1822652 - [wmfme] Assertion failure: false (Failed to create video bridge), at /builds/worker/checkouts/gecko/ipc/glue/UtilityProcessManager.cpp:354

Status: NEW

(Core :: Audio/Video: Playback, defect, P3)

Description

[Tyson Smith [:tsmith]]

Found while fuzzing m-c 20230216-1a6c81eba852 (--enable-debug --enable-fuzzing)

This has been reported frequently by fuzzers since it was initially reported. It is not reliably reproducible, so a test case is not available.

Assertion failure: false (Failed to create video bridge), at /builds/worker/checkouts/gecko/ipc/glue/UtilityProcessManager.cpp:354

r10 = 0x0000000000000000    r11 = 0x000000e0099fd800    r12 = 0x0000023f2ac716a0
r13 = 0x0000000000000000    r14 = 0x000000e0099fdec0    r15 = 0xaaaaaaaaaaaaaaaa
 r8 = 0x000000e0099ff810     r9 = 0x00007fffb2c20000    rax = 0x00007fff89a74a5d
rbp = 0x0000000000000000    rbx = 0x000000e0099fde80    rcx = 0x00007fffa7a67dc8
rdi = 0x0000000000001438    rdx = 0x0000000000000000    rip = 0x00007fff80b27b99
rsi = 0x0000023f35a93e80    rsp = 0x000000e0099fde40
OS|Windows NT|10.0.20348
CPU|amd64|family 6 model 85 stepping 7|8
Crash|EXCEPTION_BREAKPOINT|0x00007fff80b27b99|0
0|0|xul.dll|mozilla::MozPromise<bool,nsresult,0>::ThenValue<`lambda at /builds/worker/checkouts/gecko/ipc/glue/UtilityProcessManager.cpp:317:11',`lambda at /builds/worker/checkouts/gecko/ipc/glue/UtilityProcessManager.cpp:362:11'>::DoResolveOrRejectInternal(mozilla::MozPromise<bool,nsresult,0>::ResolveOrRejectValue&)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/MozPromise.h:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|863|0x549
0|1|xul.dll|mozilla::MozPromise<bool,nsresult,0>::ThenValueBase::ResolveOrRejectRunnable::Run()|hg:hg.mozilla.org/mozilla-central:xpcom/threads/MozPromise.h:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|489|0x4e
0|2|xul.dll|mozilla::RunnableTask::Run()|hg:hg.mozilla.org/mozilla-central:xpcom/threads/TaskController.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|541|0x107
0|3|xul.dll|mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex &> const&)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/TaskController.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|855|0x983
0|4|xul.dll|mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex &> const&)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/TaskController.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|686|0x4a
0|5|xul.dll|mozilla::TaskController::ProcessPendingMTTask(bool)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/TaskController.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|464|0x69
0|6|xul.dll|mozilla::detail::RunnableFunction<`lambda at /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:188:7'>::Run()|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.h:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|546|0x16
0|7|xul.dll|nsThread::ProcessNextEvent(bool, bool*)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|1225|0x82e
0|8|xul.dll|NS_ProcessNextEvent(nsIThread*, bool)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|477|0x44
0|9|xul.dll|mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessagePump.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|85|0xb8
0|10|xul.dll|MessageLoop::RunHandler()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|374|0x4f
0|11|xul.dll|MessageLoop::Run()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|356|0x6e
0|12|xul.dll|nsBaseAppShell::Run()|hg:hg.mozilla.org/mozilla-central:widget/nsBaseAppShell.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|148|0x27
0|13|xul.dll|nsAppShell::Run()|hg:hg.mozilla.org/mozilla-central:widget/windows/nsAppShell.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|614|0x2bb
0|14|xul.dll|nsAppStartup::Run()|hg:hg.mozilla.org/mozilla-central:toolkit/components/startup/nsAppStartup.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|295|0x77
0|15|xul.dll|XREMain::XRE_mainRun()|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsAppRunner.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|5650|0x1bbe
0|16|xul.dll|XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&)|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsAppRunner.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|5843|0x8ce
0|17|xul.dll|XRE_main(int, char**, mozilla::BootstrapConfig const&)|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsAppRunner.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|5899|0x97
0|18|firefox.exe|NS_internal_main(int, char**, char**)|hg:hg.mozilla.org/mozilla-central:browser/app/nsBrowserApp.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|423|0x42c
0|19|firefox.exe|wmain(int, wchar_t**)|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsWindowsWMain.cpp:1a6c81eba852843665fa42d8e30bbb9e7fe890ba|167|0x2dc
0|20|firefox.exe|__scrt_common_main_seh()|/builds/worker/workspace/obj-build/browser/app/d:/agent/_work/2/s/src/vctools/crt/vcstartup/src/startup/exe_common.inl|288|0x10b
0|21|kernel32.dll||||
0|22|ntdll.dll||||
0|23|KERNELBASE.dll||||

Comment 1

[Tyson Smith [:tsmith]]

Seems to only be happening on Windows. Marking as fuzzblocker.

Alastor, I'm not sure where to start, is this a media issue?

Comment 2

[Alastor Wu [:alwu]]

Yes, thank for reporting this issue.

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

This bug prevents fuzzing from making progress; however, it has low severity. It is important for fuzz blocker bugs to be addressed in a timely manner (see here why?).
:jimm, could you increase the severity?

For more information, please visit auto_nag documentation.

Comment 4

[Jim Mathies [:jimm]]

This work is currently not shipping. We'll look into it when we have a chance.