Closed
Bug 1756473
Opened 3 years ago
Closed 3 years ago
Intermittent dom/media/test/test_bug465498.html | application crashed [@ mozilla::SPSCRingBufferBase<short>::AssertCorrectThread(std::__ndk1::__thread_id&)]
Categories
(Core :: Audio/Video, defect)
Core
Audio/Video
Tracking
()
RESOLVED
WORKSFORME
Tracking | Status | |
---|---|---|
firefox-esr91 | --- | unaffected |
firefox97 | --- | unaffected |
firefox98 | --- | ? |
firefox99 | --- | affected |
People
(Reporter: intermittent-bug-filer, Unassigned)
References
Details
(4 keywords)
Crash Data
Filed by: mlaza [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer?job_id=368623860&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/A685-Dp2T6WkM7UfdhOBhQ/runs/0/artifacts/public/logs/live_backing.log
[task 2022-02-21T15:55:24.453Z] 15:55:24 INFO - TEST-START | dom/media/test/test_bug465498.html
[task 2022-02-21T15:55:44.682Z] 15:55:44 INFO - wait for org.mozilla.geckoview.test_runner complete; top activity=com.android.launcher3
[task 2022-02-21T15:55:44.683Z] 15:55:44 INFO - runtestsremote.py | Application ran for: 0:02:25.946312
[task 2022-02-21T15:55:44.789Z] 15:55:44 INFO - mozcrash Copy/paste: /builds/worker/fetches/minidump_stackwalk/minidump_stackwalk --symbols-url=https://symbols.mozilla.org/ --human /tmp/tmpf0limlwg/38178951-e371-c60a-53c3-d9358c1afa1d.dmp /builds/worker/workspace/build/symbols
[task 2022-02-21T15:55:47.206Z] 15:55:47 INFO - mozcrash Saved minidump as /builds/worker/workspace/build/blobber_upload_dir/38178951-e371-c60a-53c3-d9358c1afa1d.dmp
[task 2022-02-21T15:55:47.206Z] 15:55:47 INFO - mozcrash Saved app info as /builds/worker/workspace/build/blobber_upload_dir/38178951-e371-c60a-53c3-d9358c1afa1d.extra
[task 2022-02-21T15:55:47.211Z] 15:55:47 WARNING - PROCESS-CRASH | dom/media/test/test_bug465498.html | application crashed [@ mozilla::SPSCRingBufferBase<short>::AssertCorrectThread(std::__ndk1::__thread_id&)]
[task 2022-02-21T15:55:47.211Z] 15:55:47 INFO - Mozilla crash reason: MOZ_ASSERT(aId == std::this_thread::get_id())
[task 2022-02-21T15:55:47.211Z] 15:55:47 INFO - Crash dump filename: /tmp/tmpf0limlwg/38178951-e371-c60a-53c3-d9358c1afa1d.dmp
[task 2022-02-21T15:55:47.211Z] 15:55:47 INFO - Operating system: Android
[task 2022-02-21T15:55:47.212Z] 15:55:47 INFO - 0.0.0 Linux 3.10.0+ #260 SMP PREEMPT Fri May 19 12:48:14 PDT 2017 x86_64
[task 2022-02-21T15:55:47.212Z] 15:55:47 INFO - CPU: amd64
[task 2022-02-21T15:55:47.212Z] 15:55:47 INFO - family 6 model 6 stepping 3
[task 2022-02-21T15:55:47.212Z] 15:55:47 INFO - 4 CPUs
[task 2022-02-21T15:55:47.212Z] 15:55:47 INFO - Crash reason: SIGSEGV / SEGV_MAPERR
[task 2022-02-21T15:55:47.212Z] 15:55:47 INFO - Crash address: 0x0
[task 2022-02-21T15:55:47.212Z] 15:55:47 INFO - Process uptime: not available
[task 2022-02-21T15:55:47.212Z] 15:55:47 INFO - Thread 35 (crashed)
[task 2022-02-21T15:55:47.213Z] 15:55:47 INFO - 0 libxul.so!mozilla::SPSCRingBufferBase<short>::AssertCorrectThread(std::__ndk1::__thread_id&) [SPSCQueue.h:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 371 + 0x29]
[task 2022-02-21T15:55:47.213Z] 15:55:47 INFO - rax = 0x000073867a5cffb9 rdx = 0x0000000000000004
[task 2022-02-21T15:55:47.213Z] 15:55:47 INFO - rcx = 0x000073867df53d10 rbx = 0x0000000000000000
[task 2022-02-21T15:55:47.213Z] 15:55:47 INFO - rsi = 0x000073866ad8c5a0 rdi = 0x000000000000001b
[task 2022-02-21T15:55:47.213Z] 15:55:47 INFO - rbp = 0x000073866ad8d6d0 rsp = 0x000073866ad8d6c0
[task 2022-02-21T15:55:47.213Z] 15:55:47 INFO - r8 = 0x000000000000ffff r9 = 0x0000000000000000
[task 2022-02-21T15:55:47.214Z] 15:55:47 INFO - r10 = 0x000073869acb43d0 r11 = 0x0000000000000246
[task 2022-02-21T15:55:47.214Z] 15:55:47 INFO - r12 = 0x000073866c5fb938 r13 = 0x0000000000000d0e
[task 2022-02-21T15:55:47.214Z] 15:55:47 INFO - r14 = 0x0000000000000d0e r15 = 0x000073866a5aaa00
[task 2022-02-21T15:55:47.214Z] 15:55:47 INFO - rip = 0x0000738675309aab
[task 2022-02-21T15:55:47.214Z] 15:55:47 INFO - Found by: given as instruction pointer in context
[task 2022-02-21T15:55:47.214Z] 15:55:47 INFO - 1 libxul.so!mozilla::SPSCRingBufferBase<short>::Enqueue(short*, int) [SPSCQueue.h:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 152 + 0x8]
[task 2022-02-21T15:55:47.215Z] 15:55:47 INFO - rbp = 0x000073866ad8d710 rsp = 0x000073866ad8d6e0
[task 2022-02-21T15:55:47.215Z] 15:55:47 INFO - rip = 0x00007386752fdd56
[task 2022-02-21T15:55:47.215Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.215Z] 15:55:47 INFO - 2 libxul.so!mozilla::AudioSink::PushProcessedAudio(mozilla::AudioData*) [AudioSink.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 440 + 0x20]
[task 2022-02-21T15:55:47.215Z] 15:55:47 INFO - rbp = 0x000073866ad8d870 rsp = 0x000073866ad8d720
[task 2022-02-21T15:55:47.216Z] 15:55:47 INFO - rip = 0x00007386752fdc04
[task 2022-02-21T15:55:47.216Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.216Z] 15:55:47 INFO - 3 libxul.so!mozilla::AudioSink::NotifyAudioNeeded() [AudioSink.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 418 + 0xe]
[task 2022-02-21T15:55:47.216Z] 15:55:47 INFO - rbp = 0x000073866ad8dc30 rsp = 0x000073866ad8d880
[task 2022-02-21T15:55:47.216Z] 15:55:47 INFO - rip = 0x00007386752fc475
[task 2022-02-21T15:55:47.216Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.217Z] 15:55:47 INFO - 4 libxul.so!mozilla::detail::ListenerImpl<mozilla::AbstractThread, std::__ndk1::enable_if<TakeArgs<void (mozilla::AudioSink::*)(RefPtr<mozilla::AudioData> const&)>::value, mozilla::MediaEventListener>::type mozilla::MediaEventSourceImpl<(mozilla::ListenerPolicy)1, RefPtr<mozilla::AudioData> >::ConnectInternal<mozilla::AbstractThread, mozilla::AudioSink, void (mozilla::AudioSink::*)(RefPtr<mozilla::AudioData> const&)>(mozilla::AbstractThread*, mozilla::AudioSink*, void (mozilla::AudioSink::*)(RefPtr<mozilla::AudioData> const&))::{lambda(RefPtr<mozilla::AudioData>&&)#1}, RefPtr<mozilla::AudioData> >::ApplyWithArgs(RefPtr<mozilla::AudioData>&&) [MediaEventSource.h:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 236 + 0x25]
[task 2022-02-21T15:55:47.217Z] 15:55:47 INFO - rbp = 0x000073866ad8dc80 rsp = 0x000073866ad8dc40
[task 2022-02-21T15:55:47.218Z] 15:55:47 INFO - rip = 0x0000738675308d6f
[task 2022-02-21T15:55:47.218Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.218Z] 15:55:47 INFO - 5 libxul.so!mozilla::detail::RunnableMethodImpl<mozilla::detail::Listener<RefPtr<mozilla::AudioData> >*, void (mozilla::detail::Listener<RefPtr<mozilla::AudioData> >::*)(RefPtr<mozilla::AudioData>&&), true, (mozilla::RunnableKind)0, RefPtr<mozilla::AudioData>&&>::Run() [nsThreadUtils.h:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 1200 + 0x19]
[task 2022-02-21T15:55:47.218Z] 15:55:47 INFO - rbp = 0x000073866ad8dc90 rsp = 0x000073866ad8dc90
[task 2022-02-21T15:55:47.218Z] 15:55:47 INFO - rip = 0x0000738675184078
[task 2022-02-21T15:55:47.219Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.219Z] 15:55:47 INFO - 6 libxul.so!mozilla::AutoTaskDispatcher::TaskGroupRunnable::Run() [TaskDispatcher.h:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 230 + 0x24]
[task 2022-02-21T15:55:47.219Z] 15:55:47 INFO - rbp = 0x000073866ad8dd30 rsp = 0x000073866ad8dca0
[task 2022-02-21T15:55:47.219Z] 15:55:47 INFO - rip = 0x0000738673037090
[task 2022-02-21T15:55:47.219Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.219Z] 15:55:47 INFO - 7 libxul.so!mozilla::TaskQueue::Runner::Run() [TaskQueue.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 206 + 0x10]
[task 2022-02-21T15:55:47.220Z] 15:55:47 INFO - rbp = 0x000073866ad8de50 rsp = 0x000073866ad8dd40
[task 2022-02-21T15:55:47.220Z] 15:55:47 INFO - rip = 0x000073867303d5dc
[task 2022-02-21T15:55:47.220Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.220Z] 15:55:47 INFO - 8 libxul.so!nsThreadPool::Run() [nsThreadPool.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 310 + 0x10]
[task 2022-02-21T15:55:47.220Z] 15:55:47 INFO - rbp = 0x000073866ad8df70 rsp = 0x000073866ad8de60
[task 2022-02-21T15:55:47.220Z] 15:55:47 INFO - rip = 0x000073867304e445
[task 2022-02-21T15:55:47.220Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.221Z] 15:55:47 INFO - 9 libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 1167 + 0x10]
[task 2022-02-21T15:55:47.221Z] 15:55:47 INFO - rbp = 0x000073866ad8e0a0 rsp = 0x000073866ad8df80
[task 2022-02-21T15:55:47.221Z] 15:55:47 INFO - rip = 0x0000738673048705
[task 2022-02-21T15:55:47.221Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.221Z] 15:55:47 INFO - 10 libxul.so!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 467 + 0xf]
[task 2022-02-21T15:55:47.222Z] 15:55:47 INFO - rbp = 0x000073866ad8e0e0 rsp = 0x000073866ad8e0b0
[task 2022-02-21T15:55:47.222Z] 15:55:47 INFO - rip = 0x000073867304cdbf
[task 2022-02-21T15:55:47.222Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.222Z] 15:55:47 INFO - 11 libxul.so!mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) [MessagePump.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 300 + 0x9]
[task 2022-02-21T15:55:47.223Z] 15:55:47 INFO - rbp = 0x000073866ad8e130 rsp = 0x000073866ad8e0f0
[task 2022-02-21T15:55:47.223Z] 15:55:47 INFO - rip = 0x00007386736972d2
[task 2022-02-21T15:55:47.223Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.223Z] 15:55:47 INFO - 12 libxul.so!MessageLoop::RunInternal() [message_loop.cc:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 331 + 0x16]
[task 2022-02-21T15:55:47.223Z] 15:55:47 INFO - rbp = 0x000073866ad8e170 rsp = 0x000073866ad8e140
[task 2022-02-21T15:55:47.223Z] 15:55:47 INFO - rip = 0x0000738673636a56
[task 2022-02-21T15:55:47.224Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.224Z] 15:55:47 INFO - 13 libxul.so!MessageLoop::Run() [message_loop.cc:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 306 + 0x7]
[task 2022-02-21T15:55:47.224Z] 15:55:47 INFO - rbp = 0x000073866ad8e1b0 rsp = 0x000073866ad8e180
[task 2022-02-21T15:55:47.224Z] 15:55:47 INFO - rip = 0x00007386736369bf
[task 2022-02-21T15:55:47.224Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.224Z] 15:55:47 INFO - 14 libxul.so!nsThread::ThreadFunc(void*) [nsThread.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 389 + 0x7]
[task 2022-02-21T15:55:47.225Z] 15:55:47 INFO - rbp = 0x000073866ad8e3a0 rsp = 0x000073866ad8e1c0
[task 2022-02-21T15:55:47.225Z] 15:55:47 INFO - rip = 0x00007386730455e8
[task 2022-02-21T15:55:47.225Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.225Z] 15:55:47 INFO - 15 libnss3.so!_pt_root [ptthread.c:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 201 + 0x9]
[task 2022-02-21T15:55:47.225Z] 15:55:47 INFO - rbp = 0x000073866ad8e3e0 rsp = 0x000073866ad8e3b0
[task 2022-02-21T15:55:47.225Z] 15:55:47 INFO - rip = 0x000073867d831b14
[task 2022-02-21T15:55:47.225Z] 15:55:47 INFO - Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.225Z] 15:55:47 INFO - 16 libnss3.so!pt_recvfrom_cont [ptio.c:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 996 + 0x2e]
[task 2022-02-21T15:55:47.226Z] 15:55:47 INFO - rbp = 0x000073866ad8e3e0 rsp = 0x000073866ad8e3d0
[task 2022-02-21T15:55:47.226Z] 15:55:47 INFO - rip = 0x000073867d8319c9
[task 2022-02-21T15:55:47.226Z] 15:55:47 INFO - Found by: stack scanning
[task 2022-02-21T15:55:47.226Z] 15:55:47 INFO - 17 libc.so!__pthread_start(void*) + 0xb1
[task 2022-02-21T15:55:47.226Z] 15:55:47 INFO - rsp = 0x000073866ad8e3f0 rip = 0x000073869ad16772
[task 2022-02-21T15:55:47.226Z] 15:55:47 INFO - Found by: stack scanning
[task 2022-02-21T15:55:47.226Z] 15:55:47 INFO - 18 libc.so!__start_thread + 0xb
[task 2022-02-21T15:55:47.226Z] 15:55:47 INFO - rbx = 0x000073867e85a450 rbp = 0x0000000000000e1d
[task 2022-02-21T15:55:47.227Z] 15:55:47 INFO - rsp = 0x000073866ad8e440 r12 = 0x0000000000000000
[task 2022-02-21T15:55:47.227Z] 15:55:47 INFO - r13 = 0x000073867d8319c9 r14 = 0x000073866ad8e450
[task 2022-02-21T15:55:47.227Z] 15:55:47 INFO - r15 = 0x000073866ad8e4e8 rip = 0x000073869acb69ec
[task 2022-02-21T15:55:47.227Z] 15:55:47 INFO - Found by: call frame info
[task 2022-02-21T15:55:47.227Z] 15:55:47 INFO - 19 libc.so!__bionic_clone + 0x35
[task 2022-02-21T15:55:47.227Z] 15:55:47 INFO - rbx = 0x000073867e85a450 rbp = 0x0000000000000e1d
[task 2022-02-21T15:55:47.227Z] 15:55:47 INFO - rsp = 0x000073866ad8e450 r12 = 0x0000000000000000
[task 2022-02-21T15:55:47.227Z] 15:55:47 INFO - r13 = 0x000073867d8319c9 r14 = 0x000073866ad8e450
[task 2022-02-21T15:55:47.227Z] 15:55:47 INFO - r15 = 0x000073866ad8e4e8 rip = 0x000073869aca9a66
[task 2022-02-21T15:55:47.227Z] 15:55:47 INFO - Found by: call frame info
[task 2022-02-21T15:55:47.227Z] 15:55:47 INFO - 20 0x738668fff44f
[task 2022-02-21T15:55:47.228Z] 15:55:47 INFO - rbx = 0x000073867e85a450 rbp = 0x0000000000000e1d
[task 2022-02-21T15:55:47.228Z] 15:55:47 INFO - rsp = 0x000073866ad8e458 r12 = 0x0000000000000000
[task 2022-02-21T15:55:47.228Z] 15:55:47 INFO - r13 = 0x000073867d8319c9 r14 = 0x000073866ad8e450
[task 2022-02-21T15:55:47.228Z] 15:55:47 INFO - r15 = 0x000073866ad8e4e8 rip = 0x0000738668fff450
[task 2022-02-21T15:55:47.228Z] 15:55:47 INFO - Found by: call frame info
[task 2022-02-21T15:55:47.228Z] 15:55:47 INFO - 21 libnss3.so!pt_recvfrom_cont [ptio.c:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 996 + 0x2e]
[task 2022-02-21T15:55:47.228Z] 15:55:47 INFO - rsp = 0x000073866ad8e4b8 rip = 0x000073867d8319c9
[task 2022-02-21T15:55:47.229Z] 15:55:47 INFO - Found by: stack scanning
[task 2022-02-21T15:55:47.229Z] 15:55:47 INFO - Thread 0
Updated•3 years ago
|
Component: MFBT → Audio/Video
Comment hidden (Intermittent Failures Robot) |
![]() |
||
Comment 2•3 years ago
|
||
Is this a regression from bug 1754006?
Group: media-core-security
status-firefox97:
--- → unaffected
status-firefox98:
--- → ?
status-firefox99:
--- → affected
status-firefox-esr91:
--- → unaffected
Flags: needinfo?(padenot)
See Also: → 1757618
Comment 4•3 years ago
|
||
Could be a race, could be some kind of UAF.
Keywords: csectype-race,
sec-high
![]() |
||
Updated•3 years ago
|
Blocks: media-triage
Comment 5•3 years ago
|
||
This crash only happened once, and it's not a race or UAF because the thread id would change and the reason of hitting assertion was probably we didn't update the id correctly somehow. As we didn't see any of this crash since it first appeared, I will close this one and feel free to reopen it if this crash happens again.
Status: NEW → RESOLVED
Closed: 3 years ago
Flags: needinfo?(padenot)
Resolution: --- → WORKSFORME
Updated•3 years ago
|
No longer blocks: media-triage
Updated•5 months ago
|
Group: media-core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•