1535603 - Crash in [@ mozilla::MP3TrackDemuxer::GetBuffered]

Status: RESOLVED FIXED

(Core :: Audio/Video: Playback, defect)

Description

[Calixte Denizet (:calixte)]

This bug is for crash report bp-aacaa0b8-12ba-4145-85b1-045c20190315.

Top 10 frames of crashing thread:

0 xul.dll class mozilla::media::TimeIntervals mozilla::MP3TrackDemuxer::GetBuffered dom/media/mp3/MP3Demuxer.cpp
1 xul.dll class mozilla::media::TimeIntervals mozilla::MP3TrackDemuxer::GetBuffered dom/media/mp3/MP3Demuxer.cpp:301
2 xul.dll void mozilla::MediaFormatReader::DemuxerProxy::Wrapper::UpdateBuffered dom/media/MediaFormatReader.cpp:883
3 xul.dll void mozilla::MozPromise<mozilla::MediaResult, mozilla::MediaResult, 1>::ThenValue<`lambda at z:/task_1552643402/build/src/dom/media/MediaFormatReader.cpp:901:14', `lambda at z:/task_1552643402/build/src/dom/media/MediaFormatReader.cpp:947:14'>::DoResolveOrRejectInternal xpcom/threads/MozPromise.h:716
4 xul.dll mozilla::MozPromise<RefPtr<mozilla::AudioData>, mozilla::MediaResult, 1>::ThenValueBase::ResolveOrRejectRunnable::Run xpcom/threads/MozPromise.h:392
5 xul.dll nsresult mozilla::TaskQueue::Runner::Run xpcom/threads/TaskQueue.cpp:199
6 xul.dll nsresult nsThreadPool::Run xpcom/threads/nsThreadPool.cpp:241
7 xul.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:1179
8 xul.dll NS_ProcessNextEvent xpcom/threads/nsThreadUtils.cpp:482
9 xul.dll mozilla::ipc::MessagePumpForNonMainThreads::Run ipc/glue/MessagePump.cpp:303

There are 3 crashes (from 3 installations) in nightly 67 with buildid 20190315093917. In analyzing the backtrace, the regression may have been introduced by patch [1] to fix bug 1500713.

[1] https://hg.mozilla.org/mozilla-central/rev?node=f96a12eedd89

Comment 1

[Calixte Denizet (:calixte)]

I can reproduce crash with url:
http://the-radio.ru/radio/hirschmilch-chillout-r1505

The moz_cras_reason is: MOZ_RELEASE_ASSERT(mStart <= mEnd) (Invalid Interval)

Comment 2

[Marcia Knous [:marcia]]

Updating platforms since it happening across all three.

Comment 3

[Julien Cristau [:jcristau]]

Fixed by backout:
https://hg.mozilla.org/mozilla-central/rev/5edbe9b1b82220b07ff446bd4a3b9ff2f7dda508