Closed Bug 1594109 Opened 5 months ago Closed 5 months ago

firefox-bin: /builds/worker/workspace/build/src/media/mtransport/third_party/nICEr/src/ice/ice_media_stream.c:414: nr_ice_media_stream_start_checks: Assertion `0' failed.

Categories

(Core :: WebRTC, defect, P2)

defect

Tracking

()

RESOLVED FIXED
mozilla72
Tracking Status
firefox-esr68 --- wontfix
firefox70 --- wontfix
firefox71 --- wontfix
firefox72 --- fixed

People

(Reporter: jkratzer, Assigned: bwc)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, testcase)

Attachments

(1 file)

Testcase found while fuzzing mozilla-central rev 4d585c7edc76.

firefox-bin: /builds/worker/workspace/build/src/media/mtransport/third_party/nICEr/src/ice/ice_media_stream.c:414: nr_ice_media_stream_start_checks: Assertion `0' failed.

rax = 0x0000000000000000   rdx = 0x0000000000000000
rcx = 0x00007fdca4bb4e97   rbx = 0x0000000000000000
rsi = 0x00007fdc8d9fb620   rdi = 0x0000000000000002
rbp = 0x00007fdca4d2d7d8   rsp = 0x00007fdc8d9fb620
r8 = 0x0000000000000000    r9 = 0x00007fdc8d9fb620
r10 = 0x0000000000000008   r11 = 0x0000000000000246
r12 = 0x00007fdc99a7075b   r13 = 0x00007fdc99486b6f
r14 = 0x000000000000019e   r15 = 0x00007fdc8da7e00c
rip = 0x00007fdca4bb4e97
OS|Linux|0.0.0 Linux 5.0.0-31-generic #33~18.04.1-Ubuntu SMP Tue Oct 1 10:20:39 UTC 2019 x86_64
CPU|amd64|family 6 model 94 stepping 3|1
GPU|||
Crash|SIGABRT|0x3e800000861|3
3|0|libc-2.27.so||||0x3ee97
3|1|libc-2.27.so||||0x885e0
3|2|firefox-bin|AutoLock<Mutex>::~AutoLock()|hg:hg.mozilla.org/mozilla-central:memory/build/Mutex.h:4d585c7edc7683e4b35eca6b18c9a646a1b8a78d|121|0x15
3|3|libc-2.27.so||||0x40801
3|4|libxul.so|_fini|||0x14d377f
3|5|libxul.so|_fini|||0xee9b93
3|6|firefox-bin|replace_free|hg:hg.mozilla.org/mozilla-central:memory/replace/phc/PHC.cpp:4d585c7edc7683e4b35eca6b18c9a646a1b8a78d|1104|0x33
3|7|libc-2.27.so||||0x1b3d14
3|8|libxul.so|_fini|||0x14d6fe4
3|9|libxul.so|_fini|||0xee9b93
3|10|libc-2.27.so||||0x1b77d8
3|11|libc-2.27.so||||0x3039a
3|12|libxul.so|_fini|||0xee9b93
3|13|libxul.so|_fini|||0x14d377f
3|14|libxul.so|_fini|||0x14d6fe4
3|15|libc-2.27.so||||0x30412
3|16|libxul.so|nr_ice_media_stream_start_checks|hg:hg.mozilla.org/mozilla-central:media/mtransport/third_party/nICEr/src/ice/ice_media_stream.c:4d585c7edc7683e4b35eca6b18c9a646a1b8a78d|414|0x1f
3|17|libxul.so|nr_ice_media_stream_unfreeze_pairs_foundation|hg:hg.mozilla.org/mozilla-central:media/mtransport/third_party/nICEr/src/ice/ice_media_stream.c:4d585c7edc7683e4b35eca6b18c9a646a1b8a78d|550|0xc
3|18|libxul.so|nr_ice_candidate_pair_stun_cb|hg:hg.mozilla.org/mozilla-central:media/mtransport/third_party/nICEr/src/ice/ice_candidate_pair.c:4d585c7edc7683e4b35eca6b18c9a646a1b8a78d|329|0x13
Flags: in-testsuite?

:bwc, would you be able to take a look?

Flags: needinfo?(docfaraday)
Priority: -- → P2

Believe it or not, I discovered this while working another bug earlier today.

Assignee: nobody → docfaraday
Flags: needinfo?(docfaraday)
Pushed by bcampen@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/19f6b500b8ee
Don't try to unfreeze pairs for obsolete streams. r=mjf
Status: NEW → RESOLVED
Closed: 5 months ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla72
Flags: in-testsuite? → in-testsuite-
You need to log in before you can comment on or make changes to this bug.