Closed Bug 1602996 Opened 6 years ago Closed 6 years ago

Intermittent dom/media/tests/mochitest/test_peerConnection_restartIceNoRtcpMux.html | application crashed [@ mozilla::jni::Context<mozilla::java::CodecProxy, _jobject*>::operator->() const]

Categories

(Core :: Audio/Video: Playback, defect)

Product:
Core
Component:
Audio/Video: Playback
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla74
Tracking Flags:
Tracking Status
firefox-esr68 --- unaffected
firefox72 --- wontfix
firefox73 --- wontfix
firefox74 --- fixed

People

(Reporter: intermittent-bug-filer, Assigned: jhlin)

Details

(Keywords: crash, intermittent-failure)

Crash Data

Attachments

(1 file)

Bug 1602996 - assert if Android decoder is used after shutdown. r?jya
47 bytes, text/x-phabricator-request
Details | Review

Filed by: cbrindusan [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer.html#?job_id=280573080&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/H9f3QbElQIqUH3ZV_04f7w/runs/0/artifacts/public/logs/live_backing.log

[task 2019-12-11T01:00:21.237Z] 00:59:50 INFO - 291 INFO TEST-START | dom/media/tests/mochitest/test_peerConnection_restartIceNoRtcpMux.html
[task 2019-12-11T01:00:21.237Z] 01:00:15 INFO - wait for org.mozilla.geckoview.test complete; top activity=com.bitbar.testdroid.monitor
[task 2019-12-11T01:00:21.237Z] 01:00:15 INFO - remoteautomation.py | Application ran for: 0:08:58.581215
[task 2019-12-11T01:00:21.237Z] 01:00:16 INFO - mozcrash Copy/paste: /builds/task_1576024728/workspace/build/linux64-minidump_stackwalk /tmp/tmpXRaQ5l/7b459bca-524c-f1ab-3de2-956b9cba147a.dmp /builds/task_1576024728/workspace/build/symbols
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - mozcrash Saved minidump as /builds/task_1576024728/workspace/build/blobber_upload_dir/7b459bca-524c-f1ab-3de2-956b9cba147a.dmp
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - mozcrash Saved app info as /builds/task_1576024728/workspace/build/blobber_upload_dir/7b459bca-524c-f1ab-3de2-956b9cba147a.extra
[task 2019-12-11T01:00:21.237Z] 01:00:21 WARNING - PROCESS-CRASH | dom/media/tests/mochitest/test_peerConnection_restartIceNoRtcpMux.html | application crashed [@ mozilla::jni::Context<mozilla::java::CodecProxy, _jobject*>::operator->() const]
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - Crash dump filename: /tmp/tmpXRaQ5l/7b459bca-524c-f1ab-3de2-956b9cba147a.dmp
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - Operating system: Android
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - 0.0.0 Linux 4.4.56-g594d847d09a1 #1 SMP PREEMPT Thu Oct 26 22:34:08 UTC 2017 armv8l
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - CPU: arm
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - ARMv1 Qualcomm part(0x51008010) features: half,thumb,fastmult,vfpv2,edsp,neon,vfpv3,tls,vfpv4,idiva,idivt
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - 8 CPUs
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - GPU: UNKNOWN
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - Crash reason: SIGSEGV /SEGV_MAPERR
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - Crash address: 0x0
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - Process uptime: not available
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - Thread 69 (crashed)
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - 0 libxul.so!mozilla::jni::Context<mozilla::java::CodecProxy, _jobject*>::operator->() const [Refs.h:b59b9185d64944fc6e671b75ea5eba515397e30f : 231 + 0xe]
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - r0 = 0x00000000 r1 = 0xd4d972a6 r2 = 0xf3ad9a71 r3 = 0xf3ad9a71
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - r4 = 0x000000e7 r5 = 0xbc2a5c00 r6 = 0xd5163fb9 r7 = 0xbaeff1a8
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - r8 = 0xbaeff200 r9 = 0xf1c681b8 r10 = 0x00000000 r12 = 0xf1ad4fb8
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - fp = 0xd2427169 sp = 0xbaeff1a0 lr = 0xf4ea259d pc = 0xd144260c
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - Found by: given as instruction pointer in context
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - 1 libxul.so!mozilla::RemoteDataDecoder::ProcessFlush() [RemoteDataDecoder.cpp:b59b9185d64944fc6e671b75ea5eba515397e30f : 617 + 0xf]
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - r4 = 0xd56a15d0 r5 = 0xbc2a5c00 r6 = 0xd5163fb9 r7 = 0xbaeff1e0
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - r8 = 0xbaeff200 r9 = 0xf1c681b8 r10 = 0x00000000 fp = 0xd2427169
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - sp = 0xbaeff1b0 lr = 0xd2427129 pc = 0xd2427129
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - 2 libxul.so!mozilla::RemoteVideoDecoder::Flush()::{lambda()#1}::operator()() const [RemoteDataDecoder.cpp:b59b9185d64944fc6e671b75ea5eba515397e30f : 173 + 0x7]
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - r4 = 0xbaeff200 r5 = 0xbc2a5c00 r6 = 0xf1c681b8 r7 = 0xbaeff1f0
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - r8 = 0xbcdcc960 r9 = 0xf1c681b8 r10 = 0x00000000 fp = 0xbaeff228
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - sp = 0xbaeff1e8 lr = 0xd242e1f1 pc = 0xd242e1f1
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - 3 libxul.so!mozilla::detail::ProxyFunctionRunnable<mozilla::RemoteVideoDecoder::Flush()::{lambda()#1}, mozilla::MozPromise<bool, mozilla::MediaResult, true> >::Run() [MozPromise.h:b59b9185d64944fc6e671b75ea5eba515397e30f : 1450 + 0xb]
[task 2019-12-11T01:00:21.237Z] 01:00:21 INFO - r4 = 0xbaeff200 r5 = 0xbd6e3abc r6 = 0xf1c681b8 r7 = 0xbaeff218
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r8 = 0xbcdcc960 r9 = 0xf1c681b8 r10 = 0x00000000 fp = 0xbaeff228
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - sp = 0xbaeff1f8 lr = 0xd242e125 pc = 0xd242e125[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - 4 libxul.so!mozilla::TaskQueue::Runner::Run() [TaskQueue.cpp:b59b9185d64944fc6e671b75ea5eba515397e30f : 201 + 0x9]
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r4 = 0xbcdcc974 r5 = 0xbaeff228 r6 = 0xbd5fd198 r7 = 0xbaeff278
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r8 = 0xbcdcc960 r9 = 0xf1c681b8 r10 = 0x00000000 fp = 0xbaeff228
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - sp = 0xbaeff220 lr = 0xd0c77d59 pc = 0xd0c77d59
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - 5 libxul.so!nsThreadPool::Run() [nsThreadPool.cpp:b59b9185d64944fc6e671b75ea5eba515397e30f : 304 + 0xb]
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r4 = 0x00000000 r5 = 0x00000000 r6 = 0xbaeff304 r7 = 0xbaeff348
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r8 = 0x00000000 r9 = 0xffffffff r10 = 0xbaeff2f8 fp = 0x00000000
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - sp = 0xbaeff280 lr = 0xd0c83a67 pc = 0xd0c83a67
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - 6 libxul.so!non-virtual thunk to nsThreadPool::Run() [nsThreadPool.cpp:b59b9185d64944fc6e671b75ea5eba515397e30f : 0 + 0x9]
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r4 = 0xffffffff r5 = 0xbdfa2fec r6 = 0x00000000 r7 = 0xbaeff350
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r8 = 0xbdfa2f60 r9 = 0x00000001 r10 = 0xbaeff85b fp = 0xbdfa2f40
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - sp = 0xbaeff350 lr = 0xd0c83cd3 pc = 0xd0c83cd3
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - 7 libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:b59b9185d64944fc6e671b75ea5eba515397e30f : 1256 + 0x9]
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r4 = 0xffffffff r5 = 0xbdfa2fec r6 = 0x00000000 r7 = 0xbaeff850
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r8 = 0xbdfa2f60 r9 = 0x00000001 r10 = 0xbaeff85b fp = 0xbdfa2f40
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - sp = 0xbaeff358 lr = 0xd0c8036f pc = 0xd0c8036f
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - 8 libxul.so!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp:b59b9185d64944fc6e671b75ea5eba515397e30f : 486 + 0x9]
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r4 = 0x00000000 r5 = 0xbdfa2f40 r6 = 0xf1c681b8 r7 = 0xbaeff870
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r8 = 0xbc7dfb0c r9 = 0xbdfa2f40 r10 = 0xbc7dfb00 fp = 0xf1c681b8
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - sp = 0xbaeff858 lr = 0xd0c827fd pc = 0xd0c827fd
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - 9 libxul.so!mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) [MessagePump.cpp:b59b9185d64944fc6e671b75ea5eba515397e30f : 302 + 0x7]
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r4 = 0xbc7dfaf0 r5 = 0xbdfa31c0 r6 = 0xbaeff87c r7 = 0xbaeff8a0
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r8 = 0xbc7dfb0c r9 = 0xbdfa2f40 r10 = 0xbc7dfb00 fp = 0xf1c681b8
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - sp = 0xbaeff878 lr = 0xd10aa0ed pc = 0xd10aa0ed
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - 10 libxul.so!MessageLoop::RunInternal() [message_loop.cc:b59b9185d64944fc6e671b75ea5eba515397e30f : 315 + 0xf]
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r4 = 0xbdfa31c0 r5 = 0xf1c681b8 r6 = 0xbdfa2f60 r7 = 0xbaeff8c8
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r8 = 0xbdfa2f64 r9 = 0xd6c8838c r10 = 0xbaeff904 fp = 0x00000000
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - sp = 0xbaeff8a8 lr = 0xd1057ac5 pc = 0xd1057ac5
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - 11 libxul.so!MessageLoop::Run() [message_loop.cc:b59b9185d64944fc6e671b75ea5eba515397e30f : 290 + 0x5]
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r4 = 0xbdfa31c0 r5 = 0xf1c681b8 r6 = 0xbdfa2f60 r7 = 0xbaeff8f0
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - r8 = 0xbdfa2f64 r9 = 0xd6c8838c r10 = 0xbaeff904 fp = 0x00000000[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - sp = 0xbaeff8d0 lr = 0xd1057a55 pc = 0xd1057a55
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.240Z] 01:00:21 INFO - 12 libxul.so!nsThread::ThreadFunc(void*) [nsThread.cpp:b59b9185d64944fc6e671b75ea5eba515397e30f : 460 + 0x7]
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - r4 = 0xbdfa2f40 r5 = 0xbaeff90c r6 = 0xbdfa2f60 r7 = 0xbaeff930
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - r8 = 0xbdfa2f64 r9 = 0xd6c8838c r10 = 0xbaeff904 fp = 0x00000000
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - sp = 0xbaeff8f8 lr = 0xd0c7e7f1 pc = 0xd0c7e7f1
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - 13 libnss3.so!_pt_root [ptthread.c:b59b9185d64944fc6e671b75ea5eba515397e30f : 201 + 0x5]
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - r4 = 0xbd5fd680 r5 = 0x00000000 r6 = 0xd6efdf9c r7 = 0xbaeff950
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - r8 = 0xbaeff970 r9 = 0x000028b2 r10 = 0xd6df17dd fp = 0x00000000
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - sp = 0xbaeff938 lr = 0xd6df18a9 pc = 0xd6df18a9
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - 14 libc.so + 0x47947
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - r4 = 0xbaeff970 r5 = 0xbaeff970 r6 = 0xbaeff970 r7 = 0x00000078
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - r8 = 0x00001b04 r9 = 0x000028b1 r10 = 0xd6df17dd fp = 0x00000000
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - sp = 0xbaeff958 lr = 0xf1c17949 pc = 0xf1c17949
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - Found by: call frame info
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - 15 libc.so + 0x4792f
[task 2019-12-11T01:00:21.247Z] 01:00:21 INFO - sp = 0xbaeff95c pc = 0xf1c17931
[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - Found by: stack scanning
[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - 16 libc.so + 0x1b381
[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - sp = 0xbaeff960 pc = 0xf1beb383
[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - Found by: stack scanning
[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - 17 libc.so + 0x4792f
[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - sp = 0xbaeff968 pc = 0xf1c17931
[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - Found by: stack scanning
[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - 18 libnss3.so!pt_recvfrom_cont [ptio.c:b59b9185d64944fc6e671b75ea5eba515397e30f : 0 + 0x7]
[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - sp = 0xbaeff9a4 pc = 0xd6df17dd
[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - Found by: stack scanning
[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - 19 libskia.so + 0x423a6f
[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - sp = 0xbaeff9d8 pc = 0xf3ad9a71
[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - Found by: stack scanning[task 2019-12-11T01:00:21.248Z] 01:00:21 INFO - Thread 0

The priority flag is not set for this bug.
:dminor, could you have a look please?

For more information, please visit auto_nag documentation.

Flags: needinfo?(dminor)

Hi Michael, can you take a look at triaging this one? I was thinking P3 since it seems to be low frequency and not security related, but I wanted to get your opinion since I see RDD in the stack.

Flags: needinfo?(dminor) → needinfo?(mfroman)
Flags: needinfo?(mfroman)
Priority: -- → P3

Upon thinking about this more, it appears to be less a webrtc bug than a/v playback related. The crash is happening here[1] calling

mJavaDecoder->Flush()

It looks like maybe RemoteDataDecoder::ProcessShutdown has excuted and set mJavaDecoder to nullptr[2].

John, is it possible for RemoteDataDecoder::ProcessFlush to execute after ProcessShutdown?

[1] https://searchfox.org/mozilla-central/source/dom/media/platforms/android/RemoteDataDecoder.cpp#617
[2] https://searchfox.org/mozilla-central/source/dom/media/platforms/android/RemoteDataDecoder.cpp#661

Flags: needinfo?(jolin)

(In reply to Michael Froman [:mjf] from comment #4)

Upon thinking about this more, it appears to be less a webrtc bug than a/v playback related. The crash is happening here[1] calling

John, is it possible for RemoteDataDecoder::ProcessFlush to execute after ProcessShutdown?

It should never happen if the client calls methods in order, but there is no assertion to catch that. I'll add some to find out how that happened.

Assignee: nobody → jolin
Component: WebRTC → Audio/Video: Playback
Flags: needinfo?(jolin)

The component has been changed since the backlog priority was decided, so we're resetting it.
For more information, please visit auto_nag documentation.

Priority: P3 → --
Pushed by jolin@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/a33bccde9883 assert if Android decoder is used after shutdown. r=jya

https://hg.mozilla.org/mozilla-central/rev/a33bccde9883

Status: NEW → RESOLVED
Closed: 6 years ago
status-firefox74: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla74
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: