Closed Bug 1647750 Opened 1 year ago Closed 1 year ago

Intermittent SUMMARY: AddressSanitizer: SEGV /build/glibc-OTsEL5/glibc-2.27/string/../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:418 after audioworkletprocessor-process-frozen-array.https.html ran

Categories

(Core :: Web Audio, defect, P5)

defect

Tracking

()

RESOLVED FIXED
mozilla79
Tracking Status
firefox-esr68 --- unaffected
firefox-esr78 --- wontfix
firefox77 --- wontfix
firefox78 --- wontfix
firefox79 --- fixed

People

(Reporter: intermittent-bug-filer, Assigned: karlt)

References

(Regression)

Details

(Keywords: intermittent-failure, regression)

Crash Data

Attachments

(2 files)

Filed by: archaeopteryx [at] coole-files.de
Parsed log: https://treeherder.mozilla.org/logviewer.html#?job_id=307253387&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/NuqySjTqSrakjbUiMRvwqA/runs/0/artifacts/public/logs/live_backing.log


Bug 1644847 added the test earlier today.

[task 2020-06-23T14:04:49.203Z] 14:04:49 INFO - TEST-START | /svg/animations/svgenum-animation-2.html
[task 2020-06-23T14:04:49.206Z] 14:04:49 INFO - Closing window 246
[task 2020-06-23T14:04:49.725Z] 14:04:49 INFO - .
[task 2020-06-23T14:04:49.725Z] 14:04:49 INFO - TEST-OK | /svg/animations/svgenum-animation-2.html | took 518ms
[task 2020-06-23T14:04:49.727Z] 14:04:49 INFO - TEST-START | /svg/animations/svgenum-animation-3.html
[task 2020-06-23T14:04:49.728Z] 14:04:49 INFO - Closing window 248
[task 2020-06-23T14:04:50.141Z] 14:04:50 INFO - PID 13432 | AddressSanitizer:DEADLYSIGNAL
[task 2020-06-23T14:04:50.141Z] 14:04:50 INFO - PID 13432 | =================================================================
[task 2020-06-23T14:04:50.142Z] 14:04:50 ERROR - PID 13432 | ==14621==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7ff38e62d6c4 bp 0x7ff35a81bbd0 sp 0x7ff35a81b388 T35)
[task 2020-06-23T14:04:50.143Z] 14:04:50 INFO - PID 13432 | ==14621==The signal is caused by a READ memory access.
[task 2020-06-23T14:04:50.144Z] 14:04:50 INFO - PID 13432 | ==14621==Hint: address points to the zero page.
[task 2020-06-23T14:04:50.250Z] 14:04:50 INFO - .............
[task 2020-06-23T14:04:50.252Z] 14:04:50 INFO - TEST-OK | /webaudio/the-audio-api/the-audioworklet-interface/audioworkletprocessor-process-frozen-array.https.html | took 2681ms
[task 2020-06-23T14:04:50.253Z] 14:04:50 INFO - Restarting browser for new test environment
[task 2020-06-23T14:04:50.254Z] 14:04:50 INFO - PID 13432 | #0 0x7ff38e62d6c3 /build/glibc-OTsEL5/glibc-2.27/string/../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:418
[task 2020-06-23T14:04:50.260Z] 14:04:50 INFO - PID 13432 | #1 0x563e02e438c7 in __asan_memcpy /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cc:22:3
[task 2020-06-23T14:04:50.275Z] 14:04:50 INFO - PID 13432 | 1592921090265 Marionette INFO Stopped listening on port 58899
[task 2020-06-23T14:04:50.342Z] 14:04:50 INFO - .
[task 2020-06-23T14:04:50.342Z] 14:04:50 INFO - TEST-OK | /svg/animations/svgenum-animation-3.html | took 620ms
[task 2020-06-23T14:04:50.342Z] 14:04:50 INFO - TEST-START | /svg/animations/svgenum-animation-4.html
[task 2020-06-23T14:04:50.360Z] 14:04:50 INFO - Closing window 250
[task 2020-06-23T14:04:51.026Z] 14:04:51 INFO - PID 13432 | #2 0x7ff3745fcb07 in PodCopy<float> /builds/worker/workspace/obj-build/dist/include/mozilla/PodOperations.h:108:5
[task 2020-06-23T14:04:51.026Z] 14:04:51 INFO - PID 13432 | #3 0x7ff3745fcb07 in mozilla::dom::WorkletNodeEngine::ProcessBlocksOnPorts(mozilla::AudioNodeTrack*, long, mozilla::Span<mozilla::AudioBlock const, 18446744073709551615ul>, mozilla::Span<mozilla::AudioBlock, 18446744073709551615ul>, bool*) /builds/worker/checkouts/gecko/dom/media/webaudio/AudioWorkletNode.cpp:582:7
[task 2020-06-23T14:04:51.027Z] 14:04:51 INFO - PID 13432 | #4 0x7ff37461ec3a in mozilla::dom::WorkletNodeEngine::ProcessBlock(mozilla::AudioNodeTrack*, long, mozilla::AudioBlock const&, mozilla::AudioBlock*, bool*) /builds/worker/checkouts/gecko/dom/media/webaudio/AudioWorkletNode.cpp:87:5
[task 2020-06-23T14:04:51.047Z] 14:04:51 INFO - PID 13432 | #5 0x7ff3745d7654 in mozilla::AudioNodeTrack::ProcessInput(long, long, unsigned int) /builds/worker/checkouts/gecko/dom/media/webaudio/AudioNodeTrack.cpp:533:18
[task 2020-06-23T14:04:51.085Z] 14:04:51 INFO - PID 13432 | #6 0x7ff37404fee8 in mozilla::MediaTrackGraphImpl::ProduceDataForTracksBlockByBlock(unsigned int, int) /builds/worker/checkouts/gecko/dom/media/MediaTrackGraph.cpp:1116:13
[task 2020-06-23T14:04:51.085Z] 14:04:51 INFO - PID 13432 | #7 0x7ff374052e48 in mozilla::MediaTrackGraphImpl::Process(mozilla::AudioMixer*) /builds/worker/checkouts/gecko/dom/media/MediaTrackGraph.cpp:1282:11
[task 2020-06-23T14:04:51.085Z] 14:04:51 INFO - PID 13432 | #8 0x7ff374053f0c in mozilla::MediaTrackGraphImpl::OneIterationImpl(long, long, mozilla::AudioMixer*) /builds/worker/checkouts/gecko/dom/media/MediaTrackGraph.cpp:1409:3
[task 2020-06-23T14:04:51.149Z] 14:04:51 INFO - PID 13432 | #9 0x7ff373dde836 in mozilla::GraphRunner::Run() /builds/worker/checkouts/gecko/dom/media/GraphRunner.cpp:114:32
[task 2020-06-23T14:04:51.170Z] 14:04:51 INFO - PID 13432 | #10 0x7ff36e42938f in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1234:14
[task 2020-06-23T14:04:51.171Z] 14:04:51 INFO - PID 13432 | #11 0x7ff36e433c5c in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:501:10
[task 2020-06-23T14:04:51.187Z] 14:04:51 INFO - PID 13432 | #12 0x7ff36f530909 in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:332:5
[task 2020-06-23T14:04:51.192Z] 14:04:51 INFO - PID 13432 | #13 0x7ff36f44cb87 in RunInternal /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:315:10
[task 2020-06-23T14:04:51.193Z] 14:04:51 INFO - PID 13432 | #14 0x7ff36f44cb87 in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:308:3
[task 2020-06-23T14:04:51.195Z] 14:04:51 INFO - PID 13432 | #15 0x7ff36f44cb87 in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:290:3
[task 2020-06-23T14:04:51.195Z] 14:04:51 INFO - PID 13432 | #16 0x7ff36e42237a in nsThread::ThreadFunc(void*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:447:10
[task 2020-06-23T14:04:51.199Z] 14:04:51 INFO - PID 13432 | #17 0x7ff38b8d8d3e in _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5
[task 2020-06-23T14:04:51.199Z] 14:04:51 INFO - PID 13432 | #18 0x7ff38f6b56da in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76da)
[task 2020-06-23T14:04:51.200Z] 14:04:51 INFO - PID 13432 | #19 0x7ff38e69388e in clone /build/glibc-OTsEL5/glibc-2.27/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95
[task 2020-06-23T14:04:51.201Z] 14:04:51 INFO - PID 13432 | AddressSanitizer can not provide additional info.
[task 2020-06-23T14:04:51.201Z] 14:04:51 INFO - PID 13432 | SUMMARY: AddressSanitizer: SEGV /build/glibc-OTsEL5/glibc-2.27/string/../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:418

Pushed by archaeopteryx@coole-files.de:
https://hg.mozilla.org/integration/autoland/rev/8ac2d78ec7e9
disable audioworkletprocessor-process-frozen-array.https.html on Linux asan. DONTBUILD CLOSED TREE

Disabled test on Linux asan. Can you check what's wrong with it?

Flags: needinfo?(karlt)
Blocks: 1647714

Thank you for bringing this to my attention.

S3 because detaching the output buffers is not something sites are likely to want to do.

Assignee: nobody → karlt
Blocks: audioworklet
Severity: normal → S3
Status: NEW → ASSIGNED
Flags: needinfo?(karlt)
Keywords: leave-open
Blocks: 1647933
Pushed by ktomlinson@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/48b4525f3707
use MakeScopeExit() to avoid repetition of error paths r=padenot
Pushed by ktomlinson@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/13355da57aba
error out when AudioWorkletProcessor#process() detaches output Float32Array r=padenot

wontfix for beta because this is a safe crash and an edge case unlikely to be used by content.

Duplicate of this bug: 1647714
Crash Signature: [@ RtlpHeapFindListLookupEntry + 0x127] [@ _platform_memmove$VARIANT$Haswell + 0xf0]
Duplicate of this bug: 1647933
Crash Signature: [@ RtlpHeapFindListLookupEntry + 0x127] [@ _platform_memmove$VARIANT$Haswell + 0xf0] → [@ RtlpHeapFindListLookupEntry + 0x127] [@ _platform_memmove$VARIANT$Haswell + 0xf0] [@ _half + 0x4d3a]
Status: ASSIGNED → RESOLVED
Closed: 1 year ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla79
Crash Signature: [@ RtlpHeapFindListLookupEntry + 0x127] [@ _platform_memmove$VARIANT$Haswell + 0xf0] [@ _half + 0x4d3a] → [@ RtlpHeapFindListLookupEntry + 0x127] [@ _platform_memmove$VARIANT$Haswell + 0xf0] [@ _half + 0x4d3a]
You need to log in before you can comment on or make changes to this bug.