1794346 - Crash in [@ @0x0 | webrtc::BaseCapturerPipeWire::OnStreamProcess]

Status: RESOLVED WORKSFORME

(Core :: WebRTC, defect)

Description

[Gabriele Svelto [:gsvelto]]

Crash report: https://crash-stats.mozilla.org/report/index/c709d644-3161-41b6-8a55-ca9550221009

Reason: SIGSEGV / SEGV_MAPERR

Top 9 frames of crashing thread:

0 None @0x0000000000000000 
1 libxul.so webrtc::BaseCapturerPipeWire::OnStreamProcess third_party/libwebrtc/modules/desktop_capture/linux/wayland/moz_base_capturer_pipewire.cc:287
2 libpipewire-0.3.so.0 libpipewire-0.3.so.0@0x0000000000080457 
3 libspa-support.so libspa-support.so@0x00000000000067f9 
4 libc.so.6 __GI___libc_read /usr/src/debug/glibc-2.35-17.fc36.x86_64/sysdeps/unix/sysv/linux/read.c:26
4 libc.so.6 read /usr/src/debug/glibc-2.35-17.fc36.x86_64/sysdeps/unix/sysv/linux/read.c:24
5 None @0x00007f05992feae7 
6 libspa-support.so libspa-support.so@0x00000000000058fc 
7 libspa-support.so libspa-support.so@0x0000000000007306 

We're jumping inside a NULL pointer, however it's hard to tell where as the enclosing function (BaseCapturerPipeWire::HandleBuffer()) is rather large.

Comment 1

[Gabriele Svelto [:gsvelto]]

pipewire symbols are missing, I'm going to add them to the symbol scrapers

Comment 2

[Gabriele Svelto [:gsvelto]]

Now that symbols have been scraped we have better stack traces:

0 	None 			0x0000000000000000
1 	libxul.so 		webrtc::BaseCapturerPipeWire::OnStreamProcess(void*) 	third_party/libwebrtc/modules/desktop_capture/linux/wayland/moz_base_capturer_pipewire.cc:287
2 	libpipewire-0.3.so.0 	do_call_process 	/usr/src/debug/pipewire-0.3.59-1.fc36.x86_64/src/pipewire/stream.c:432
3 	libspa-support.so 	flush_items 	/usr/src/debug/pipewire-0.3.59-1.fc36.x86_64/spa/plugins/support/loop.c:181
4 	libspa-support.so 	source_event_func 	/usr/src/debug/pipewire-0.3.59-1.fc36.x86_64/spa/plugins/support/loop.c:592
5 	libspa-support.so 	loop_iterate 	/usr/src/debug/pipewire-0.3.59-1.fc36.x86_64/spa/plugins/support/loop.c:431
6 	libpipewire-0.3.so.0 	do_loop 	/usr/src/debug/pipewire-0.3.59-1.fc36.x86_64/src/pipewire/thread-loop.c:253
7 	firefox-bin 		set_alt_signal_stack_and_start(PthreadCreateParams*) 	toolkit/crashreporter/pthread_create_interposer/pthread_create_interposer.cpp:80
8 	libc.so.6 		start_thread 	/usr/src/debug/glibc-2.35-17.fc36.x86_64/nptl/pthread_create.c:442
9 	libc.so.6 		__clone3

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.