Closed Bug 1806521 Opened 1 year ago Closed 1 year ago

Crash in [@ webrtc::videocapturemodule::VideoCaptureImpl::DeliverCapturedFrame]

Categories

(Core :: WebRTC: Audio/Video, defect)

Unspecified
macOS
defect

Tracking

()

RESOLVED FIXED
110 Branch
Tracking Status
firefox-esr102 --- unaffected
firefox108 --- unaffected
firefox109 --- unaffected
firefox110 + fixed

People

(Reporter: jrmuizel, Assigned: pehrsons, NeedInfo)

References

(Regression)

Details

(5 keywords, Whiteboard: [post-critsmash-triage][adv-main110+r])

Crash Data

Attachments

(1 file)

Crash report: https://crash-stats.mozilla.org/report/index/6eb9de73-4b94-47c3-8b66-9ad3b0221219

Reason: EXC_BAD_ACCESS / EXC_I386_GPFLT

Top 10 frames of crashing thread:

0  XUL  webrtc::videocapturemodule::VideoCaptureImpl::DeliverCapturedFrame  third_party/libwebrtc/modules/video_capture/video_capture_impl.cc:120
1  XUL  webrtc::videocapturemodule::VideoCaptureAvFoundation::OnFrame  dom/media/systemservices/objc_video_capture/video_capture_avfoundation.mm:168
2  XUL  -[VideoCaptureAdapter capturer:didCaptureVideoFrame:]  dom/media/systemservices/objc_video_capture/video_capture_avfoundation.mm:89
3  XUL  -[RTCCameraVideoCapturer captureOutput:didOutputSampleBuffer:fromConnection:]  third_party/libwebrtc/sdk/objc/components/capturer/RTCCameraVideoCapturer.m:299
4  AVFoundation  __49-[AVCaptureVideoDataOutput _render:sampleBuffer:]_block_invoke  
5  libdispatch.dylib  _dispatch_call_block_and_release  
6  libdispatch.dylib  _dispatch_client_callout  
7  libdispatch.dylib  _dispatch_lane_serial_drain  
8  libdispatch.dylib  _dispatch_lane_invoke  
9  libdispatch.dylib  _dispatch_workloop_worker_thread  
Group: core-security

"Hi folks, I just encountered a (for me) reproducible crash
https://crash-stats.mozilla.org/report/index/5c8a444d-ad92-4952-abc9-3c1eb0221219 and
https://crash-stats.mozilla.org/report/index/0215dfe5-923e-4444-9a10-823270221219

Basically Firefox appears to crash whenever I close a tab with a local video feed rendered in it.

So basically just sit in on the lobby room (after you approved the cam/mic access) and before even clicking the "join" button. Close the browser window and all of Firefox crashes for me."

Regressed by: 1451394

Could this be bug 1621500 back again?

[Tracking Requested - why for this release]: sec-high reproducible crash regression

Group: core-security → media-core-security

FWIW the new camera backend causing this is only enabled in nightly and early beta. I'll disable it everywhere until we've fixed this.

Flags: needinfo?(apehrson)
Assignee: nobody → apehrson
Status: NEW → ASSIGNED
Status: ASSIGNED → RESOLVED
Closed: 1 year ago
Resolution: --- → FIXED
Target Milestone: --- → 110 Branch
Duplicate of this bug: 1805926
Group: media-core-security → core-security-release
Duplicate of this bug: 1808928

Jeff, is this easy reproducible? Could we manually verify this issues? If yes, could you please help us with reproduction steps?

Flags: needinfo?(jmuizelaar)

Yes, it should be easily reproducible.
STR:

  1. With two tabs, open gum_test in one of them
  2. Start the camera so that it is capturing
  3. Close the current tab

Expected: Tab closes, camera stops capturing
Actual: Parent process crash

Flags: needinfo?(jmuizelaar)
Flags: qe-verify+
Whiteboard: [post-critsmash-triage]

Unfortunately, I'm unable to reproduce the crash with the steps mentioned above. I've tried on several different macOS versions (10.14, 10.15, 11 and 12), with an affected Nightly build (2022-12-19).

Jeff Muizelaar, since the crash does not reproduce on my end, could you please help us verify this bug on latest Nightly 110.0a1?

Flags: needinfo?(jmuizelaar)
Whiteboard: [post-critsmash-triage] → [post-critsmash-triage][adv-main110+r]
Group: core-security-release
Keywords: regression
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: