Closed Bug 1744589 Opened 2 years ago Closed 2 years ago

Intermittent Main app process exited normally | application crashed [@ nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_RelocateUsingMemutils>::ShiftData<nsTArrayInfallibleAllocator>(unsigned long long, unsigned long long, unsigned long long,

Categories

(Core :: WebRTC: Audio/Video, defect)

Product:
Core
Component:
WebRTC: Audio/Video
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1744081
Tracking Flags:
Tracking Status
firefox-esr91 --- unaffected
firefox97 --- fixed

People

(Reporter: intermittent-bug-filer, Unassigned)

References

Details

(4 keywords)

Crash Data

Filed by: malexandru [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer?job_id=360264371&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/eRgSTmMEQAqnWw0xkUQFkQ/runs/0/artifacts/public/logs/live_backing.log

[task 2021-12-06T19:04:59.979Z] 19:04:59     INFO - mozcrash Downloading symbols from: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/KjLfU2e9QPCZmATxjuXuaQ/artifacts/public/build/target.crashreporter-symbols.zip
[task 2021-12-06T19:05:02.180Z] 19:05:02     INFO - mozcrash Copy/paste: Z:/task_163881510135465/fetches\minidump_stackwalk\minidump_stackwalk.exe --human C:\Users\task_163881510135465\AppData\Local\Temp\tmpz87if6md.mozrunner\minidumps\717c453a-77e3-4cef-ad89-8862024b7f3c.dmp C:\Users\task_163881510135465\AppData\Local\Temp\tmpgtm_eopn --symbols-url=https://symbols.mozilla.org/
[task 2021-12-06T19:05:05.820Z] 19:05:05     INFO - mozcrash Saved minidump as Z:\task_163881510135465\build\blobber_upload_dir\717c453a-77e3-4cef-ad89-8862024b7f3c.dmp
[task 2021-12-06T19:05:05.823Z] 19:05:05     INFO - mozcrash Saved app info as Z:\task_163881510135465\build\blobber_upload_dir\717c453a-77e3-4cef-ad89-8862024b7f3c.extra
[task 2021-12-06T19:05:06.102Z] 19:05:06     INFO - PROCESS-CRASH | Main app process exited normally | application crashed [@ nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_RelocateUsingMemutils>::ShiftData<nsTArrayInfallibleAllocator>(unsigned long long, unsigned long long, unsigned long long, unsigned long long, unsigned long long)]
[task 2021-12-06T19:05:06.102Z] 19:05:06     INFO - Crash dump filename: C:\Users\task_163881510135465\AppData\Local\Temp\tmpz87if6md.mozrunner\minidumps\717c453a-77e3-4cef-ad89-8862024b7f3c.dmp
[task 2021-12-06T19:05:06.102Z] 19:05:06     INFO - Operating system: Windows NT
[task 2021-12-06T19:05:06.102Z] 19:05:06     INFO -                   10.0.19041 
[task 2021-12-06T19:05:06.102Z] 19:05:06     INFO - CPU: amd64
[task 2021-12-06T19:05:06.102Z] 19:05:06     INFO -      family 6 model 85 stepping 4
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -      8 CPUs
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO - 
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO - Crash reason:  EXCEPTION_ACCESS_VIOLATION_READ
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO - Crash address: 0xffffffffffffffff
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO - Process uptime: 351 seconds
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO - 
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO - Thread 49 WebrtcCallThread #1 (crashed)
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -  0  xul.dll!nsTArray_base<nsTArrayInfallibleAllocator,nsTArray_RelocateUsingMemutils>::ShiftData<nsTArrayInfallibleAllocator>(unsigned long long, unsigned long long, unsigned long long, unsigned long long, unsigned long long) [nsTArray-inl.h:0ab3831585fde082bb288efe132f0e038ce5c22b : 335 + 0xb]
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     rax = 0x0000000000000008   rdx = 0x0000000000000000
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     rcx = 0xe5e5e5e5e5e5e5e5   rbx = 0x0000000000000001
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     rsi = 0x000001f3f31892b8   rdi = 0x000001f3f31892b8
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     rbp = 0x000001f3ef4165e0   rsp = 0x000000f34437f000
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -      r8 = 0x0000000000000001    r9 = 0x0000000000000000
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     r10 = 0x0000000000000008   r11 = 0x000001f3f52f9ab0
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     r12 = 0x000001f3f3189288   r13 = 0x00007ffe33170b40
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     r14 = 0x000001f3f0c0b1f0   r15 = 0x000001f3f31892b8
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     rip = 0x00007ffe075563f1
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     Found by: given as instruction pointer in context
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -  1  xul.dll!nsTArray_Impl<RefPtr<mozilla::AbstractMirror<mozilla::Maybe<mozilla::AudioCodecConfig> > >,nsTArrayInfallibleAllocator>::RemoveElementsAtUnsafe(unsigned long long, unsigned long long) [nsTArray.h:0ab3831585fde082bb288efe132f0e038ce5c22b : 2493 + 0x22]
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     rsp = 0x000000f34437f050   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe0901bdf5
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.109Z] 19:05:06     INFO -  2  xul.dll!mozilla::MediaEventSourceImpl<mozilla::ListenerPolicy::NonExclusive,long long>::NotifyInternal<long long &>(long long&) [MediaEventSource.h:0ab3831585fde082bb288efe132f0e038ce5c22b : 470 + 0xa]
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     rsp = 0x000000f34437f0a0   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe0902b41d
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -  3  xul.dll!mozilla::detail::ListenerImpl<nsIEventTarget,`lambda at /builds/worker/workspace/obj-build/dist/include/MediaEventSource.h:562:39',unsigned long long>::ApplyWithArgsImpl<`lambda at /builds/worker/workspace/obj-build/dist/include/MediaEventSource.h:562:39'>(nsIEventTarget*, mozilla::MediaEventForwarder<unsigned long long>::Forward::<lambda_1> const&, unsigned long long&&) [MediaEventSource.h:0ab3831585fde082bb288efe132f0e038ce5c22b : 214 + 0xa]
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     rsp = 0x000000f34437f100   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe09276a81
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -  4  xul.dll!mozilla::detail::ListenerImpl<nsIEventTarget,`lambda at /builds/worker/workspace/obj-build/dist/include/MediaEventSource.h:562:39',unsigned long long>::ApplyWithArgs(unsigned long long&&) [MediaEventSource.h:0ab3831585fde082bb288efe132f0e038ce5c22b : 236 + 0x7]
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     rsp = 0x000000f34437f150   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe092769ec
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -  5  xul.dll!mozilla::detail::RunnableMethodImpl<RefPtr<mozilla::layers::APZCTreeManager>,void (mozilla::layers::IAPZCTreeManager::*)(const mozilla::layers::ScrollableLayerGuid &),1,mozilla::RunnableKind::Standard,mozilla::layers::ScrollableLayerGuid>::Run() [nsThreadUtils.h:0ab3831585fde082bb288efe132f0e038ce5c22b : 1200 + 0xd]
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     rsp = 0x000000f34437f1a0   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe07f7ff4e
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -  6  xul.dll!mozilla::detail::RunnableFunction<`lambda at /builds/worker/checkouts/gecko/dom/media/webrtc/libwebrtcglue/TaskQueueWrapper.h:64:9'>::Run() [nsThreadUtils.h:0ab3831585fde082bb288efe132f0e038ce5c22b : 531 + 0x2a]
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.110Z] 19:05:06     INFO -     rsp = 0x000000f34437f1d0   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe09210b3d
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -  7  xul.dll!mozilla::TaskQueue::Runner::Run() [TaskQueue.cpp:0ab3831585fde082bb288efe132f0e038ce5c22b : 204 + 0xf]
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     rsp = 0x000000f34437f220   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe06385034
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -  8  xul.dll!nsThreadPool::Run() [nsThreadPool.cpp:0ab3831585fde082bb288efe132f0e038ce5c22b : 305 + 0x10]
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     rsp = 0x000000f34437f2d0   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe0638d405
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -  9  xul.dll!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:0ab3831585fde082bb288efe132f0e038ce5c22b : 1177 + 0xf]
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     rsp = 0x000000f34437f4b0   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe072368f1
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO - 10  xul.dll!mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) [MessagePump.cpp:0ab3831585fde082bb288efe132f0e038ce5c22b : 300 + 0x25]
[task 2021-12-06T19:05:06.111Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     rsp = 0x000000f34437f830   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe072358f2
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO - 11  xul.dll!MessageLoop::RunHandler() [message_loop.cc:0ab3831585fde082bb288efe132f0e038ce5c22b : 324 + 0x15]
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     rsp = 0x000000f34437f8d0   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe064d46ff
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO - 12  xul.dll!MessageLoop::Run() [message_loop.cc:0ab3831585fde082bb288efe132f0e038ce5c22b : 306 + 0x4]
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     rsp = 0x000000f34437f920   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe05b7729e
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO - 13  xul.dll!static nsThread::ThreadFunc(void*) [nsThread.cpp:0ab3831585fde082bb288efe132f0e038ce5c22b : 391 + 0x7]
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     rsp = 0x000000f34437f980   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe0638843b
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO - 14  nss3.dll!_PR_NativeRunThread(void*) [pruthr.c:0ab3831585fde082bb288efe132f0e038ce5c22b : 399 + 0xd]
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     rsp = 0x000000f34437fb30   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe1ed32edc
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.112Z] 19:05:06     INFO - 15  nss3.dll!pr_root(void*) [w95thred.c:0ab3831585fde082bb288efe132f0e038ce5c22b : 139 + 0xc]
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     rsp = 0x000000f34437fbb0   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe1ed4b451
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO - 16  ucrtbase.dll!thread_start<unsigned int (__cdecl*)(void *),1> + 0x41
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     rsp = 0x000000f34437fbe0   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe3cbe1bb2
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO - 17  kernel32.dll!BaseThreadInitThunk + 0x13
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     rsp = 0x000000f34437fc10   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe3e977034
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO - 18  mozglue.dll!patched_BaseThreadInitThunk(int, void*, void*) [WindowsDllBlocklist.cpp:0ab3831585fde082bb288efe132f0e038ce5c22b : 574 + 0x14]
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     rsp = 0x000000f34437fc40   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe331be5c8
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO - 19  ntdll.dll!RtlUserThreadStart + 0x20
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     rbx = 0x0000000000000001   rbp = 0x000001f3ef4165e0
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     rsp = 0x000000f34437fcb0   r12 = 0x000001f3f3189288
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     r13 = 0x00007ffe33170b40   r14 = 0x000001f3f0c0b1f0
[task 2021-12-06T19:05:06.113Z] 19:05:06     INFO -     r15 = 0x000001f3f31892b8   rip = 0x00007ffe3f3c2651
[task 2021-12-06T19:05:06.114Z] 19:05:06     INFO -     Found by: call frame info
[task 2021-12-06T19:05:06.114Z] 19:05:06     INFO - 
[task 2021-12-06T19:05:06.114Z] 19:05:06     INFO - Thread 0 GeckoMain
[task 2021-12-06T19:05:06.114Z] 19:05:06     INFO -  0  xul.dll!js::GetProperty(JSContext*, JS::Handle<JS::Value>, JS::Handle<js::PropertyName *>, JS::MutableHandle<JS::Value>) [Interpreter.cpp:0ab3831585fde082bb288efe132f0e038ce5c22b : 4552 + 0x4f]
Group: core-security → media-core-security
Keywords: csectype-uaf
Keywords: sec-high

We believe this may have been fixed, andreas will post a see also.

No longer blocks: webrtc-triage

This to me looks like bug 1744081, which was a race related to disconnecting a MediaEventForwarder off its target thread. Basically, when disconnecting off-target the this here does not have a guaranteed lifetime.

See Also: → 1744081
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Group: media-core-security → core-security-release
Group: core-security-release
Duplicate of bug: 1744081
Resolution: FIXED → DUPLICATE
You need to log in before you can comment on or make changes to this bug.