Closed
Bug 1717285
Opened 3 years ago
Closed 2 years ago
Intermittent PROCESS-CRASH | Main app process exited normally | application crashed [@ mozilla::NrSocketBase::fire_callback]
Categories
(Core :: WebRTC: Networking, defect, P2)
Core
WebRTC: Networking
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: intermittent-bug-filer, Assigned: bwc)
References
Details
(4 keywords)
Crash Data
Filed by: abutkovits [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer?job_id=343258074&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/OFn5M4nOTmOcnzHfcV2jVw/runs/0/artifacts/public/logs/live_backing.log
[task 2021-06-19T09:12:30.057Z] 09:12:30 INFO - TEST-OK | dom/media/webrtc/tests/mochitests/test_peerConnection_stats_relayProtocol.html | took 38824ms
[task 2021-06-19T09:12:30.065Z] 09:12:30 INFO - GECKO(2476) | (generic/INFO) TestNrSocket IP4:10.7.204.55:0/TCP destroying port mapping IP4:10.7.204.55:0/TCP -> IP4:0.0.0.0:3478/TCP
[task 2021-06-19T09:12:30.070Z] 09:12:30 INFO - GECKO(2476) | (generic
[task 2021-06-19T09:12:30.075Z] 09:12:30 INFO - ICE Server websocket closed
[task 2021-06-19T09:12:30.079Z] 09:12:30 INFO - GECKO(2476) | /
[task 2021-06-19T09:12:30.084Z] 09:12:30 INFO - GECKO(2476) | ERR) Write error for IP4:0.0.0.0:3478/TCP - 3
[task 2021-06-19T09:12:30.091Z] 09:12:30 INFO - GECKO(2476) | (turn/WARNING) TURN(relay(IP4:10.7.204.55:0/TCP|IP4:0.0.0.0:3478/TCP)): Failed sending request
[task 2021-06-19T09:12:30.097Z] 09:12:30 INFO - GECKO(2476) | (generic/ERR) NrTcpSocket::OnClose 000002D68180D000 reason=2152398868 name=NS_ERROR_NET_RESET
[task 2021-06-19T09:12:30.411Z] 09:12:30 ERROR - GECKO(2476) | A content process crashed and MOZ_CRASHREPORTER_SHUTDOWN is set, shutting down
[task 2021-06-19T09:12:30.545Z] 09:12:30 INFO - GECKO(2476) | [Parent 10832, IPC I/O Parent] WARNING: file /builds/worker/checkouts/gecko/ipc/chromium/src/base/process_util_win.cc:167
[task 2021-06-19T09:12:30.548Z] 09:12:30 INFO - GECKO(2476) | [Parent 10832, IPC I/O Parent] WARNING: file /builds/worker/checkouts/gecko/ipc/chromium/src/base/process_util_win.cc:167
[task 2021-06-19T09:12:30.550Z] 09:12:30 INFO - GECKO(2476) | JavaScript error: resource:///modules/Interactions.jsm, line 347: NS_ERROR_FAILURE: Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIUserIdleService.removeIdleObserver]
[task 2021-06-19T09:12:30.744Z] 09:12:30 INFO - GECKO(2476) | 1624093950742 Marionette TRACE Received observer notification xpcom-will-shutdown
[task 2021-06-19T09:12:30.746Z] 09:12:30 INFO - GECKO(2476) | 1624093950742 Marionette INFO Stopped listening on port 2828
[task 2021-06-19T09:12:30.748Z] 09:12:30 INFO - GECKO(2476) | 1624093950742 Marionette DEBUG Marionette stopped listening
[task 2021-06-19T09:12:30.840Z] 09:12:30 INFO - TEST-INFO | Main app process: exit 0
[task 2021-06-19T09:12:30.842Z] 09:12:30 INFO - runtests.py | Application ran for: 0:07:24.769485
[task 2021-06-19T09:12:30.843Z] 09:12:30 INFO - zombiecheck | Reading PID log: C:\Users\testdroid.YOGA-035.000\AppData\Local\Temp\tmprql_by4jpidlog
[task 2021-06-19T09:12:30.846Z] 09:12:30 INFO - ==> process 10832 launched child process 9892 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.0.262791190\143022101" -parentBuildID 20210618180637 -prefsHandle 2304 -prefMapHandle 2296 -prefsLen 1 -prefMapSize 250154 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 2360 1d9561cb500 gpu)
[task 2021-06-19T09:12:30.849Z] 09:12:30 INFO - ==> process 10832 launched child process 10364 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.6.929687889\965218551" -childID 1 -isForBrowser -prefsHandle 2992 -prefMapHandle 2836 -prefsLen 1790 -prefMapSize 250154 -jsInit 1444 285660 -parentBuildID 20210618180637 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 3008 1d95a2e7140 tab)
[task 2021-06-19T09:12:30.852Z] 09:12:30 INFO - ==> process 10832 launched child process 5376 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.13.866335456\559246464" -childID 2 -isForBrowser -prefsHandle 2956 -prefMapHandle 2948 -prefsLen 1933 -prefMapSize 250154 -jsInit 1444 285660 -parentBuildID 20210618180637 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 3260 1d95aa024c0 tab)
[task 2021-06-19T09:12:30.855Z] 09:12:30 INFO - ==> process 10832 launched child process 996 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.20.678737939\1076941278" -childID 3 -isForBrowser -prefsHandle 3420 -prefMapHandle 3416 -prefsLen 1973 -prefMapSize 250154 -jsInit 1444 285660 -parentBuildID 20210618180637 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 3432 1d95aa02680 tab)
[task 2021-06-19T09:12:30.859Z] 09:12:30 INFO - ==> process 10832 launched child process 6432 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.27.247919827\966645069" -childID 4 -isForBrowser -prefsHandle 4172 -prefMapHandle 4168 -prefsLen 9869 -prefMapSize 250154 -jsInit 1444 285660 -parentBuildID 20210618180637 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 4160 1d95e746d80 tab)
[task 2021-06-19T09:12:30.862Z] 09:12:30 INFO - ==> process 10832 launched child process 1692 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.34.1435042974\1811622922" -childID 5 -isForBrowser -prefsHandle 4440 -prefMapHandle 4436 -prefsLen 9897 -prefMapSize 250154 -jsInit 1444 285660 -parentBuildID 20210618180637 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 4448 1d95e746f40 tab)
[task 2021-06-19T09:12:30.865Z] 09:12:30 INFO - ==> process 10832 launched child process 13044 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.41.2136905772\254662537" -parentBuildID 20210618180637 -prefsHandle 4980 -prefMapHandle 5012 -prefsLen 12075 -prefMapSize 250154 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 2964 1d95ce67d00 rdd)
[task 2021-06-19T09:12:30.866Z] 09:12:30 INFO - zombiecheck | Checking for orphan process with PID: 5376
[task 2021-06-19T09:12:30.868Z] 09:12:30 INFO - zombiecheck | Checking for orphan process with PID: 6432
[task 2021-06-19T09:12:30.869Z] 09:12:30 INFO - zombiecheck | Checking for orphan process with PID: 1692
[task 2021-06-19T09:12:30.870Z] 09:12:30 INFO - zombiecheck | Checking for orphan process with PID: 9892
[task 2021-06-19T09:12:30.872Z] 09:12:30 INFO - zombiecheck | Checking for orphan process with PID: 996
[task 2021-06-19T09:12:30.873Z] 09:12:30 INFO - zombiecheck | Checking for orphan process with PID: 13044
[task 2021-06-19T09:12:30.874Z] 09:12:30 INFO - zombiecheck | Checking for orphan process with PID: 10364
[task 2021-06-19T09:12:30.876Z] 09:12:30 INFO - mozcrash Downloading symbols from: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/PoT9Rl5BSpeopZdfc9oU7A/artifacts/public/build/target.crashreporter-symbols.zip
[task 2021-06-19T09:12:34.502Z] 09:12:34 INFO - mozcrash Copy/paste: C:/tasks/task_1624087931/fetches\minidump_stackwalk\minidump_stackwalk.exe C:\Users\testdroid.YOGA-035.000\AppData\Local\Temp\tmp30djoihx.mozrunner\minidumps\f1c39f69-c5ad-40a4-b7b5-a6caf412f542.dmp C:\Users\testdroid.YOGA-035.000\AppData\Local\Temp\tmpd4qctdbq
[task 2021-06-19T09:12:42.407Z] 09:12:42 INFO - mozcrash Saved minidump as C:\tasks\task_1624087931\build\blobber_upload_dir\f1c39f69-c5ad-40a4-b7b5-a6caf412f542.dmp
[task 2021-06-19T09:12:42.408Z] 09:12:42 INFO - mozcrash Saved app info as C:\tasks\task_1624087931\build\blobber_upload_dir\f1c39f69-c5ad-40a4-b7b5-a6caf412f542.extra
[task 2021-06-19T09:12:43.161Z] 09:12:43 INFO - PROCESS-CRASH | Main app process exited normally | application crashed [@ mozilla::NrSocketBase::fire_callback(int)]
[task 2021-06-19T09:12:43.161Z] 09:12:43 INFO - Crash dump filename: C:\Users\testdroid.YOGA-035.000\AppData\Local\Temp\tmp30djoihx.mozrunner\minidumps\f1c39f69-c5ad-40a4-b7b5-a6caf412f542.dmp
[task 2021-06-19T09:12:43.161Z] 09:12:43 INFO - Operating system: Windows NT
[task 2021-06-19T09:12:43.161Z] 09:12:43 INFO - 10.0.17134
[task 2021-06-19T09:12:43.161Z] 09:12:43 INFO - CPU: arm64
[task 2021-06-19T09:12:43.162Z] 09:12:43 INFO - 8 CPUs
[task 2021-06-19T09:12:43.162Z] 09:12:43 INFO -
[task 2021-06-19T09:12:43.162Z] 09:12:43 INFO - GPU: UNKNOWN
[task 2021-06-19T09:12:43.163Z] 09:12:43 INFO -
[task 2021-06-19T09:12:43.163Z] 09:12:43 INFO - Crash reason: EXCEPTION_ACCESS_VIOLATION_READ
[task 2021-06-19T09:12:43.163Z] 09:12:43 INFO - Crash address: 0xe5e5e5e5
[task 2021-06-19T09:12:43.163Z] 09:12:43 INFO - Assertion: Unknown assertion type 0x00000000
[task 2021-06-19T09:12:43.164Z] 09:12:43 INFO - Process uptime: 443 seconds
[task 2021-06-19T09:12:43.164Z] 09:12:43 INFO -
[task 2021-06-19T09:12:43.164Z] 09:12:43 INFO - Thread 3 (crashed)
[task 2021-06-19T09:12:43.164Z] 09:12:43 INFO - 0 xul.dll!mozilla::NrSocketBase::fire_callback(int) [nr_socket_prsock.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 332 + 0x0]
[task 2021-06-19T09:12:43.164Z] 09:12:43 INFO - x0 = 0xe5e5e5e5e5e5e5e5 x1 = 0x0000000000000000
[task 2021-06-19T09:12:43.165Z] 09:12:43 INFO - x2 = 0x000000f4f883ebf8 x3 = 0x000000f4f883ee58
[task 2021-06-19T09:12:43.165Z] 09:12:43 INFO - x4 = 0x0000000000000000 x5 = 0x000000f4f883ebb8
[task 2021-06-19T09:12:43.165Z] 09:12:43 INFO - x6 = 0x0000000000000000 x7 = 0x0000000000000000
[task 2021-06-19T09:12:43.165Z] 09:12:43 INFO - x8 = 0x0000000000000000 x9 = 0x0000000000000006
[task 2021-06-19T09:12:43.165Z] 09:12:43 INFO - x10 = 0x0000000000000007 x11 = 0x0000000000000198
[task 2021-06-19T09:12:43.165Z] 09:12:43 INFO - x12 = 0x0000000000000000 x13 = 0x0000000000000000
[task 2021-06-19T09:12:43.165Z] 09:12:43 INFO - x14 = 0x00000000ffffffde x15 = 0x0000000000000114
[task 2021-06-19T09:12:43.165Z] 09:12:43 INFO - x16 = 0x000029c94f9d8e74 x17 = 0x000000f4f8832000
[task 2021-06-19T09:12:43.166Z] 09:12:43 INFO - x18 = 0x0000000000000000 x19 = 0x000002d68180d000
[task 2021-06-19T09:12:43.166Z] 09:12:43 INFO - x20 = 0x0000000000000000 x21 = 0x000002d6f2610498
[task 2021-06-19T09:12:43.166Z] 09:12:43 INFO - x22 = 0x000002d682768340 x23 = 0x000002d6f26744e8
[task 2021-06-19T09:12:43.166Z] 09:12:43 INFO - x24 = 0x000000f4f883f0c8 x25 = 0x0000000000000000
[task 2021-06-19T09:12:43.166Z] 09:12:43 INFO - x26 = 0x0000000000000000 x27 = 0x000000f4f883f0b0
[task 2021-06-19T09:12:43.166Z] 09:12:43 INFO - x28 = 0x00007ffc8d1ac000 fp = 0x000000f4f883ee90
[task 2021-06-19T09:12:43.166Z] 09:12:43 INFO - lr = 0x00007ffc8a3999d0 sp = 0x000000f4f883ee80
[task 2021-06-19T09:12:43.167Z] 09:12:43 INFO - pc = 0x00007ffc8a399a5c
[task 2021-06-19T09:12:43.167Z] 09:12:43 INFO - Found by: given as instruction pointer in context
[task 2021-06-19T09:12:43.167Z] 09:12:43 INFO - 1 xul.dll!mozilla::NrTcpSocket::DoCallbacks() [nr_socket_tcp.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 281 + 0x8]
[task 2021-06-19T09:12:43.167Z] 09:12:43 INFO - fp = 0x000000f4f883eeb0 lr = 0x00007ffc8a3999d0
[task 2021-06-19T09:12:43.167Z] 09:12:43 INFO - sp = 0x000000f4f883eea0 pc = 0x00007ffc8a3999d0
[task 2021-06-19T09:12:43.167Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.168Z] 09:12:43 INFO - 2 xul.dll!mozilla::NrTcpSocket::DoCallbacks() [nr_socket_tcp.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 281 + 0x8]
[task 2021-06-19T09:12:43.168Z] 09:12:43 INFO - fp = 0x000000f4f883eef0 lr = 0x00007ffc8a399954
[task 2021-06-19T09:12:43.168Z] 09:12:43 INFO - sp = 0x000000f4f883eec0 pc = 0x00007ffc8a3999d0
[task 2021-06-19T09:12:43.168Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.168Z] 09:12:43 INFO - 3 xul.dll!mozilla::NrTcpSocket::OnClose(nsresult) [nr_socket_tcp.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 252 + 0x4]
[task 2021-06-19T09:12:43.168Z] 09:12:43 INFO - fp = 0x000000f4f883ef00 lr = 0x00007ffc8be2c2c0
[task 2021-06-19T09:12:43.168Z] 09:12:43 INFO - sp = 0x000000f4f883ef00 pc = 0x00007ffc8a399954
[task 2021-06-19T09:12:43.169Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.169Z] 09:12:43 INFO - 4 xul.dll!mozilla::detail::RunnableMethodImpl<RefPtr<mozilla::net::WebrtcTCPSocketCallback>,void (mozilla::net::WebrtcTCPSocketCallback::*)(nsresult),1,mozilla::RunnableKind::Standard,nsresult>::Run() [nsThreadUtils.h:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 1203 + 0x8]
[task 2021-06-19T09:12:43.169Z] 09:12:43 INFO - fp = 0x000000f4f883f250 lr = 0x00007ffc89914628
[task 2021-06-19T09:12:43.169Z] 09:12:43 INFO - sp = 0x000000f4f883ef10 pc = 0x00007ffc8be2c2c0
[task 2021-06-19T09:12:43.169Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.169Z] 09:12:43 INFO - 5 xul.dll!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 1146 + 0xc]
[task 2021-06-19T09:12:43.170Z] 09:12:43 INFO - fp = 0x000000f4f883f5e0 lr = 0x00007ffc89a39764
[task 2021-06-19T09:12:43.170Z] 09:12:43 INFO - sp = 0x000000f4f883f260 pc = 0x00007ffc89914628
[task 2021-06-19T09:12:43.170Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.170Z] 09:12:43 INFO - 6 xul.dll!mozilla::net::nsSocketTransportService::Run() [nsSocketTransportService2.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 1167 + 0x28]
[task 2021-06-19T09:12:43.170Z] 09:12:43 INFO - fp = 0x000000f4f883f940 lr = 0x00007ffc89914628
[task 2021-06-19T09:12:43.171Z] 09:12:43 INFO - sp = 0x000000f4f883f5f0 pc = 0x00007ffc89a39764
[task 2021-06-19T09:12:43.171Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.171Z] 09:12:43 INFO - 7 xul.dll!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 1146 + 0xc]
[task 2021-06-19T09:12:43.171Z] 09:12:43 INFO - fp = 0x000000f4f883f9e0 lr = 0x00007ffc89c05e58
[task 2021-06-19T09:12:43.171Z] 09:12:43 INFO - sp = 0x000000f4f883f950 pc = 0x00007ffc89914628
[task 2021-06-19T09:12:43.171Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.171Z] 09:12:43 INFO - 8 xul.dll!mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) [MessagePump.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 300 + 0x20]
[task 2021-06-19T09:12:43.172Z] 09:12:43 INFO - fp = 0x000000f4f883fa08 lr = 0x00007ffc8796a9e4
[task 2021-06-19T09:12:43.172Z] 09:12:43 INFO - sp = 0x000000f4f883f9f0 pc = 0x00007ffc89c05e58
[task 2021-06-19T09:12:43.172Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.172Z] 09:12:43 INFO - 9 xul.dll!MessageLoop::RunHandler() [message_loop.cc:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 324 + 0xc]
[task 2021-06-19T09:12:43.172Z] 09:12:43 INFO - fp = 0x000000f4f883fa60 lr = 0x00007ffc8796a970
[task 2021-06-19T09:12:43.172Z] 09:12:43 INFO - sp = 0x000000f4f883fa18 pc = 0x00007ffc8796a9e4
[task 2021-06-19T09:12:43.172Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.173Z] 09:12:43 INFO - 10 xul.dll!MessageLoop::Run() [message_loop.cc:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 306 + 0x0]
[task 2021-06-19T09:12:43.173Z] 09:12:43 INFO - fp = 0x000000f4f883fc28 lr = 0x00007ffc8796a404
[task 2021-06-19T09:12:43.173Z] 09:12:43 INFO - sp = 0x000000f4f883fa70 pc = 0x00007ffc8796a970
[task 2021-06-19T09:12:43.173Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.173Z] 09:12:43 INFO - 11 xul.dll!static nsThread::ThreadFunc(void*) [nsThread.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 392 + 0x4]
[task 2021-06-19T09:12:43.174Z] 09:12:43 INFO - fp = 0x000000f4f883fca0 lr = 0x00007ffcaa2281d0
[task 2021-06-19T09:12:43.174Z] 09:12:43 INFO - sp = 0x000000f4f883fc38 pc = 0x00007ffc8796a404
[task 2021-06-19T09:12:43.174Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.174Z] 09:12:43 INFO - 12 nss3.dll!_PR_NativeRunThread(void*) [pruthr.c:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 399 + 0x4]
[task 2021-06-19T09:12:43.174Z] 09:12:43 INFO - fp = 0x000000f4f883fcb0 lr = 0x00007ffcaa256230
[task 2021-06-19T09:12:43.174Z] 09:12:43 INFO - sp = 0x000000f4f883fcb0 pc = 0x00007ffcaa2281d0
[task 2021-06-19T09:12:43.174Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.174Z] 09:12:43 INFO - 13 nss3.dll!pr_root(void*) [w95thred.c:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 139 + 0x4]
[task 2021-06-19T09:12:43.175Z] 09:12:43 INFO - fp = 0x000000f4f883fcc0 lr = 0x00007ffcb9712ee0
[task 2021-06-19T09:12:43.175Z] 09:12:43 INFO - sp = 0x000000f4f883fcc0 pc = 0x00007ffcaa256230
[task 2021-06-19T09:12:43.175Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.175Z] 09:12:43 INFO - 14 ucrtbase.dll + 0x32edc
[task 2021-06-19T09:12:43.175Z] 09:12:43 INFO - fp = 0x000000f4f883fcf0 lr = 0x00007ffcbb3c5ba4
[task 2021-06-19T09:12:43.175Z] 09:12:43 INFO - sp = 0x000000f4f883fcd0 pc = 0x00007ffcb9712ee0
[task 2021-06-19T09:12:43.175Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.176Z] 09:12:43 INFO - 15 kernel32.dll + 0x15ba0
[task 2021-06-19T09:12:43.176Z] 09:12:43 INFO - fp = 0x000000f4f883fd78 lr = 0x00007ffca9e83ffc
[task 2021-06-19T09:12:43.176Z] 09:12:43 INFO - sp = 0x000000f4f883fd00 pc = 0x00007ffcbb3c5ba4
[task 2021-06-19T09:12:43.176Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.176Z] 09:12:43 INFO - 16 mozglue.dll!patched_BaseThreadInitThunk(int, void*, void*) [WindowsDllBlocklist.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 592 + 0x14]
[task 2021-06-19T09:12:43.177Z] 09:12:43 INFO - fp = 0x000000f4f883fd90 lr = 0x00007ffcbcac2544
[task 2021-06-19T09:12:43.177Z] 09:12:43 INFO - sp = 0x000000f4f883fd88 pc = 0x00007ffca9e83ffc
[task 2021-06-19T09:12:43.177Z] 09:12:43 INFO - Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.177Z] 09:12:43 INFO - 17 ntdll.dll!RtlUserThreadStart + 0x40
[task 2021-06-19T09:12:43.177Z] 09:12:43 INFO - fp = 0x0000000000000000 lr = 0x0000000000000000
[task 2021-06-19T09:12:43.177Z] 09:12:43 INFO - sp = 0x000000f4f883fda0 pc = 0x00007ffcbcac2544
[task 2021-06-19T09:12:43.177Z] 09:12:43 INFO - Found by: previous frame's frame pointer
| Comment hidden (Intermittent Failures Robot) |
|
Assignee | |
Updated•3 years ago
|
Group: core-security
Severity: S4 → S2
Component: WebRTC: Audio/Video → WebRTC: Networking
Priority: -- → P2
|
|
Assignee | |
Comment 2•3 years ago
|
||
This looks like a UAF bug.
|
||
Updated•3 years ago
|
Group: core-security → media-core-security
Keywords: csectype-uaf,
sec-high
|
|
Assignee | |
Updated•3 years ago
|
Assignee: nobody → docfaraday
|
|
Assignee | |
Comment 3•3 years ago
|
||
So that stack trace has two frames with NrTcpSocket::DoCallbacks. This looks like it might be specific to the NAT simulator, but I'll need to look at it some more.
|
|
Assignee | |
Comment 4•3 years ago
•
|
||
So I'm just not seeing how the NAT simulator could possibly take a call to DoCallbacks on one TCP socket and translate it to a call to DoCallbacks on another TCP socket. The only path there is via IPC callbacks. While it is conceivable that the call to close() might release a reference to the NrTcpSocket, the runnable calling OnClose should be holding onto a ref still. I wonder if it is possible that we're corrupting the refcount...
This still wouldn't explain why we see DoCallbacks twice in the stack trace, though.
|
||
Updated•3 years ago
|
Crash Signature: [@ mozilla::NrSocketBase::fire_callback(int)] → [@ mozilla::NrSocketBase::fire_callback(int)]
[@ mozilla::NrTcpSocket::DoCallbacks()]
|
||
Updated•3 years ago
|
Blocks: webrtc-triage
Crash Signature: [@ mozilla::NrSocketBase::fire_callback(int)]
[@ mozilla::NrTcpSocket::DoCallbacks()] → [@ mozilla::NrSocketBase::fire_callback(int)]
[@ mozilla::NrTcpSocket::DoCallbacks()]
|
|
||
Updated•3 years ago
|
No longer blocks: webrtc-triage
|
|
Assignee | |
Comment 8•3 years ago
|
||
|
|
Assignee | |
Comment 9•3 years ago
|
||
|
|
Assignee | |
Comment 10•3 years ago
|
||
|
|
Assignee | |
Comment 11•3 years ago
|
||
|
|
Assignee | |
Comment 16•3 years ago
|
||
|
|
Assignee | |
Comment 17•3 years ago
|
||
|
|
Assignee | |
Comment 18•3 years ago
|
||
|
|
Assignee | |
Comment 19•3 years ago
|
||
Interesting. Moving the definition of ~NrSocketBase out of the header seems to have made this crash go away (I'll have to test a more minimal patch though). We may have gotten into some subtle multiple inheritance bug, or maybe even a compiler bug.
|
|
Assignee | |
Comment 20•3 years ago
|
||
|
|
Assignee | |
Comment 21•3 years ago
|
||
|
|
Assignee | |
Comment 22•3 years ago
|
||
|
|
Assignee | |
Comment 23•3 years ago
|
||
|
|
Assignee | |
Comment 24•3 years ago
|
||
|
|
Assignee | |
Comment 25•3 years ago
|
||
|
|
Assignee | |
Comment 26•3 years ago
•
|
||
Ok, this is definitely a NAT-simulator-only bug. Figuring out the details. It took a while to get the important stuff to actually show up in the stack.
|
|
Assignee | |
Comment 28•3 years ago
|
||
|
|
Assignee | |
Comment 29•3 years ago
|
||
|
||
Updated•2 years ago
|
Crash Signature: [@ mozilla::NrSocketBase::fire_callback(int)]
[@ mozilla::NrTcpSocket::DoCallbacks()] → [@ mozilla::NrSocketBase::fire_callback]
[@ mozilla::NrTcpSocket::DoCallbacks]
Summary: Intermittent PROCESS-CRASH | Main app process exited normally | application crashed [@ mozilla::NrSocketBase::fire_callback(int)] → Intermittent PROCESS-CRASH | Main app process exited normally | application crashed [@ mozilla::NrSocketBase::fire_callback]
|
|
||
Comment 36•2 years ago
|
||
No longer occurring..
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → WORKSFORME
|
||
Comment 37•2 years ago
|
||
Since the bug is closed, the stalled keyword is now meaningless.
For more information, please visit BugBot documentation.
Keywords: stalled
|
||
Updated•1 year ago
|
Group: media-core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•