Closed Bug 1756473 Opened 3 years ago Closed 3 years ago

Intermittent dom/media/test/test_bug465498.html | application crashed [@ mozilla::SPSCRingBufferBase<short>::AssertCorrectThread(std::__ndk1::__thread_id&)]

Categories

(Core :: Audio/Video, defect)

defect

Tracking

()

RESOLVED WORKSFORME
Tracking Status
firefox-esr91 --- unaffected
firefox97 --- unaffected
firefox98 --- ?
firefox99 --- affected

People

(Reporter: intermittent-bug-filer, Unassigned)

References

Details

(4 keywords)

Crash Data

Filed by: mlaza [at] mozilla.com
Parsed log: https://treeherder.mozilla.org/logviewer?job_id=368623860&repo=autoland
Full log: https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/A685-Dp2T6WkM7UfdhOBhQ/runs/0/artifacts/public/logs/live_backing.log


[task 2022-02-21T15:55:24.453Z] 15:55:24     INFO -  TEST-START | dom/media/test/test_bug465498.html
[task 2022-02-21T15:55:44.682Z] 15:55:44     INFO -  wait for org.mozilla.geckoview.test_runner complete; top activity=com.android.launcher3
[task 2022-02-21T15:55:44.683Z] 15:55:44     INFO -  runtestsremote.py | Application ran for: 0:02:25.946312
[task 2022-02-21T15:55:44.789Z] 15:55:44     INFO -  mozcrash Copy/paste: /builds/worker/fetches/minidump_stackwalk/minidump_stackwalk --symbols-url=https://symbols.mozilla.org/ --human /tmp/tmpf0limlwg/38178951-e371-c60a-53c3-d9358c1afa1d.dmp /builds/worker/workspace/build/symbols
[task 2022-02-21T15:55:47.206Z] 15:55:47     INFO -  mozcrash Saved minidump as /builds/worker/workspace/build/blobber_upload_dir/38178951-e371-c60a-53c3-d9358c1afa1d.dmp
[task 2022-02-21T15:55:47.206Z] 15:55:47     INFO -  mozcrash Saved app info as /builds/worker/workspace/build/blobber_upload_dir/38178951-e371-c60a-53c3-d9358c1afa1d.extra
[task 2022-02-21T15:55:47.211Z] 15:55:47  WARNING -  PROCESS-CRASH | dom/media/test/test_bug465498.html | application crashed [@ mozilla::SPSCRingBufferBase<short>::AssertCorrectThread(std::__ndk1::__thread_id&)]
[task 2022-02-21T15:55:47.211Z] 15:55:47     INFO -  Mozilla crash reason: MOZ_ASSERT(aId == std::this_thread::get_id())
[task 2022-02-21T15:55:47.211Z] 15:55:47     INFO -  Crash dump filename: /tmp/tmpf0limlwg/38178951-e371-c60a-53c3-d9358c1afa1d.dmp
[task 2022-02-21T15:55:47.211Z] 15:55:47     INFO -  Operating system: Android
[task 2022-02-21T15:55:47.212Z] 15:55:47     INFO -                    0.0.0 Linux 3.10.0+ #260 SMP PREEMPT Fri May 19 12:48:14 PDT 2017 x86_64
[task 2022-02-21T15:55:47.212Z] 15:55:47     INFO -  CPU: amd64
[task 2022-02-21T15:55:47.212Z] 15:55:47     INFO -       family 6 model 6 stepping 3
[task 2022-02-21T15:55:47.212Z] 15:55:47     INFO -       4 CPUs
[task 2022-02-21T15:55:47.212Z] 15:55:47     INFO -  Crash reason:  SIGSEGV / SEGV_MAPERR
[task 2022-02-21T15:55:47.212Z] 15:55:47     INFO -  Crash address: 0x0
[task 2022-02-21T15:55:47.212Z] 15:55:47     INFO -  Process uptime: not available
[task 2022-02-21T15:55:47.212Z] 15:55:47     INFO -  Thread 35  (crashed)
[task 2022-02-21T15:55:47.213Z] 15:55:47     INFO -   0  libxul.so!mozilla::SPSCRingBufferBase<short>::AssertCorrectThread(std::__ndk1::__thread_id&) [SPSCQueue.h:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 371 + 0x29]
[task 2022-02-21T15:55:47.213Z] 15:55:47     INFO -      rax = 0x000073867a5cffb9   rdx = 0x0000000000000004
[task 2022-02-21T15:55:47.213Z] 15:55:47     INFO -      rcx = 0x000073867df53d10   rbx = 0x0000000000000000
[task 2022-02-21T15:55:47.213Z] 15:55:47     INFO -      rsi = 0x000073866ad8c5a0   rdi = 0x000000000000001b
[task 2022-02-21T15:55:47.213Z] 15:55:47     INFO -      rbp = 0x000073866ad8d6d0   rsp = 0x000073866ad8d6c0
[task 2022-02-21T15:55:47.213Z] 15:55:47     INFO -       r8 = 0x000000000000ffff    r9 = 0x0000000000000000
[task 2022-02-21T15:55:47.214Z] 15:55:47     INFO -      r10 = 0x000073869acb43d0   r11 = 0x0000000000000246
[task 2022-02-21T15:55:47.214Z] 15:55:47     INFO -      r12 = 0x000073866c5fb938   r13 = 0x0000000000000d0e
[task 2022-02-21T15:55:47.214Z] 15:55:47     INFO -      r14 = 0x0000000000000d0e   r15 = 0x000073866a5aaa00
[task 2022-02-21T15:55:47.214Z] 15:55:47     INFO -      rip = 0x0000738675309aab
[task 2022-02-21T15:55:47.214Z] 15:55:47     INFO -      Found by: given as instruction pointer in context
[task 2022-02-21T15:55:47.214Z] 15:55:47     INFO -   1  libxul.so!mozilla::SPSCRingBufferBase<short>::Enqueue(short*, int) [SPSCQueue.h:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 152 + 0x8]
[task 2022-02-21T15:55:47.215Z] 15:55:47     INFO -      rbp = 0x000073866ad8d710   rsp = 0x000073866ad8d6e0
[task 2022-02-21T15:55:47.215Z] 15:55:47     INFO -      rip = 0x00007386752fdd56
[task 2022-02-21T15:55:47.215Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.215Z] 15:55:47     INFO -   2  libxul.so!mozilla::AudioSink::PushProcessedAudio(mozilla::AudioData*) [AudioSink.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 440 + 0x20]
[task 2022-02-21T15:55:47.215Z] 15:55:47     INFO -      rbp = 0x000073866ad8d870   rsp = 0x000073866ad8d720
[task 2022-02-21T15:55:47.216Z] 15:55:47     INFO -      rip = 0x00007386752fdc04
[task 2022-02-21T15:55:47.216Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.216Z] 15:55:47     INFO -   3  libxul.so!mozilla::AudioSink::NotifyAudioNeeded() [AudioSink.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 418 + 0xe]
[task 2022-02-21T15:55:47.216Z] 15:55:47     INFO -      rbp = 0x000073866ad8dc30   rsp = 0x000073866ad8d880
[task 2022-02-21T15:55:47.216Z] 15:55:47     INFO -      rip = 0x00007386752fc475
[task 2022-02-21T15:55:47.216Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.217Z] 15:55:47     INFO -   4  libxul.so!mozilla::detail::ListenerImpl<mozilla::AbstractThread, std::__ndk1::enable_if<TakeArgs<void (mozilla::AudioSink::*)(RefPtr<mozilla::AudioData> const&)>::value, mozilla::MediaEventListener>::type mozilla::MediaEventSourceImpl<(mozilla::ListenerPolicy)1, RefPtr<mozilla::AudioData> >::ConnectInternal<mozilla::AbstractThread, mozilla::AudioSink, void (mozilla::AudioSink::*)(RefPtr<mozilla::AudioData> const&)>(mozilla::AbstractThread*, mozilla::AudioSink*, void (mozilla::AudioSink::*)(RefPtr<mozilla::AudioData> const&))::{lambda(RefPtr<mozilla::AudioData>&&)#1}, RefPtr<mozilla::AudioData> >::ApplyWithArgs(RefPtr<mozilla::AudioData>&&) [MediaEventSource.h:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 236 + 0x25]
[task 2022-02-21T15:55:47.217Z] 15:55:47     INFO -      rbp = 0x000073866ad8dc80   rsp = 0x000073866ad8dc40
[task 2022-02-21T15:55:47.218Z] 15:55:47     INFO -      rip = 0x0000738675308d6f
[task 2022-02-21T15:55:47.218Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.218Z] 15:55:47     INFO -   5  libxul.so!mozilla::detail::RunnableMethodImpl<mozilla::detail::Listener<RefPtr<mozilla::AudioData> >*, void (mozilla::detail::Listener<RefPtr<mozilla::AudioData> >::*)(RefPtr<mozilla::AudioData>&&), true, (mozilla::RunnableKind)0, RefPtr<mozilla::AudioData>&&>::Run() [nsThreadUtils.h:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 1200 + 0x19]
[task 2022-02-21T15:55:47.218Z] 15:55:47     INFO -      rbp = 0x000073866ad8dc90   rsp = 0x000073866ad8dc90
[task 2022-02-21T15:55:47.218Z] 15:55:47     INFO -      rip = 0x0000738675184078
[task 2022-02-21T15:55:47.219Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.219Z] 15:55:47     INFO -   6  libxul.so!mozilla::AutoTaskDispatcher::TaskGroupRunnable::Run() [TaskDispatcher.h:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 230 + 0x24]
[task 2022-02-21T15:55:47.219Z] 15:55:47     INFO -      rbp = 0x000073866ad8dd30   rsp = 0x000073866ad8dca0
[task 2022-02-21T15:55:47.219Z] 15:55:47     INFO -      rip = 0x0000738673037090
[task 2022-02-21T15:55:47.219Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.219Z] 15:55:47     INFO -   7  libxul.so!mozilla::TaskQueue::Runner::Run() [TaskQueue.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 206 + 0x10]
[task 2022-02-21T15:55:47.220Z] 15:55:47     INFO -      rbp = 0x000073866ad8de50   rsp = 0x000073866ad8dd40
[task 2022-02-21T15:55:47.220Z] 15:55:47     INFO -      rip = 0x000073867303d5dc
[task 2022-02-21T15:55:47.220Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.220Z] 15:55:47     INFO -   8  libxul.so!nsThreadPool::Run() [nsThreadPool.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 310 + 0x10]
[task 2022-02-21T15:55:47.220Z] 15:55:47     INFO -      rbp = 0x000073866ad8df70   rsp = 0x000073866ad8de60
[task 2022-02-21T15:55:47.220Z] 15:55:47     INFO -      rip = 0x000073867304e445
[task 2022-02-21T15:55:47.220Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.221Z] 15:55:47     INFO -   9  libxul.so!nsThread::ProcessNextEvent(bool, bool*) [nsThread.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 1167 + 0x10]
[task 2022-02-21T15:55:47.221Z] 15:55:47     INFO -      rbp = 0x000073866ad8e0a0   rsp = 0x000073866ad8df80
[task 2022-02-21T15:55:47.221Z] 15:55:47     INFO -      rip = 0x0000738673048705
[task 2022-02-21T15:55:47.221Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.221Z] 15:55:47     INFO -  10  libxul.so!NS_ProcessNextEvent(nsIThread*, bool) [nsThreadUtils.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 467 + 0xf]
[task 2022-02-21T15:55:47.222Z] 15:55:47     INFO -      rbp = 0x000073866ad8e0e0   rsp = 0x000073866ad8e0b0
[task 2022-02-21T15:55:47.222Z] 15:55:47     INFO -      rip = 0x000073867304cdbf
[task 2022-02-21T15:55:47.222Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.222Z] 15:55:47     INFO -  11  libxul.so!mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) [MessagePump.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 300 + 0x9]
[task 2022-02-21T15:55:47.223Z] 15:55:47     INFO -      rbp = 0x000073866ad8e130   rsp = 0x000073866ad8e0f0
[task 2022-02-21T15:55:47.223Z] 15:55:47     INFO -      rip = 0x00007386736972d2
[task 2022-02-21T15:55:47.223Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.223Z] 15:55:47     INFO -  12  libxul.so!MessageLoop::RunInternal() [message_loop.cc:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 331 + 0x16]
[task 2022-02-21T15:55:47.223Z] 15:55:47     INFO -      rbp = 0x000073866ad8e170   rsp = 0x000073866ad8e140
[task 2022-02-21T15:55:47.223Z] 15:55:47     INFO -      rip = 0x0000738673636a56
[task 2022-02-21T15:55:47.224Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.224Z] 15:55:47     INFO -  13  libxul.so!MessageLoop::Run() [message_loop.cc:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 306 + 0x7]
[task 2022-02-21T15:55:47.224Z] 15:55:47     INFO -      rbp = 0x000073866ad8e1b0   rsp = 0x000073866ad8e180
[task 2022-02-21T15:55:47.224Z] 15:55:47     INFO -      rip = 0x00007386736369bf
[task 2022-02-21T15:55:47.224Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.224Z] 15:55:47     INFO -  14  libxul.so!nsThread::ThreadFunc(void*) [nsThread.cpp:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 389 + 0x7]
[task 2022-02-21T15:55:47.225Z] 15:55:47     INFO -      rbp = 0x000073866ad8e3a0   rsp = 0x000073866ad8e1c0
[task 2022-02-21T15:55:47.225Z] 15:55:47     INFO -      rip = 0x00007386730455e8
[task 2022-02-21T15:55:47.225Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.225Z] 15:55:47     INFO -  15  libnss3.so!_pt_root [ptthread.c:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 201 + 0x9]
[task 2022-02-21T15:55:47.225Z] 15:55:47     INFO -      rbp = 0x000073866ad8e3e0   rsp = 0x000073866ad8e3b0
[task 2022-02-21T15:55:47.225Z] 15:55:47     INFO -      rip = 0x000073867d831b14
[task 2022-02-21T15:55:47.225Z] 15:55:47     INFO -      Found by: previous frame's frame pointer
[task 2022-02-21T15:55:47.225Z] 15:55:47     INFO -  16  libnss3.so!pt_recvfrom_cont [ptio.c:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 996 + 0x2e]
[task 2022-02-21T15:55:47.226Z] 15:55:47     INFO -      rbp = 0x000073866ad8e3e0   rsp = 0x000073866ad8e3d0
[task 2022-02-21T15:55:47.226Z] 15:55:47     INFO -      rip = 0x000073867d8319c9
[task 2022-02-21T15:55:47.226Z] 15:55:47     INFO -      Found by: stack scanning
[task 2022-02-21T15:55:47.226Z] 15:55:47     INFO -  17  libc.so!__pthread_start(void*) + 0xb1
[task 2022-02-21T15:55:47.226Z] 15:55:47     INFO -      rsp = 0x000073866ad8e3f0   rip = 0x000073869ad16772
[task 2022-02-21T15:55:47.226Z] 15:55:47     INFO -      Found by: stack scanning
[task 2022-02-21T15:55:47.226Z] 15:55:47     INFO -  18  libc.so!__start_thread + 0xb
[task 2022-02-21T15:55:47.226Z] 15:55:47     INFO -      rbx = 0x000073867e85a450   rbp = 0x0000000000000e1d
[task 2022-02-21T15:55:47.227Z] 15:55:47     INFO -      rsp = 0x000073866ad8e440   r12 = 0x0000000000000000
[task 2022-02-21T15:55:47.227Z] 15:55:47     INFO -      r13 = 0x000073867d8319c9   r14 = 0x000073866ad8e450
[task 2022-02-21T15:55:47.227Z] 15:55:47     INFO -      r15 = 0x000073866ad8e4e8   rip = 0x000073869acb69ec
[task 2022-02-21T15:55:47.227Z] 15:55:47     INFO -      Found by: call frame info
[task 2022-02-21T15:55:47.227Z] 15:55:47     INFO -  19  libc.so!__bionic_clone + 0x35
[task 2022-02-21T15:55:47.227Z] 15:55:47     INFO -      rbx = 0x000073867e85a450   rbp = 0x0000000000000e1d
[task 2022-02-21T15:55:47.227Z] 15:55:47     INFO -      rsp = 0x000073866ad8e450   r12 = 0x0000000000000000
[task 2022-02-21T15:55:47.227Z] 15:55:47     INFO -      r13 = 0x000073867d8319c9   r14 = 0x000073866ad8e450
[task 2022-02-21T15:55:47.227Z] 15:55:47     INFO -      r15 = 0x000073866ad8e4e8   rip = 0x000073869aca9a66
[task 2022-02-21T15:55:47.227Z] 15:55:47     INFO -      Found by: call frame info
[task 2022-02-21T15:55:47.227Z] 15:55:47     INFO -  20  0x738668fff44f
[task 2022-02-21T15:55:47.228Z] 15:55:47     INFO -      rbx = 0x000073867e85a450   rbp = 0x0000000000000e1d
[task 2022-02-21T15:55:47.228Z] 15:55:47     INFO -      rsp = 0x000073866ad8e458   r12 = 0x0000000000000000
[task 2022-02-21T15:55:47.228Z] 15:55:47     INFO -      r13 = 0x000073867d8319c9   r14 = 0x000073866ad8e450
[task 2022-02-21T15:55:47.228Z] 15:55:47     INFO -      r15 = 0x000073866ad8e4e8   rip = 0x0000738668fff450
[task 2022-02-21T15:55:47.228Z] 15:55:47     INFO -      Found by: call frame info
[task 2022-02-21T15:55:47.228Z] 15:55:47     INFO -  21  libnss3.so!pt_recvfrom_cont [ptio.c:0355b14a5461d36a3bb857bbd9d0e90320765f5b : 996 + 0x2e]
[task 2022-02-21T15:55:47.228Z] 15:55:47     INFO -      rsp = 0x000073866ad8e4b8   rip = 0x000073867d8319c9
[task 2022-02-21T15:55:47.229Z] 15:55:47     INFO -      Found by: stack scanning
[task 2022-02-21T15:55:47.229Z] 15:55:47     INFO -  Thread 0
Component: MFBT → Audio/Video

Is this a regression from bug 1754006?

Group: media-core-security
Flags: needinfo?(padenot)
See Also: → 1757618

Could be a race, could be some kind of UAF.

Blocks: media-triage

This crash only happened once, and it's not a race or UAF because the thread id would change and the reason of hitting assertion was probably we didn't update the id correctly somehow. As we didn't see any of this crash since it first appeared, I will close this one and feel free to reopen it if this crash happens again.

Status: NEW → RESOLVED
Closed: 3 years ago
Flags: needinfo?(padenot)
Resolution: --- → WORKSFORME
No longer blocks: media-triage
Group: media-core-security
You need to log in before you can comment on or make changes to this bug.