Closed Bug 1717285 Opened 3 years ago Closed 1 year ago

Intermittent PROCESS-CRASH | Main app process exited normally | application crashed [@ mozilla::NrSocketBase::fire_callback]

Categories

(Core :: WebRTC: Networking, defect, P2)

defect

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: intermittent-bug-filer, Assigned: bwc)

References

Details

(4 keywords)

Crash Data

Filed by: abutkovits [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer?job_id=343258074&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/OFn5M4nOTmOcnzHfcV2jVw/runs/0/artifacts/public/logs/live_backing.log


[task 2021-06-19T09:12:30.057Z] 09:12:30     INFO - TEST-OK | dom/media/webrtc/tests/mochitests/test_peerConnection_stats_relayProtocol.html | took 38824ms
[task 2021-06-19T09:12:30.065Z] 09:12:30     INFO - GECKO(2476) | (generic/INFO) TestNrSocket IP4:10.7.204.55:0/TCP destroying port mapping IP4:10.7.204.55:0/TCP -> IP4:0.0.0.0:3478/TCP
[task 2021-06-19T09:12:30.070Z] 09:12:30     INFO - GECKO(2476) | (generic
[task 2021-06-19T09:12:30.075Z] 09:12:30     INFO - ICE Server websocket closed
[task 2021-06-19T09:12:30.079Z] 09:12:30     INFO - GECKO(2476) | /
[task 2021-06-19T09:12:30.084Z] 09:12:30     INFO - GECKO(2476) | ERR) Write error for IP4:0.0.0.0:3478/TCP - 3
[task 2021-06-19T09:12:30.091Z] 09:12:30     INFO - GECKO(2476) | (turn/WARNING) TURN(relay(IP4:10.7.204.55:0/TCP|IP4:0.0.0.0:3478/TCP)): Failed sending request
[task 2021-06-19T09:12:30.097Z] 09:12:30     INFO - GECKO(2476) | (generic/ERR) NrTcpSocket::OnClose 000002D68180D000 reason=2152398868 name=NS_ERROR_NET_RESET
[task 2021-06-19T09:12:30.411Z] 09:12:30    ERROR - GECKO(2476) | A content process crashed and MOZ_CRASHREPORTER_SHUTDOWN is set, shutting down
[task 2021-06-19T09:12:30.545Z] 09:12:30     INFO - GECKO(2476) | [Parent 10832, IPC I/O Parent] WARNING: file /builds/worker/checkouts/gecko/ipc/chromium/src/base/process_util_win.cc:167
[task 2021-06-19T09:12:30.548Z] 09:12:30     INFO - GECKO(2476) | [Parent 10832, IPC I/O Parent] WARNING: file /builds/worker/checkouts/gecko/ipc/chromium/src/base/process_util_win.cc:167
[task 2021-06-19T09:12:30.550Z] 09:12:30     INFO - GECKO(2476) | JavaScript error: resource:///modules/Interactions.jsm, line 347: NS_ERROR_FAILURE: Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIUserIdleService.removeIdleObserver]
[task 2021-06-19T09:12:30.744Z] 09:12:30     INFO - GECKO(2476) | 1624093950742	Marionette	TRACE	Received observer notification xpcom-will-shutdown
[task 2021-06-19T09:12:30.746Z] 09:12:30     INFO - GECKO(2476) | 1624093950742	Marionette	INFO	Stopped listening on port 2828
[task 2021-06-19T09:12:30.748Z] 09:12:30     INFO - GECKO(2476) | 1624093950742	Marionette	DEBUG	Marionette stopped listening
[task 2021-06-19T09:12:30.840Z] 09:12:30     INFO - TEST-INFO | Main app process: exit 0
[task 2021-06-19T09:12:30.842Z] 09:12:30     INFO - runtests.py | Application ran for: 0:07:24.769485
[task 2021-06-19T09:12:30.843Z] 09:12:30     INFO - zombiecheck | Reading PID log: C:\Users\testdroid.YOGA-035.000\AppData\Local\Temp\tmprql_by4jpidlog
[task 2021-06-19T09:12:30.846Z] 09:12:30     INFO - ==> process 10832 launched child process 9892 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.0.262791190\143022101" -parentBuildID 20210618180637 -prefsHandle 2304 -prefMapHandle 2296 -prefsLen 1 -prefMapSize 250154 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 2360 1d9561cb500 gpu)
[task 2021-06-19T09:12:30.849Z] 09:12:30     INFO - ==> process 10832 launched child process 10364 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.6.929687889\965218551" -childID 1 -isForBrowser -prefsHandle 2992 -prefMapHandle 2836 -prefsLen 1790 -prefMapSize 250154 -jsInit 1444 285660 -parentBuildID 20210618180637 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 3008 1d95a2e7140 tab)
[task 2021-06-19T09:12:30.852Z] 09:12:30     INFO - ==> process 10832 launched child process 5376 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.13.866335456\559246464" -childID 2 -isForBrowser -prefsHandle 2956 -prefMapHandle 2948 -prefsLen 1933 -prefMapSize 250154 -jsInit 1444 285660 -parentBuildID 20210618180637 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 3260 1d95aa024c0 tab)
[task 2021-06-19T09:12:30.855Z] 09:12:30     INFO - ==> process 10832 launched child process 996 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.20.678737939\1076941278" -childID 3 -isForBrowser -prefsHandle 3420 -prefMapHandle 3416 -prefsLen 1973 -prefMapSize 250154 -jsInit 1444 285660 -parentBuildID 20210618180637 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 3432 1d95aa02680 tab)
[task 2021-06-19T09:12:30.859Z] 09:12:30     INFO - ==> process 10832 launched child process 6432 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.27.247919827\966645069" -childID 4 -isForBrowser -prefsHandle 4172 -prefMapHandle 4168 -prefsLen 9869 -prefMapSize 250154 -jsInit 1444 285660 -parentBuildID 20210618180637 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 4160 1d95e746d80 tab)
[task 2021-06-19T09:12:30.862Z] 09:12:30     INFO - ==> process 10832 launched child process 1692 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.34.1435042974\1811622922" -childID 5 -isForBrowser -prefsHandle 4440 -prefMapHandle 4436 -prefsLen 9897 -prefMapSize 250154 -jsInit 1444 285660 -parentBuildID 20210618180637 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 4448 1d95e746f40 tab)
[task 2021-06-19T09:12:30.865Z] 09:12:30     INFO - ==> process 10832 launched child process 13044 ("C:\tasks\task_1624087931\build\application\firefox\firefox.exe" -contentproc --channel="10832.41.2136905772\254662537" -parentBuildID 20210618180637 -prefsHandle 4980 -prefMapHandle 5012 -prefsLen 12075 -prefMapSize 250154 -appdir "C:\tasks\task_1624087931\build\application\firefox\browser" - 10832 "\\.\pipe\gecko-crash-server-pipe.10832" 2964 1d95ce67d00 rdd)
[task 2021-06-19T09:12:30.866Z] 09:12:30     INFO - zombiecheck | Checking for orphan process with PID: 5376
[task 2021-06-19T09:12:30.868Z] 09:12:30     INFO - zombiecheck | Checking for orphan process with PID: 6432
[task 2021-06-19T09:12:30.869Z] 09:12:30     INFO - zombiecheck | Checking for orphan process with PID: 1692
[task 2021-06-19T09:12:30.870Z] 09:12:30     INFO - zombiecheck | Checking for orphan process with PID: 9892
[task 2021-06-19T09:12:30.872Z] 09:12:30     INFO - zombiecheck | Checking for orphan process with PID: 996
[task 2021-06-19T09:12:30.873Z] 09:12:30     INFO - zombiecheck | Checking for orphan process with PID: 13044
[task 2021-06-19T09:12:30.874Z] 09:12:30     INFO - zombiecheck | Checking for orphan process with PID: 10364
[task 2021-06-19T09:12:30.876Z] 09:12:30     INFO - mozcrash Downloading symbols from: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/PoT9Rl5BSpeopZdfc9oU7A/artifacts/public/build/target.crashreporter-symbols.zip
[task 2021-06-19T09:12:34.502Z] 09:12:34     INFO - mozcrash Copy/paste: C:/tasks/task_1624087931/fetches\minidump_stackwalk\minidump_stackwalk.exe C:\Users\testdroid.YOGA-035.000\AppData\Local\Temp\tmp30djoihx.mozrunner\minidumps\f1c39f69-c5ad-40a4-b7b5-a6caf412f542.dmp C:\Users\testdroid.YOGA-035.000\AppData\Local\Temp\tmpd4qctdbq
[task 2021-06-19T09:12:42.407Z] 09:12:42     INFO - mozcrash Saved minidump as C:\tasks\task_1624087931\build\blobber_upload_dir\f1c39f69-c5ad-40a4-b7b5-a6caf412f542.dmp
[task 2021-06-19T09:12:42.408Z] 09:12:42     INFO - mozcrash Saved app info as C:\tasks\task_1624087931\build\blobber_upload_dir\f1c39f69-c5ad-40a4-b7b5-a6caf412f542.extra
[task 2021-06-19T09:12:43.161Z] 09:12:43     INFO - PROCESS-CRASH | Main app process exited normally | application crashed [@ mozilla::NrSocketBase::fire_callback(int)]
[task 2021-06-19T09:12:43.161Z] 09:12:43     INFO - Crash dump filename: C:\Users\testdroid.YOGA-035.000\AppData\Local\Temp\tmp30djoihx.mozrunner\minidumps\f1c39f69-c5ad-40a4-b7b5-a6caf412f542.dmp
[task 2021-06-19T09:12:43.161Z] 09:12:43     INFO - Operating system: Windows NT
[task 2021-06-19T09:12:43.161Z] 09:12:43     INFO -                   10.0.17134 
[task 2021-06-19T09:12:43.161Z] 09:12:43     INFO - CPU: arm64
[task 2021-06-19T09:12:43.162Z] 09:12:43     INFO -      8 CPUs
[task 2021-06-19T09:12:43.162Z] 09:12:43     INFO - 
[task 2021-06-19T09:12:43.162Z] 09:12:43     INFO - GPU: UNKNOWN
[task 2021-06-19T09:12:43.163Z] 09:12:43     INFO - 
[task 2021-06-19T09:12:43.163Z] 09:12:43     INFO - Crash reason:  EXCEPTION_ACCESS_VIOLATION_READ
[task 2021-06-19T09:12:43.163Z] 09:12:43     INFO - Crash address: 0xe5e5e5e5
[task 2021-06-19T09:12:43.163Z] 09:12:43     INFO - Assertion: Unknown assertion type 0x00000000
[task 2021-06-19T09:12:43.164Z] 09:12:43     INFO - Process uptime: 443 seconds
[task 2021-06-19T09:12:43.164Z] 09:12:43     INFO - 
[task 2021-06-19T09:12:43.164Z] 09:12:43     INFO - Thread 3 (crashed)
[task 2021-06-19T09:12:43.164Z] 09:12:43     INFO -  0  xul.dll!mozilla::NrSocketBase::fire_callback(int) [nr_socket_prsock.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 332 + 0x0]
[task 2021-06-19T09:12:43.164Z] 09:12:43     INFO -      x0 = 0xe5e5e5e5e5e5e5e5    x1 = 0x0000000000000000
[task 2021-06-19T09:12:43.165Z] 09:12:43     INFO -      x2 = 0x000000f4f883ebf8    x3 = 0x000000f4f883ee58
[task 2021-06-19T09:12:43.165Z] 09:12:43     INFO -      x4 = 0x0000000000000000    x5 = 0x000000f4f883ebb8
[task 2021-06-19T09:12:43.165Z] 09:12:43     INFO -      x6 = 0x0000000000000000    x7 = 0x0000000000000000
[task 2021-06-19T09:12:43.165Z] 09:12:43     INFO -      x8 = 0x0000000000000000    x9 = 0x0000000000000006
[task 2021-06-19T09:12:43.165Z] 09:12:43     INFO -     x10 = 0x0000000000000007   x11 = 0x0000000000000198
[task 2021-06-19T09:12:43.165Z] 09:12:43     INFO -     x12 = 0x0000000000000000   x13 = 0x0000000000000000
[task 2021-06-19T09:12:43.165Z] 09:12:43     INFO -     x14 = 0x00000000ffffffde   x15 = 0x0000000000000114
[task 2021-06-19T09:12:43.165Z] 09:12:43     INFO -     x16 = 0x000029c94f9d8e74   x17 = 0x000000f4f8832000
[task 2021-06-19T09:12:43.166Z] 09:12:43     INFO -     x18 = 0x0000000000000000   x19 = 0x000002d68180d000
[task 2021-06-19T09:12:43.166Z] 09:12:43     INFO -     x20 = 0x0000000000000000   x21 = 0x000002d6f2610498
[task 2021-06-19T09:12:43.166Z] 09:12:43     INFO -     x22 = 0x000002d682768340   x23 = 0x000002d6f26744e8
[task 2021-06-19T09:12:43.166Z] 09:12:43     INFO -     x24 = 0x000000f4f883f0c8   x25 = 0x0000000000000000
[task 2021-06-19T09:12:43.166Z] 09:12:43     INFO -     x26 = 0x0000000000000000   x27 = 0x000000f4f883f0b0
[task 2021-06-19T09:12:43.166Z] 09:12:43     INFO -     x28 = 0x00007ffc8d1ac000    fp = 0x000000f4f883ee90
[task 2021-06-19T09:12:43.166Z] 09:12:43     INFO -      lr = 0x00007ffc8a3999d0    sp = 0x000000f4f883ee80
[task 2021-06-19T09:12:43.167Z] 09:12:43     INFO -      pc = 0x00007ffc8a399a5c
[task 2021-06-19T09:12:43.167Z] 09:12:43     INFO -     Found by: given as instruction pointer in context
[task 2021-06-19T09:12:43.167Z] 09:12:43     INFO -  1  xul.dll!mozilla::NrTcpSocket::DoCallbacks() [nr_socket_tcp.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 281 + 0x8]
[task 2021-06-19T09:12:43.167Z] 09:12:43     INFO -      fp = 0x000000f4f883eeb0    lr = 0x00007ffc8a3999d0
[task 2021-06-19T09:12:43.167Z] 09:12:43     INFO -      sp = 0x000000f4f883eea0    pc = 0x00007ffc8a3999d0
[task 2021-06-19T09:12:43.167Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.168Z] 09:12:43     INFO -  2  xul.dll!mozilla::NrTcpSocket::DoCallbacks() [nr_socket_tcp.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 281 + 0x8]
[task 2021-06-19T09:12:43.168Z] 09:12:43     INFO -      fp = 0x000000f4f883eef0    lr = 0x00007ffc8a399954
[task 2021-06-19T09:12:43.168Z] 09:12:43     INFO -      sp = 0x000000f4f883eec0    pc = 0x00007ffc8a3999d0
[task 2021-06-19T09:12:43.168Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.168Z] 09:12:43     INFO -  3  xul.dll!mozilla::NrTcpSocket::OnClose(nsresult) [nr_socket_tcp.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 252 + 0x4]
[task 2021-06-19T09:12:43.168Z] 09:12:43     INFO -      fp = 0x000000f4f883ef00    lr = 0x00007ffc8be2c2c0
[task 2021-06-19T09:12:43.168Z] 09:12:43     INFO -      sp = 0x000000f4f883ef00    pc = 0x00007ffc8a399954
[task 2021-06-19T09:12:43.169Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.169Z] 09:12:43     INFO -  4  xul.dll!mozilla::detail::RunnableMethodImpl<RefPtr<mozilla::net::WebrtcTCPSocketCallback>,void (mozilla::net::WebrtcTCPSocketCallback::*)(nsresult),1,mozilla::RunnableKind::Standard,nsresult>::Run() [nsThreadUtils.h:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 1203 + 0x8]
[task 2021-06-19T09:12:43.169Z] 09:12:43     INFO -      fp = 0x000000f4f883f250    lr = 0x00007ffc89914628
[task 2021-06-19T09:12:43.169Z] 09:12:43     INFO -      sp = 0x000000f4f883ef10    pc = 0x00007ffc8be2c2c0
[task 2021-06-19T09:12:43.169Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.169Z] 09:12:43     INFO -  5  xul.dll!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 1146 + 0xc]
[task 2021-06-19T09:12:43.170Z] 09:12:43     INFO -      fp = 0x000000f4f883f5e0    lr = 0x00007ffc89a39764
[task 2021-06-19T09:12:43.170Z] 09:12:43     INFO -      sp = 0x000000f4f883f260    pc = 0x00007ffc89914628
[task 2021-06-19T09:12:43.170Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.170Z] 09:12:43     INFO -  6  xul.dll!mozilla::net::nsSocketTransportService::Run() [nsSocketTransportService2.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 1167 + 0x28]
[task 2021-06-19T09:12:43.170Z] 09:12:43     INFO -      fp = 0x000000f4f883f940    lr = 0x00007ffc89914628
[task 2021-06-19T09:12:43.171Z] 09:12:43     INFO -      sp = 0x000000f4f883f5f0    pc = 0x00007ffc89a39764
[task 2021-06-19T09:12:43.171Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.171Z] 09:12:43     INFO -  7  xul.dll!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 1146 + 0xc]
[task 2021-06-19T09:12:43.171Z] 09:12:43     INFO -      fp = 0x000000f4f883f9e0    lr = 0x00007ffc89c05e58
[task 2021-06-19T09:12:43.171Z] 09:12:43     INFO -      sp = 0x000000f4f883f950    pc = 0x00007ffc89914628
[task 2021-06-19T09:12:43.171Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.171Z] 09:12:43     INFO -  8  xul.dll!mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) [MessagePump.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 300 + 0x20]
[task 2021-06-19T09:12:43.172Z] 09:12:43     INFO -      fp = 0x000000f4f883fa08    lr = 0x00007ffc8796a9e4
[task 2021-06-19T09:12:43.172Z] 09:12:43     INFO -      sp = 0x000000f4f883f9f0    pc = 0x00007ffc89c05e58
[task 2021-06-19T09:12:43.172Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.172Z] 09:12:43     INFO -  9  xul.dll!MessageLoop::RunHandler() [message_loop.cc:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 324 + 0xc]
[task 2021-06-19T09:12:43.172Z] 09:12:43     INFO -      fp = 0x000000f4f883fa60    lr = 0x00007ffc8796a970
[task 2021-06-19T09:12:43.172Z] 09:12:43     INFO -      sp = 0x000000f4f883fa18    pc = 0x00007ffc8796a9e4
[task 2021-06-19T09:12:43.172Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.173Z] 09:12:43     INFO - 10  xul.dll!MessageLoop::Run() [message_loop.cc:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 306 + 0x0]
[task 2021-06-19T09:12:43.173Z] 09:12:43     INFO -      fp = 0x000000f4f883fc28    lr = 0x00007ffc8796a404
[task 2021-06-19T09:12:43.173Z] 09:12:43     INFO -      sp = 0x000000f4f883fa70    pc = 0x00007ffc8796a970
[task 2021-06-19T09:12:43.173Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.173Z] 09:12:43     INFO - 11  xul.dll!static nsThread::ThreadFunc(void*) [nsThread.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 392 + 0x4]
[task 2021-06-19T09:12:43.174Z] 09:12:43     INFO -      fp = 0x000000f4f883fca0    lr = 0x00007ffcaa2281d0
[task 2021-06-19T09:12:43.174Z] 09:12:43     INFO -      sp = 0x000000f4f883fc38    pc = 0x00007ffc8796a404
[task 2021-06-19T09:12:43.174Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.174Z] 09:12:43     INFO - 12  nss3.dll!_PR_NativeRunThread(void*) [pruthr.c:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 399 + 0x4]
[task 2021-06-19T09:12:43.174Z] 09:12:43     INFO -      fp = 0x000000f4f883fcb0    lr = 0x00007ffcaa256230
[task 2021-06-19T09:12:43.174Z] 09:12:43     INFO -      sp = 0x000000f4f883fcb0    pc = 0x00007ffcaa2281d0
[task 2021-06-19T09:12:43.174Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.174Z] 09:12:43     INFO - 13  nss3.dll!pr_root(void*) [w95thred.c:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 139 + 0x4]
[task 2021-06-19T09:12:43.175Z] 09:12:43     INFO -      fp = 0x000000f4f883fcc0    lr = 0x00007ffcb9712ee0
[task 2021-06-19T09:12:43.175Z] 09:12:43     INFO -      sp = 0x000000f4f883fcc0    pc = 0x00007ffcaa256230
[task 2021-06-19T09:12:43.175Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.175Z] 09:12:43     INFO - 14  ucrtbase.dll + 0x32edc
[task 2021-06-19T09:12:43.175Z] 09:12:43     INFO -      fp = 0x000000f4f883fcf0    lr = 0x00007ffcbb3c5ba4
[task 2021-06-19T09:12:43.175Z] 09:12:43     INFO -      sp = 0x000000f4f883fcd0    pc = 0x00007ffcb9712ee0
[task 2021-06-19T09:12:43.175Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.176Z] 09:12:43     INFO - 15  kernel32.dll + 0x15ba0
[task 2021-06-19T09:12:43.176Z] 09:12:43     INFO -      fp = 0x000000f4f883fd78    lr = 0x00007ffca9e83ffc
[task 2021-06-19T09:12:43.176Z] 09:12:43     INFO -      sp = 0x000000f4f883fd00    pc = 0x00007ffcbb3c5ba4
[task 2021-06-19T09:12:43.176Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.176Z] 09:12:43     INFO - 16  mozglue.dll!patched_BaseThreadInitThunk(int, void*, void*) [WindowsDllBlocklist.cpp:3d9044e7bb3f7e3e6d261cdefaea6e647068d3e5 : 592 + 0x14]
[task 2021-06-19T09:12:43.177Z] 09:12:43     INFO -      fp = 0x000000f4f883fd90    lr = 0x00007ffcbcac2544
[task 2021-06-19T09:12:43.177Z] 09:12:43     INFO -      sp = 0x000000f4f883fd88    pc = 0x00007ffca9e83ffc
[task 2021-06-19T09:12:43.177Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
[task 2021-06-19T09:12:43.177Z] 09:12:43     INFO - 17  ntdll.dll!RtlUserThreadStart + 0x40
[task 2021-06-19T09:12:43.177Z] 09:12:43     INFO -      fp = 0x0000000000000000    lr = 0x0000000000000000
[task 2021-06-19T09:12:43.177Z] 09:12:43     INFO -      sp = 0x000000f4f883fda0    pc = 0x00007ffcbcac2544
[task 2021-06-19T09:12:43.177Z] 09:12:43     INFO -     Found by: previous frame's frame pointer
Group: core-security
Severity: S4 → S2
Component: WebRTC: Audio/Video → WebRTC: Networking
Priority: -- → P2

This looks like a UAF bug.

Group: core-security → media-core-security
Assignee: nobody → docfaraday

So that stack trace has two frames with NrTcpSocket::DoCallbacks. This looks like it might be specific to the NAT simulator, but I'll need to look at it some more.

So I'm just not seeing how the NAT simulator could possibly take a call to DoCallbacks on one TCP socket and translate it to a call to DoCallbacks on another TCP socket. The only path there is via IPC callbacks. While it is conceivable that the call to close() might release a reference to the NrTcpSocket, the runnable calling OnClose should be holding onto a ref still. I wonder if it is possible that we're corrupting the refcount...

This still wouldn't explain why we see DoCallbacks twice in the stack trace, though.

Crash Signature: [@ mozilla::NrSocketBase::fire_callback(int)] → [@ mozilla::NrSocketBase::fire_callback(int)] [@ mozilla::NrTcpSocket::DoCallbacks()]
Crash Signature: [@ mozilla::NrSocketBase::fire_callback(int)] [@ mozilla::NrTcpSocket::DoCallbacks()] → [@ mozilla::NrSocketBase::fire_callback(int)] [@ mozilla::NrTcpSocket::DoCallbacks()]
Keywords: stalled
No longer blocks: webrtc-triage

I wonder if we're somehow racing here on non-main vs here on main, and messing up the RefPtr...

Interesting. Moving the definition of ~NrSocketBase out of the header seems to have made this crash go away (I'll have to test a more minimal patch though). We may have gotten into some subtle multiple inheritance bug, or maybe even a compiler bug.

Ok, this is definitely a NAT-simulator-only bug. Figuring out the details. It took a while to get the important stuff to actually show up in the stack.

See Also: → 1782367
Crash Signature: [@ mozilla::NrSocketBase::fire_callback(int)] [@ mozilla::NrTcpSocket::DoCallbacks()] → [@ mozilla::NrSocketBase::fire_callback] [@ mozilla::NrTcpSocket::DoCallbacks]
Summary: Intermittent PROCESS-CRASH | Main app process exited normally | application crashed [@ mozilla::NrSocketBase::fire_callback(int)] → Intermittent PROCESS-CRASH | Main app process exited normally | application crashed [@ mozilla::NrSocketBase::fire_callback]

No longer occurring..

Status: NEW → RESOLVED
Closed: 1 year ago
Resolution: --- → WORKSFORME

Since the bug is closed, the stalled keyword is now meaningless.
For more information, please visit BugBot documentation.

Keywords: stalled
Group: media-core-security
You need to log in before you can comment on or make changes to this bug.