidate:9 1 TCP 2105442559 172.17.0.4 64115 typ host tcptype passive
[task 2018-05-14T16:18:49.023Z] 16:18:49     INFO -  Got candidate candidate:9 1 TCP 2105458943 172.17.0.4 9 typ host tcptype active
[task 2018-05-14T16:18:49.023Z] 16:18:49     INFO -  Got candidate candidate:9 1 TCP 2105426175 172.17.0.4 59784 typ host tcptype so
[task 2018-05-14T16:18:49.023Z] 16:18:49     INFO -  Got candidate candidate:10 1 TCP 2105377023 ::1 59164 typ host tcptype passive
[task 2018-05-14T16:18:49.023Z] 16:18:49     INFO -  Got candidate candidate:10 1 TCP 2105393407 ::1 9 typ host tcptype active
[task 2018-05-14T16:18:49.024Z] 16:18:49     INFO -  Got candidate candidate:10 1 TCP 2105360639 ::1 63124 typ host tcptype so
[task 2018-05-14T16:18:49.024Z] 16:18:49     INFO -  Got candidate candidate:11 1 TCP 2105508095 fd15:4ba5:5a2b:100a:0:242:ac11:4 52023 typ host tcptype passive
[task 2018-05-14T16:18:49.024Z] 16:18:49     INFO -  Got candidate candidate:11 1 TCP 2105524479 fd15:4ba5:5a2b:100a:0:242:ac11:4 9 typ host tcptype active
[task 2018-05-14T16:18:49.024Z] 16:18:49     INFO -  Got candidate candidate:11 1 TCP 2105491711 fd15:4ba5:5a2b:100a:0:242:ac11:4 54916 typ host tcptype so
[task 2018-05-14T16:18:49.080Z] 16:18:49     INFO -  Now connected
[task 2018-05-14T16:18:49.081Z] 16:18:49     INFO -  Now connected
[task 2018-05-14T16:18:49.081Z] 16:18:49     INFO -  Received 1024 bytes
[task 2018-05-14T16:18:49.081Z] 16:18:49     INFO -  Received 1024 bytes
[task 2018-05-14T16:18:49.082Z] 16:18:49     INFO -  Received == 2 packets
[task 2018-05-14T16:18:49.082Z] 16:18:49     INFO -  Received 1024 bytes
[task 2018-05-14T16:18:49.090Z] 16:18:49     INFO -  =================================================================
[task 2018-05-14T16:18:49.090Z] 16:18:49    ERROR -  ==968==ERROR: AddressSanitizer: heap-use-after-free on address 0x6100004d4848 at pc 0x7f48e4159334 bp 0x7ffff4eb80c0 sp 0x7ffff4eb80b8
[task 2018-05-14T16:18:49.091Z] 16:18:49     INFO -  READ of size 8 at 0x6100004d4848 thread T0
[task 2018-05-14T16:18:50.116Z] 16:18:50     INFO -      #0 0x7f48e4159333 in ~lock_block /builds/worker/workspace/build/src/media/mtransport/sigslot.h:318:13
[task 2018-05-14T16:18:50.117Z] 16:18:50     INFO -      #1 0x7f48e4159333 in sigslot::_signal_base2<mozilla::NrIceMediaStream*, std::string const&, sigslot::single_threaded>::slot_disconnect(sigslot::has_slots_interface*) /builds/worker/workspace/build/src/media/mtransport/sigslot.h:940
[task 2018-05-14T16:18:50.124Z] 16:18:50     INFO -      #2 0x7f48f00aadd4 in disconnect_all /builds/worker/workspace/build/src/media/mtransport/sigslot.h:522:12
[task 2018-05-14T16:18:50.125Z] 16:18:50     INFO -      #3 0x7f48f00aadd4 in ~has_slots /builds/worker/workspace/build/src/media/mtransport/sigslot.h:511
[task 2018-05-14T16:18:50.125Z] 16:18:50     INFO -      #4 0x7f48f00aadd4 in (anonymous namespace)::TransportTestPeer::~TransportTestPeer() /builds/worker/workspace/build/src/media/mtransport/test/transport_unittests.cpp:475
[task 2018-05-14T16:18:50.125Z] 16:18:50     INFO -      #5 0x7f48f00ab14d in (anonymous namespace)::TransportTestPeer::~TransportTestPeer() /builds/worker/workspace/build/src/media/mtransport/test/transport_unittests.cpp:471:24
[task 2018-05-14T16:18:50.125Z] 16:18:50     INFO -      #6 0x7f48f00a7761 in (anonymous namespace)::TransportTest::TearDown() /builds/worker/workspace/build/src/media/mtransport/test/transport_unittests.cpp:839:5
[task 2018-05-14T16:18:50.141Z] 16:18:50     INFO -      #7 0x7f48ef167044 in testing::TestInfo::Run() /builds/worker/workspace/build/src/testing/gtest/gtest/src/gtest.cc:2658:11
[task 2018-05-14T16:18:50.142Z] 16:18:50     INFO -      #8 0x7f48ef168096 in testing::TestCase::Run() /builds/worker/workspace/build/src/testing/gtest/gtest/src/gtest.cc:2776:28
[task 2018-05-14T16:18:50.142Z] 16:18:50     INFO -      #9 0x7f48ef17ef26 in testing::internal::UnitTestImpl::RunAllTests() /builds/worker/workspace/build/src/testing/gtest/gtest/src/gtest.cc:4651:43
[task 2018-05-14T16:18:50.143Z] 16:18:50     INFO -      #10 0x7f48ef17e4ba in testing::UnitTest::Run() /builds/worker/workspace/build/src/testing/gtest/gtest/src/gtest.cc
[task 2018-05-14T16:18:50.143Z] 16:18:50     INFO -      #11 0x7f48ef1affc1 in RUN_ALL_TESTS /builds/worker/workspace/build/src/obj-firefox/dist/include/gtest/gtest.h:2233:46
[task 2018-05-14T16:18:50.144Z] 16:18:50     INFO -      #12 0x7f48ef1affc1 in mozilla::RunGTestFunc(int*, char**) /builds/worker/workspace/build/src/testing/gtest/mozilla/GTestRunner.cpp:113
[task 2018-05-14T16:18:50.145Z] 16:18:50     INFO -      #13 0x7f48edf89e05 in XREMain::XRE_mainStartup(bool*) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:3835:16
[task 2018-05-14T16:18:50.145Z] 16:18:50     INFO -      #14 0x7f48edf9b1f5 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4759:12
[task 2018-05-14T16:18:50.146Z] 16:18:50     INFO -      #15 0x7f48edf9c984 in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4866:21
[task 2018-05-14T16:18:50.153Z] 16:18:50     INFO -      #16 0x4f168b in do_main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:233:22
[task 2018-05-14T16:18:50.153Z] 16:18:50     INFO -      #17 0x4f168b in main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:306
[task 2018-05-14T16:18:50.214Z] 16:18:50     INFO -      #18 0x7f490446182f in __libc_start_main /build/glibc-Cl5G7W/glibc-2.23/csu/../csu/libc-start.c:291
[task 2018-05-14T16:18:50.215Z] 16:18:50     INFO -      #19 0x420f48 in _start (/builds/worker/workspace/build/application/firefox/firefox+0x420f48)
[task 2018-05-14T16:18:50.216Z] 16:18:50     INFO -  0x6100004d4848 is located 8 bytes inside of 192-byte region [0x6100004d4840,0x6100004d4900)
[task 2018-05-14T16:18:50.216Z] 16:18:50     INFO -  freed by thread T4 (Socket Thread) here:
[task 2018-05-14T16:18:50.216Z] 16:18:50     INFO -      #0 0x4c1952 in __interceptor_free /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:68:3
[task 2018-05-14T16:18:50.217Z] 16:18:50     INFO -      #1 0x7f48e41d4a97 in operator delete /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/mozalloc.h:180:12
[task 2018-05-14T16:18:50.218Z] 16:18:50     INFO -      #2 0x7f48e41d4a97 in Release /builds/worker/workspace/build/src/media/mtransport/nricemediastream.h:216
[task 2018-05-14T16:18:50.218Z] 16:18:50     INFO -      #3 0x7f48e41d4a97 in Release /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/RefPtr.h:41
[task 2018-05-14T16:18:50.219Z] 16:18:50     INFO -      #4 0x7f48e41d4a97 in Release /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/RefPtr.h:398
[task 2018-05-14T16:18:50.219Z] 16:18:50     INFO -      #5 0x7f48e41d4a97 in ~RefPtr /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/RefPtr.h:79
[task 2018-05-14T16:18:50.219Z] 16:18:50     INFO -      #6 0x7f48e41d4a97 in ~TransportLayerIce /builds/worker/workspace/build/src/media/mtransport/transportlayerice.cpp:96
[task 2018-05-14T16:18:50.221Z] 16:18:50     INFO -      #7 0x7f48e41d4a97 in mozilla::TransportLayerIce::~TransportLayerIce() /builds/worker/workspace/build/src/media/mtransport/transportlayerice.cpp:94
[task 2018-05-14T16:18:50.221Z] 16:18:50     INFO -      #8 0x7f48e4177a7c in ClearLayers /builds/worker/workspace/build/src/media/mtransport/transportflow.cpp:59:5
[task 2018-05-14T16:18:50.221Z] 16:18:50     INFO -      #9 0x7f48e4177a7c in mozilla::TransportFlow::DestroyFinal(nsAutoPtr<std::deque<mozilla::TransportLayer*, std::allocator<mozilla::TransportLayer*> > >) /builds/worker/workspace/build/src/media/mtransport/transportflow.cpp:47
[task 2018-05-14T16:18:50.222Z] 16:18:50     INFO -      #10 0x7f48e418032c in apply<void (*)(nsAutoPtr<std::deque<mozilla::TransportLayer *, std::allocator<mozilla::TransportLayer *> > >), nsAutoPtr<std::deque<mozilla::TransportLayer *, std::allocator<mozilla::TransportLayer *> > > , 0> /builds/worker/workspace/build/src/media/mtransport/runnable_utils.h:63:5
[task 2018-05-14T16:18:50.222Z] 16:18:50     INFO -      #11 0x7f48e418032c in mozilla::runnable_args_func<void (*)(nsAutoPtr<std::deque<mozilla::TransportLayer*, std::allocator<mozilla::TransportLayer*> > >), nsAutoPtr<std::deque<mozilla::TransportLayer*, std::allocator<mozilla::TransportLayer*> > > >::Run() /builds/worker/workspace/build/src/media/mtransport/runnable_utils.h:103
[task 2018-05-14T16:18:50.238Z] 16:18:50     INFO -      #12 0x7f48e247c543 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:1090:14
[task 2018-05-14T16:18:50.238Z] 16:18:50     INFO -      #13 0x7f48e24984e0 in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:519:10
[task 2018-05-14T16:18:50.254Z] 16:18:50     INFO -      #14 0x7f48e26e8444 in mozilla::net::nsSocketTransportService::Run() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp:1007:21
[task 2018-05-14T16:18:50.254Z] 16:18:50     INFO -      #15 0x7f48e26ea8cc in non-virtual thunk to mozilla::net::nsSocketTransportService::Run() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp
[task 2018-05-14T16:18:50.255Z] 16:18:50     INFO -      #16 0x7f48e247c543 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:1090:14
[task 2018-05-14T16:18:50.255Z] 16:18:50     INFO -      #17 0x7f48e24984e0 in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:519:10
[task 2018-05-14T16:18:50.259Z] 16:18:50     INFO -      #18 0x7f48e337928b in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/workspace/build/src/ipc/glue/MessagePump.cpp:334:20
[task 2018-05-14T16:18:50.266Z] 16:18:50     INFO -      #19 0x7f48e32ccd29 in RunInternal /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:326:10
[task 2018-05-14T16:18:50.267Z] 16:18:50     INFO -      #20 0x7f48e32ccd29 in RunHandler /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:319
[task 2018-05-14T16:18:50.268Z] 16:18:50     INFO -      #21 0x7f48e32ccd29 in MessageLoop::Run() /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:299
[task 2018-05-14T16:18:50.268Z] 16:18:50     INFO -      #22 0x7f48e2476ea8 in nsThread::ThreadFunc(void*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:425:11
[task 2018-05-14T16:18:50.268Z] 16:18:50     INFO -      #23 0x7f4901ec547e in _pt_root /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:201:5
[task 2018-05-14T16:18:50.269Z] 16:18:50     INFO -      #24 0x7f49054bf6b9 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76b9)
[task 2018-05-14T16:18:50.269Z] 16:18:50     INFO -  previously allocated by thread T0 here:
[task 2018-05-14T16:18:50.269Z] 16:18:50     INFO -      #0 0x4c1c93 in malloc /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:88:3
[task 2018-05-14T16:18:50.269Z] 16:18:50     INFO -      #1 0x4f26fd in moz_xmalloc /builds/worker/workspace/build/src/memory/mozalloc/mozalloc.cpp:70:17
[task 2018-05-14T16:18:50.270Z] 16:18:50     INFO -      #2 0x7f48e4148674 in operator new /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/mozalloc.h:156:12
[task 2018-05-14T16:18:50.270Z] 16:18:50     INFO -      #3 0x7f48e4148674 in mozilla::NrIceMediaStream::Create(mozilla::NrIceCtx*, std::string const&, int) /builds/worker/workspace/build/src/media/mtransport/nricemediastream.cpp:192
[task 2018-05-14T16:18:50.271Z] 16:18:50     INFO -      #4 0x7f48e41442e2 in mozilla::NrIceCtxHandler::CreateStream(std::string const&, int) /builds/worker/workspace/build/src/media/mtransport/nricectxhandler.cpp:57:10
[task 2018-05-14T16:18:50.272Z] 16:18:50     INFO -      #5 0x7f48f00c9e85 in (anonymous namespace)::TransportTestPeer::InitIce() /builds/worker/workspace/build/src/media/mtransport/test/transport_unittests.cpp:607:19
[task 2018-05-14T16:18:50.273Z] 16:18:50     INFO -      #6 0x7f48f00c885d in (anonymous namespace)::TransportTest::ConnectIce() /builds/worker/workspace/build/src/media/mtransport/test/transport_unittests.cpp:927:10
[task 2018-05-14T16:18:50.273Z] 16:18:50     INFO -      #7 0x7f48f00d1a0e in (anonymous namespace)::TransportTest_TestTransferIceMultiple_Test::TestBody() /builds/worker/workspace/build/src/media/mtransport/test/transport_unittests.cpp:1223:3
[task 2018-05-14T16:18:50.274Z] 16:18:50     INFO -      #8 0x7f48ef164b2c in testing::Test::Run() /builds/worker/workspace/build/src/testing/gtest/gtest/src/gtest-internal-inl.h
[task 2018-05-14T16:18:50.274Z] 16:18:50     INFO -      #9 0x7f48ef167044 in testing::TestInfo::Run() /builds/worker/workspace/build/src/testing/gtest/gtest/src/gtest.cc:2658:11
[task 2018-05-14T16:18:50.274Z] 16:18:50     INFO -      #10 0x7f48ef168096 in testing::TestCase::Run() /builds/worker/workspace/build/src/testing/gtest/gtest/src/gtest.cc:2776:28
[task 2018-05-14T16:18:50.275Z] 16:18:50     INFO -      #11 0x7f48ef17ef26 in testing::internal::UnitTestImpl::RunAllTests() /builds/worker/workspace/build/src/testing/gtest/gtest/src/gtest.cc:4651:43
[task 2018-05-14T16:18:50.275Z] 16:18:50     INFO -      #12 0x7f48ef17e4ba in testing::UnitTest::Run() /builds/worker/workspace/build/src/testing/gtest/gtest/src/gtest.cc
[task 2018-05-14T16:18:50.275Z] 16:18:50     INFO -      #13 0x7f48ef1affc1 in RUN_ALL_TESTS /builds/worker/workspace/build/src/obj-firefox/dist/include/gtest/gtest.h:2233:46
[task 2018-05-14T16:18:50.276Z] 16:18:50     INFO -      #14 0x7f48ef1affc1 in mozilla::RunGTestFunc(int*, char**) /builds/worker/workspace/build/src/testing/gtest/mozilla/GTestRunner.cpp:113
[task 2018-05-14T16:18:50.277Z] 16:18:50     INFO -      #15 0x7f48edf89e05 in XREMain::XRE_mainStartup(bool*) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:3835:16
[task 2018-05-14T16:18:50.277Z] 16:18:50     INFO -      #16 0x7f48edf9b1f5 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4759:12
[task 2018-05-14T16:18:50.277Z] 16:18:50     INFO -      #17 0x7f48edf9c984 in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4866:21
[task 2018-05-14T16:18:50.278Z] 16:18:50     INFO -      #18 0x4f168b in do_main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:233:22
[task 2018-05-14T16:18:50.278Z] 16:18:50     INFO -      #19 0x4f168b in main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:306
[task 2018-05-14T16:18:50.279Z] 16:18:50     INFO -      #20 0x7f490446182f in __libc_start_main /build/glibc-Cl5G7W/glibc-2.23/csu/../csu/libc-start.c:291
[task 2018-05-14T16:18:50.279Z] 16:18:50     INFO -  Thread T4 (Socket Thread) created by T0 here:
[task 2018-05-14T16:18:50.295Z] 16:18:50     INFO -      #0 0x4aafed in __interceptor_pthread_create /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:204:3
[task 2018-05-14T16:18:50.296Z] 16:18:50     INFO -      #1 0x7f4901ec21cf in _PR_CreateThread /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:433:14
[task 2018-05-14T16:18:50.296Z] 16:18:50     INFO -      #2 0x7f4901ec1dbe in PR_CreateThread /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:518:12
[task 2018-05-14T16:18:50.297Z] 16:18:50     INFO -      #3 0x7f48e2478e23 in nsThread::Init(nsTSubstring<char> const&) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:608:8
[task 2018-05-14T16:18:50.297Z] 16:18:50     INFO -      #4 0x7f48e248252a in nsThreadManager::NewNamedThread(nsTSubstring<char> const&, unsigned int, nsIThread**) /builds/worker/workspace/build/src/xpcom/threads/nsThreadManager.cpp:471:22
[task 2018-05-14T16:18:50.298Z] 16:18:50     INFO -      #5 0x7f48e2492194 in NS_NewNamedThread(nsTSubstring<char> const&, nsIThread**, nsIRunnable*, unsigned int) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:143:45
[task 2018-05-14T16:18:50.298Z] 16:18:50     INFO -      #6 0x7f48e26e51f8 in NS_NewNamedThread<14> /builds/worker/workspace/build/src/obj-firefox/dist/include/nsThreadUtils.h:73:10
[task 2018-05-14T16:18:50.298Z] 16:18:50     INFO -      #7 0x7f48e26e51f8 in mozilla::net::nsSocketTransportService::Init() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp:590
[task 2018-05-14T16:18:50.298Z] 16:18:50     INFO -      #8 0x7f48e32a7cac in nsSocketTransportServiceConstructor(nsISupports*, nsID const&, void**) /builds/worker/workspace/build/src/netwerk/build/nsNetModule.cpp:75:1
[task 2018-05-14T16:18:50.299Z] 16:18:50     INFO -      #9 0x7f48e242ea35 in nsComponentManagerImpl::CreateInstanceByContractID(char const*, nsISupports*, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1049:19
[task 2018-05-14T16:18:50.300Z] 16:18:50     INFO -      #10 0x7f48e2425ffd in nsComponentManagerImpl::GetServiceByContractID(char const*, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1409:10
[task 2018-05-14T16:18:50.301Z] 16:18:50     INFO -      #11 0x7f48e2434a45 in CallGetService /builds/worker/workspace/build/src/xpcom/components/nsComponentManagerUtils.cpp:67:43
[task 2018-05-14T16:18:50.301Z] 16:18:50     INFO -      #12 0x7f48e2434a45 in nsGetServiceByContractIDWithError::operator()(nsID const&, void**) const /builds/worker/workspace/build/src/xpcom/components/nsComponentManagerUtils.cpp:292
[task 2018-05-14T16:18:50.308Z] 16:18:50     INFO -      #13 0x7f48e22f059a in nsCOMPtr_base::assign_from_gs_contractid_with_error(nsGetServiceByContractIDWithError const&, nsID const&) /builds/worker/workspace/build/src/xpcom/base/nsCOMPtr.cpp:106:7
[task 2018-05-14T16:18:50.324Z] 16:18:50     INFO -      #14 0x7f48e263ff50 in operator= /builds/worker/workspace/build/src/obj-firefox/dist/include/nsCOMPtr.h:704:5
[task 2018-05-14T16:18:50.324Z] 16:18:50     INFO -      #15 0x7f48e263ff50 in InitializeSocketTransportService /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:296
[task 2018-05-14T16:18:50.325Z] 16:18:50     INFO -      #16 0x7f48e263ff50 in mozilla::net::nsIOService::SetOffline(bool) /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:1145
[task 2018-05-14T16:18:50.326Z] 16:18:50     INFO -      #17 0x7f48e263f056 in mozilla::net::nsIOService::Init() /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:260:5
[task 2018-05-14T16:18:50.327Z] 16:18:50     INFO -      #18 0x7f48e2641769 in mozilla::net::nsIOService::GetInstance() /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:357:13
[task 2018-05-14T16:18:50.328Z] 16:18:50     INFO -      #19 0x7f48e32a7a47 in nsIOServiceConstructor(nsISupports*, nsID const&, void**) /builds/worker/workspace/build/src/netwerk/build/nsNetModule.cpp:57:1
[task 2018-05-14T16:18:50.328Z] 16:18:50     INFO -      #20 0x7f48e242ea35 in nsComponentManagerImpl::CreateInstanceByContractID(char const*, nsISupports*, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1049:19
[task 2018-05-14T16:18:50.329Z] 16:18:50     INFO -      #21 0x7f48e2425ffd in nsComponentManagerImpl::GetServiceByContractID(char const*, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1409:10
[task 2018-05-14T16:18:50.330Z] 16:18:50     INFO -      #22 0x7f48e24349ac in CallGetService /builds/worker/workspace/build/src/xpcom/components/nsComponentManagerUtils.cpp:67:43
[task 2018-05-14T16:18:50.330Z] 16:18:50     INFO -      #23 0x7f48e24349ac in nsGetServiceByContractID::operator()(nsID const&, void**) const /builds/worker/workspace/build/src/xpcom/components/nsComponentManagerUtils.cpp:280
[task 2018-05-14T16:18:50.331Z] 16:18:50     INFO -      #24 0x7f48e22f03b9 in nsCOMPtr_base::assign_from_gs_contractid(nsGetServiceByContractID, nsID const&) /builds/worker/workspace/build/src/xpcom/base/nsCOMPtr.cpp:95:7
[task 2018-05-14T16:18:50.331Z] 16:18:50     INFO -      #25 0x7f48e24c9b6a in nsCOMPtr /builds/worker/workspace/build/src/obj-firefox/dist/include/nsCOMPtr.h:577:5
[task 2018-05-14T16:18:50.332Z] 16:18:50     INFO -      #26 0x7f48e24c9b6a in XPCOMService_GetIOService /builds/worker/workspace/build/src/obj-firefox/xpcom/build/Services.cpp:132
[task 2018-05-14T16:18:50.332Z] 16:18:50     INFO -      #27 0x7f48e26828ce in GetIOService /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/Services.h:128:41
[task 2018-05-14T16:18:50.333Z] 16:18:50     INFO -      #28 0x7f48e26828ce in do_GetIOService /builds/worker/workspace/build/src/netwerk/base/nsNetUtil.cpp:100
[task 2018-05-14T16:18:50.333Z] 16:18:50     INFO -      #29 0x7f48e26828ce in net_EnsureIOService /builds/worker/workspace/build/src/netwerk/base/nsNetUtil.cpp:147
[task 2018-05-14T16:18:50.334Z] 16:18:50     INFO -      #30 0x7f48e26828ce in NS_NewURI(nsIURI**, nsTSubstring<char> const&, char const*, nsIURI*, nsIIOService*) /builds/worker/workspace/build/src/netwerk/base/nsNetUtil.cpp:1920
[task 2018-05-14T16:18:50.334Z] 16:18:50     INFO -      #31 0x7f48e24be1d2 in GetManifestURI /builds/worker/workspace/build/src/chrome/nsChromeRegistryChrome.cpp:616:5
[task 2018-05-14T16:18:50.335Z] 16:18:50     INFO -      #32 0x7f48e24be1d2 in nsChromeRegistry::ManifestProcessingContext::ResolveURI(char const*) /builds/worker/workspace/build/src/chrome/nsChromeRegistryChrome.cpp:624
[task 2018-05-14T16:18:50.335Z] 16:18:50     INFO -      #33 0x7f48e24be58a in nsChromeRegistryChrome::ManifestContent(nsChromeRegistry::ManifestProcessingContext&, int, char* const*, int) /builds/worker/workspace/build/src/chrome/nsChromeRegistryChrome.cpp:668:34
[task 2018-05-14T16:18:50.336Z] 16:18:50     INFO -      #34 0x7f48e241a3a5 in ParseManifest(NSLocationType, mozilla::FileLocation&, char*, bool) /builds/worker/workspace/build/src/xpcom/components/ManifestParser.cpp:729:7
[task 2018-05-14T16:18:50.336Z] 16:18:50     INFO -      #35 0x7f48e242a689 in DoRegisterManifest /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:541:5
[task 2018-05-14T16:18:50.337Z] 16:18:50     INFO -      #36 0x7f48e242a689 in nsComponentManagerImpl::RegisterManifest(NSLocationType, mozilla::FileLocation&, bool) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:554
[task 2018-05-14T16:18:50.337Z] 16:18:50     INFO -      #37 0x7f48e242a947 in nsComponentManagerImpl::ManifestManifest(nsComponentManagerImpl::ManifestProcessingContext&, int, char* const*) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:563:3
[task 2018-05-14T16:18:50.338Z] 16:18:50     INFO -      #38 0x7f48e241a69c in ParseManifest(NSLocationType, mozilla::FileLocation&, char*, bool) /builds/worker/workspace/build/src/xpcom/components/ManifestParser.cpp:738:9
[task 2018-05-14T16:18:50.338Z] 16:18:50     INFO -      #39 0x7f48e242a689 in DoRegisterManifest /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:541:5
[task 2018-05-14T16:18:50.339Z] 16:18:50     INFO -      #40 0x7f48e242a689 in nsComponentManagerImpl::RegisterManifest(NSLocationType, mozilla::FileLocation&, bool) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:554
[task 2018-05-14T16:18:50.340Z] 16:18:50     INFO -      #41 0x7f48e24291b6 in nsComponentManagerImpl::RereadChromeManifests(bool) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:684:5
[task 2018-05-14T16:18:50.340Z] 16:18:50     INFO -      #42 0x7f48e2427a55 in nsComponentManagerImpl::Init() /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:349:5
[task 2018-05-14T16:18:50.340Z] 16:18:50     INFO -      #43 0x7f48e24d86d3 in NS_InitXPCOM2 /builds/worker/workspace/build/src/xpcom/build/XPCOMInit.cpp:649:51
[task 2018-05-14T16:18:50.341Z] 16:18:50     INFO -      #44 0x7f48ef1afbca in ScopedXPCOM /builds/worker/workspace/build/src/obj-firefox/dist/include/testing/TestHarness.h:89:21
[task 2018-05-14T16:18:50.341Z] 16:18:50     INFO -      #45 0x7f48ef1afbca in mozilla::RunGTestFunc(int*, char**) /builds/worker/workspace/build/src/testing/gtest/mozilla/GTestRunner.cpp:87
[task 2018-05-14T16:18:50.341Z] 16:18:50     INFO -      #46 0x7f48edf89e05 in XREMain::XRE_mainStartup(bool*) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:3835:16
[task 2018-05-14T16:18:50.342Z] 16:18:50     INFO -      #47 0x7f48edf9b1f5 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4759:12
[task 2018-05-14T16:18:50.342Z] 16:18:50     INFO -      #48 0x7f48edf9c984 in XRE_main(int, char**, mozilla::BootstrapConfig const&) /builds/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4866:21
[task 2018-05-14T16:18:50.342Z] 16:18:50     INFO -      #49 0x4f168b in do_main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:233:22
[task 2018-05-14T16:18:50.343Z] 16:18:50     INFO -      #50 0x4f168b in main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:306
[task 2018-05-14T16:18:50.343Z] 16:18:50     INFO -      #51 0x7f490446182f in __libc_start_main /build/glibc-Cl5G7W/glibc-2.23/csu/../csu/libc-start.c:291
[task 2018-05-14T16:18:50.343Z] 16:18:50     INFO -  SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/media/mtransport/sigslot.h:318:13 in ~lock_block
[task 2018-05-14T16:18:50.343Z] 16:18:50     INFO -  Shadow bytes around the buggy address:
[task 2018-05-14T16:18:50.344Z] 16:18:50     INFO -    0x0c20800928b0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa
[task 2018-05-14T16:18:50.344Z] 16:18:50     INFO -    0x0c20800928c0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
[task 2018-05-14T16:18:50.344Z] 16:18:50     INFO -    0x0c20800928d0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa
[task 2018-05-14T16:18:50.344Z] 16:18:50     INFO -    0x0c20800928e0: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
[task 2018-05-14T16:18:50.345Z] 16:18:50     INFO -    0x0c20800928f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa
[task 2018-05-14T16:18:50.346Z] 16:18:50     INFO -  =>0x0c2080092900: fa fa fa fa fa fa fa fa fd[fd]fd fd fd fd fd fd
[task 2018-05-14T16:18:50.346Z] 16:18:50     INFO -    0x0c2080092910: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
[task 2018-05-14T16:18:50.347Z] 16:18:50     INFO -    0x0c2080092920: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
[task 2018-05-14T16:18:50.347Z] 16:18:50     INFO -    0x0c2080092930: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
[task 2018-05-14T16:18:50.347Z] 16:18:50     INFO -    0x0c2080092940: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
[task 2018-05-14T16:18:50.347Z] 16:18:50     INFO -    0x0c2080092950: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa
[task 2018-05-14T16:18:50.347Z] 16:18:50     INFO -  Shadow byte legend (one shadow byte represents 8 application bytes):
[task 2018-05-14T16:18:50.348Z] 16:18:50     INFO -    Addressable:           00
[task 2018-05-14T16:18:50.348Z] 16:18:50     INFO -    Partially addressable: 01 02 03 04 05 06 07
[task 2018-05-14T16:18:50.348Z] 16:18:50     INFO -    Heap left redzone:       fa
[task 2018-05-14T16:18:50.348Z] 16:18:50     INFO -    Freed heap region:       fd
[task 2018-05-14T16:18:50.348Z] 16:18:50     INFO -    Stack left redzone:      f1
[task 2018-05-14T16:18:50.348Z] 16:18:50     INFO -    Stack mid redzone:       f2
[task 2018-05-14T16:18:50.348Z] 16:18:50     INFO -    Stack right redzone:     f3
[task 2018-05-14T16:18:50.348Z] 16:18:50     INFO -    Stack after return:      f5
[task 2018-05-14T16:18:50.349Z] 16:18:50     INFO -    Stack use after scope:   f8
[task 2018-05-14T16:18:50.349Z] 16:18:50     INFO -    Global redzone:          f9
[task 2018-05-14T16:18:50.349Z] 16:18:50     INFO -    Global init order:       f6
[task 2018-05-14T16:18:50.349Z] 16:18:50     INFO -    Poisoned by user:        f7
[task 2018-05-14T16:18:50.349Z] 16:18:50     INFO -    Container overflow:      fc
[task 2018-05-14T16:18:50.349Z] 16:18:50     INFO -    Array cookie:            ac
[task 2018-05-14T16:18:50.349Z] 16:18:50     INFO -    Intra object redzone:    bb
[task 2018-05-14T16:18:50.349Z] 16:18:50     INFO -    ASan internal:           fe
[task 2018-05-14T16:18:50.349Z] 16:18:50     INFO -    Left alloca redzone:     ca
[task 2018-05-14T16:18:50.349Z] 16:18:50     INFO -    Right alloca redzone:    cb
[task 2018-05-14T16:18:50.349Z] 16:18:50     INFO -  ==968==ABORTING
[task 2018-05-14T16:18:50.647Z] 16:18:50    ERROR -  gtest TEST-UNEXPECTED-FAIL | gtest | test failed with return code 1
Byron, can you have look at this please?
Assignee: nobody → docfaraday
Rank: 15
Flags: needinfo?(docfaraday)
Priority: -- → P2
So, while working on moving srtp into the TransportFlow stuff, I noticed that sctp_unittest wasn't calling disconnect_all on STS, and it caused me some problems. Looking briefly, it does appear that something similar is happening here.
Flags: needinfo?(docfaraday)
This is not a sec bug, since it is a flaw in test code.
Likely we can just open the bug
Keywords: sec-other
Let's unmark the security bit here, then I can put this up for review.
Group: media-core-security
Comment on attachment 8979291 [details]
Bug 1461904: Make sure to call disconnect_all on STS.

https://reviewboard.mozilla.org/r/245478/#review251470

LGTM
Attachment #8979291 - Flags: review?(drno) → review+
Pushed by bcampen@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/bfdcc15b3fb2
Make sure to call disconnect_all on STS. r=drno
https://hg.mozilla.org/mozilla-central/rev/bfdcc15b3fb2
Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla62
Whiteboard: [adv-main62-]
You need to log in before you can comment on or make changes to this bug.