Open Bug 1872263 Opened 2 years ago Updated 1 years ago

Crash in [@ std::less<T>::operator()] (via mozilla::PRemoteDecoderChild::OnMessageReceived(IPC::Message const&) )

Categories

(Core :: Audio/Video, defect)

Product:
Core
Component:
Audio/Video
Platform:
Desktop
Linux
Type:
defect

Tracking

()

Status:
UNCONFIRMED

People

(Reporter: merlino37, Unassigned)

Details

Crash report: https://crash-stats.mozilla.org/report/index/a86f6547-19ee-48de-81ff-31c1c0231130

Reason: SIGSEGV / SI_KERNEL

Top 10 frames of crashing thread:

0  libxul.so  std::less<unsigned long>::operator const  /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/include/c++/8/bits/stl_function.h:386
0  libxul.so  std::_Rb_tree<unsigned long, std::pair<unsigned long const, mozilla::UniquePtr<mozilla::ipc::MessageChannel::UntypedCallbackHolder, mozilla::DefaultDelete<mozilla::ipc::MessageChannel::UntypedCallbackHolder> > >, std::_Select1st<std::pair<unsigned long const, mozilla::UniquePtr<mozilla::ipc::MessageChannel::UntypedCallbackHolder, mozilla::DefaultDelete<mozilla::ipc::MessageChannel::UntypedCallbackHolder> > > >, std::less<unsigned long>, std::allocator<std::pair<unsigned long const, mozilla::UniquePtr<mozilla::ipc::MessageChannel::UntypedCallbackHolder, mozilla::DefaultDelete<mozilla::ipc::MessageChannel::UntypedCallbackHolder> > > > >::_M_lower_bound  /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/include/c++/8/bits/stl_tree.h:1895
0  libxul.so  std::_Rb_tree<unsigned long, std::pair<unsigned long const, mozilla::UniquePtr<mozilla::ipc::MessageChannel::UntypedCallbackHolder, mozilla::DefaultDelete<mozilla::ipc::MessageChannel::UntypedCallbackHolder> > >, std::_Select1st<std::pair<unsigned long const, mozilla::UniquePtr<mozilla::ipc::MessageChannel::UntypedCallbackHolder, mozilla::DefaultDelete<mozilla::ipc::MessageChannel::UntypedCallbackHolder> > > >, std::less<unsigned long>, std::allocator<std::pair<unsigned long const, mozilla::UniquePtr<mozilla::ipc::MessageChannel::UntypedCallbackHolder, mozilla::DefaultDelete<mozilla::ipc::MessageChannel::UntypedCallbackHolder> > > > >::find  /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/include/c++/8/bits/stl_tree.h:2546
0  libxul.so  std::map<unsigned long, mozilla::UniquePtr<mozilla::ipc::MessageChannel::UntypedCallbackHolder, mozilla::DefaultDelete<mozilla::ipc::MessageChannel::UntypedCallbackHolder> >, std::less<unsigned long>, std::allocator<std::pair<unsigned long const, mozilla::UniquePtr<mozilla::ipc::MessageChannel::UntypedCallbackHolder, mozilla::DefaultDelete<mozilla::ipc::MessageChannel::UntypedCallbackHolder> > > > >::find  /builds/worker/fetches/sysroot-x86_64-linux-gnu/usr/include/c++/8/bits/stl_map.h:1169
0  libxul.so  mozilla::ipc::MessageChannel::PopCallback  ipc/glue/MessageChannel.cpp:825
0  libxul.so  mozilla::PRemoteDecoderChild::OnMessageReceived  ipc/ipdl/PRemoteDecoderChild.cpp:545
1  libxul.so  mozilla::PRemoteDecoderManagerChild::OnMessageReceived  ipc/ipdl/PRemoteDecoderManagerChild.cpp:348
2  libxul.so  mozilla::ipc::MessageChannel::DispatchAsyncMessage  ipc/glue/MessageChannel.cpp:1800
2  libxul.so  mozilla::ipc::MessageChannel::DispatchMessage  ipc/glue/MessageChannel.cpp:1725
2  libxul.so  mozilla::ipc::MessageChannel::RunMessage  ipc/glue/MessageChannel.cpp:1525

not reproducible

Component: General → Audio/Video
Product: Firefox → Core
Summary: Crash in [@ std::less<T>::operator()] → Crash in [@ std::less<T>::operator()] (via mozilla::PRemoteDecoderChild::OnMessageReceived(IPC::Message const&) )

The severity field is not set for this bug.
:jimm, could you have a look please?

For more information, please visit BugBot documentation.

Flags: needinfo?(jmathies)

the bug requires a hard reboot...

Severity: -- → S3
Flags: needinfo?(jmathies)
OS: Unspecified → Linux
Hardware: Unspecified → Desktop
You need to log in before you can comment on or make changes to this bug.