1503861 - Crash when unplugging headset while on meet.google.com

Status: RESOLVED DUPLICATE of bug 1502165

(Core :: WebRTC: Audio/Video, defect)

Description

[Boris Zbarsky [:bzbarsky]]

BUILD: 2018-11-01 nightly, built from https://hg.mozilla.org/mozilla-central/rev/3cff4bff1c9d8e65e73a966fe09c4e5aa1ed734a but I reproduced in an Oct 23 nightly too, and various nightlies in between.

STEPS TO REPRODUCE:

1) Use a Mac.
2) Plug in USB headset.
3) Start Firefox with a clean profile
4) Load https://meet.google.com/ute-stus-dkv
5) Allow access to headset microphone.
6) Allow access to camera.
7) Deny notifications.
8) Enter "Boris" for the name the site prompts for.
9) Click "Ask to join meeting" (if not logged in to Google, may need to input name first)
10) Wait 10 seconds while the "waiting for someone to let you into the meeting" spinner is going
11) Unplug the USB headset.

Sometimes it does not crash; waiting longer in step 10 seems to help reproduce.

Crash reports:
https://crash-stats.mozilla.com/report/index/7821447b-f691-48ec-9eb4-f7a5f0181101
https://crash-stats.mozilla.com/report/index/75561bbc-ca2f-4870-9ba1-d2aef0181101
https://crash-stats.mozilla.com/report/index/d576e341-5eba-40cc-b621-cc67c0181101
https://crash-stats.mozilla.com/report/index/c6c518cf-9637-4846-be90-70a1c0181101
https://crash-stats.mozilla.com/report/index/2ebfbe58-e2e1-4637-bfc4-4d30c0181101
https://crash-stats.mozilla.com/report/index/790ab00f-f878-4356-ac40-c598b0181101
https://crash-stats.mozilla.com/report/index/c35cd807-c934-4818-803e-c91d40181101

Looks like several different crashes, all indicating memory corruption?  :(

Comment 1

[Alex Chronopoulos [:achronop]]

(In reply to Boris Zbarsky [:bzbarsky, bz on IRC] from comment #0)
> Crash reports:
> https://crash-stats.mozilla.com/report/index/7821447b-f691-48ec-9eb4-
> f7a5f0181101

This one seems older and has been addressed in Bug 1502165.

Comment 2

[Boris Zbarsky [:bzbarsky]]

> This one seems older and has been addressed in Bug 1502165.

Ah, that's the one I hit initially, I think, then started testing to see whether it was still happening in current nightlies and got the other crashes...

Comment 3

[Andreas Pehrson [:pehrsons]]

Most of the others are likely the same bug, except they're in the parent process as the child is being ripped away under its feet.

The last one is odd, possibly unrelated.

Closing as duplicate, as we haven't been able to reproduce on builds with the fix.