Closed
Bug 1739478
Opened 3 years ago
Closed 2 years ago
Crash in [@ mozilla::MediaTransportHandlerIPC::MediaTransportHandlerIPC]
Categories
(Core :: WebRTC: Networking, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 1827144
People
(Reporter: jesup, Unassigned)
References
Details
(Keywords: crash, csectype-uaf, sec-high)
Crash Data
UAFs
Crash report: https://crash-stats.mozilla.org/report/index/a59daeea-8de1-4906-9c99-e173f0211102
Reason: EXCEPTION_ACCESS_VIOLATION_WRITE
Top 10 frames of crashing thread:
0 xul.dll mozilla::MediaTransportHandlerIPC::MediaTransportHandlerIPC dom/media/webrtc/jsapi/MediaTransportHandlerIPC.cpp:25
1 xul.dll static mozilla::MediaTransportHandler::Create dom/media/webrtc/jsapi/MediaTransportHandler.cpp:189
2 xul.dll mozilla::PeerConnectionImpl::Initialize dom/media/webrtc/jsapi/PeerConnectionImpl.cpp:405
3 xul.dll mozilla::PeerConnectionImpl::Initialize dom/media/webrtc/jsapi/PeerConnectionImpl.cpp:524
4 xul.dll mozilla::dom::PeerConnectionImpl_Binding::initialize dom/bindings/PeerConnectionImplBinding.cpp:111
5 xul.dll mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions> dom/bindings/BindingUtils.cpp:3300
6 xul.dll js::InternalCallOrConstruct js/src/vm/Interpreter.cpp:472
7 xul.dll Interpret js/src/vm/Interpreter.cpp:3239
8 xul.dll js::Call js/src/vm/Interpreter.cpp:549
9 xul.dll JS::Call js/src/vm/CallAndConstruct.cpp:117
Updated•3 years ago
|
Blocks: webrtc-triage
Comment 1•3 years ago
|
||
Potential related to the socket process rollout. This is during ipc init. We'll find some time to take a look.
Flags: needinfo?(docfaraday)
Updated•3 years ago
|
No longer blocks: webrtc-triage
Updated•3 years ago
|
Blocks: webrtc-triage
Comment 2•3 years ago
|
||
We've been poking at this but have not made any headway. No idea on how to reproduce either which would help.
No longer blocks: webrtc-triage
Keywords: stalled
Updated•2 years ago
|
Flags: needinfo?(docfaraday) → needinfo?(dbaker)
Comment 3•2 years ago
|
||
Bug 1827144 looks similar and has a patch.
Comment 4•2 years ago
|
||
Since the bug is closed, the stalled keyword is now meaningless.
For more information, please visit auto_nag documentation.
Keywords: stalled
Updated•1 year ago
|
Flags: needinfo?(dbaker)
Updated•1 year ago
|
Group: media-core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•