Closed Bug 1515418 Opened 5 years ago Closed 5 years ago

Intermittent GECKO(1093) | SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/dom/media/webrtc/MediaEngineWebRTCAudio.cpp:797:7 in mozilla::AudioInputProcessing::Pull(RefPtr<mozilla::SourceMediaStream>

Categories

(Core :: WebRTC: Audio/Video, defect, P5)

Product:
Core
Component:
WebRTC: Audio/Video
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1499426

People

(Reporter: intermittent-bug-filer, Unassigned)

Details

Filed by: aciure [at] mozilla.com

https://treeherder.mozilla.org/logviewer.html#?job_id=217951088&repo=mozilla-inbound

https://queue.taskcluster.net/v1/task/bcAuata7SuiGjTsa87mBiw/runs/0/artifacts/public/logs/live_backing.log

[task 2018-12-19T18:38:36.871Z] 18:38:36     INFO - GECKO(1093) | SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/dom/media/webrtc/MediaEngineWebRTCAudio.cpp:797:7 in mozilla::AudioInputProcessing::Pull(RefPtr<mozilla::SourceMediaStream> const&, int, long, long, nsMainThreadPtrHandle<nsIPrincipal> const&)
[task 2018-12-19T18:38:36.875Z] 18:38:36     INFO - GECKO(1093) | Shadow bytes around the buggy address:
[task 2018-12-19T18:38:36.876Z] 18:38:36     INFO - GECKO(1093) |   0x0c22800d7950: fd fd fd fd fa fa fa fa fa fa fa fa fa fa fa fa
[task 2018-12-19T18:38:36.876Z] 18:38:36     INFO - GECKO(1093) |   0x0c22800d7960: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
[task 2018-12-19T18:38:36.877Z] 18:38:36     INFO - GECKO(1093) |   0x0c22800d7970: fd fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa
[task 2018-12-19T18:38:36.878Z] 18:38:36     INFO - GECKO(1093) |   0x0c22800d7980: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
[task 2018-12-19T18:38:36.879Z] 18:38:36     INFO - GECKO(1093) |   0x0c22800d7990: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
[task 2018-12-19T18:38:36.880Z] 18:38:36     INFO - GECKO(1093) | =>0x0c22800d79a0: fd[fd]fa fa fa fa fa fa fa fa fa fa fa fa fa fa
[task 2018-12-19T18:38:36.881Z] 18:38:36     INFO - GECKO(1093) |   0x0c22800d79b0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
[task 2018-12-19T18:38:36.882Z] 18:38:36     INFO - GECKO(1093) |   0x0c22800d79c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
[task 2018-12-19T18:38:36.882Z] 18:38:36     INFO - GECKO(1093) |   0x0c22800d79d0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
[task 2018-12-19T18:38:36.883Z] 18:38:36     INFO - GECKO(1093) |   0x0c22800d79e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
[task 2018-12-19T18:38:36.884Z] 18:38:36     INFO - GECKO(1093) |   0x0c22800d79f0: fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa
[task 2018-12-19T18:38:36.885Z] 18:38:36     INFO - GECKO(1093) | Shadow byte legend (one shadow byte represents 8 application bytes):
[task 2018-12-19T18:38:36.886Z] 18:38:36     INFO - GECKO(1093) |   Addressable:           00
[task 2018-12-19T18:38:36.886Z] 18:38:36     INFO - GECKO(1093) |   Partially addressable: 01 02 03 04 05 06 07
[task 2018-12-19T18:38:36.887Z] 18:38:36     INFO - GECKO(1093) |   Heap left redzone:       fa
[task 2018-12-19T18:38:36.891Z] 18:38:36     INFO - GECKO(1093) |   Freed heap region:       fd
[task 2018-12-19T18:38:36.892Z] 18:38:36     INFO - GECKO(1093) |   Stack left redzone:      f1
[task 2018-12-19T18:38:36.893Z] 18:38:36     INFO - GECKO(1093) |   Stack mid redzone:       f2
[task 2018-12-19T18:38:36.893Z] 18:38:36     INFO - GECKO(1093) |   Stack right redzone:     f3
[task 2018-12-19T18:38:36.894Z] 18:38:36     INFO - GECKO(1093) |   Stack after return:      f5
[task 2018-12-19T18:38:36.895Z] 18:38:36     INFO - GECKO(1093) |   Stack use after scope:   f8
[task 2018-12-19T18:38:36.896Z] 18:38:36     INFO - GECKO(1093) |   Global redzone:          f9
[task 2018-12-19T18:38:36.897Z] 18:38:36     INFO - GECKO(1093) |   Global init order:       f6
[task 2018-12-19T18:38:36.897Z] 18:38:36     INFO - GECKO(1093) |   Poisoned by user:        f7
[task 2018-12-19T18:38:36.898Z] 18:38:36     INFO - GECKO(1093) |   Container overflow:      fc
[task 2018-12-19T18:38:36.899Z] 18:38:36     INFO - GECKO(1093) |   Array cookie:            ac
[task 2018-12-19T18:38:36.900Z] 18:38:36     INFO - GECKO(1093) |   Intra object redzone:    bb
[task 2018-12-19T18:38:36.901Z] 18:38:36     INFO - GECKO(1093) |   ASan internal:           fe
[task 2018-12-19T18:38:36.901Z] 18:38:36     INFO - GECKO(1093) |   Left alloca redzone:     ca
[task 2018-12-19T18:38:36.902Z] 18:38:36     INFO - GECKO(1093) |   Right alloca redzone:    cb
[task 2018-12-19T18:38:36.902Z] 18:38:36     INFO - GECKO(1093) |   Shadow gap:              cc
[task 2018-12-19T18:38:36.902Z] 18:38:36     INFO - GECKO(1093) | ==1210==ABORTING
[task 2018-12-19T18:38:36.945Z] 18:38:36     INFO - GECKO(1093) | [Parent 1093, Gecko_IOThread] WARNING: pipe error (85): Connection reset by peer: file /builds/worker/workspace/build/src/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 349
[task 2018-12-19T18:38:36.953Z] 18:38:36     INFO - GECKO(1093) | ###!!! [Parent][MessageChannel] Error: (msgtype=0x1E0087,name=PBrowser::Msg_Destroy) Channel error: cannot send/recv
[task 2018-12-19T18:38:37.179Z] 18:38:37     INFO - GECKO(1093) | A content process crashed and MOZ_CRASHREPORTER_SHUTDOWN is set, shutting down
[task 2018-12-19T18:38:37.626Z] 18:38:37     INFO - GECKO(1093) | ###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost
[task 2018-12-19T18:38:39.173Z] 18:38:39     INFO - GECKO(1093) | 1545244719163	Marionette	TRACE	Received observer notification xpcom-will-shutdown
[task 2018-12-19T18:38:39.174Z] 18:38:39     INFO - GECKO(1093) | 1545244719164	Marionette	INFO	Stopped listening on port 2828
[task 2018-12-19T18:38:39.176Z] 18:38:39     INFO - GECKO(1093) | 1545244719165	Marionette	DEBUG	Remote service is inactive
Status: NEW → RESOLVED
Closed: 5 years ago
Keywords: csectype-uaf, intermittent-failure
Resolution: --- → DUPLICATE
Group: media-core-security
You need to log in before you can comment on or make changes to this bug.