Open
Bug 2008491
Opened 9 months ago
Updated 9 months ago
AssertedCast error: Cannot cast 6054900614474205447 from int64_t to int32_t: out of range
Categories
(Core :: Audio/Video: Playback, defect, P3)
Core
Audio/Video: Playback
Tracking
()
NEW
| Tracking | Status | |
|---|---|---|
| firefox148 | --- | affected |
People
(Reporter: tsmith, Unassigned)
References
(Blocks 1 open bug, )
Details
(Keywords: assertion, pernosco)
Found with m-c 20260103-bd631654e320 (--enable-debug)
This was found by visiting a live website with a debug build. I'm marking this as s-s until it can be investigated.
STR:
- Launch browser and visit site
This issue was triggered by visiting https://days.pravoslavie.ru/Days/20260101.html. A Pernosco session is available here: https://pernos.co/debug/O1X4UGBhRMrbrUnY8YR8rQ/index.html
AssertedCast error: Cannot cast 6054900614474205447 from int64_t to int32_t: out of range
32|0|libxul.so|mozilla::readAndConvertToInt<long>(mozilla::BufferReader*)|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3FrameParser.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|473|0x12c
32|1|libxul.so|mozilla::FrameParser::VBRHeader::ParseVBRI(mozilla::BufferReader*)|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3FrameParser.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|537|0x433
32|2|libxul.so|mozilla::FrameParser::VBRHeader::Parse(mozilla::BufferReader*, unsigned long)|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3FrameParser.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|575|0x31
32|3|libxul.so|mozilla::MP3TrackDemuxer::GetNextFrame(mozilla::media::Interval<long> const&)|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3Demuxer.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|655|0x240
32|4|libxul.so|mozilla::MP3TrackDemuxer::Init()|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3Demuxer.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|103|0x6a
32|5|libxul.so|mozilla::MP3Demuxer::InitInternal()|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3Demuxer.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|41|0xe4
32|6|libxul.so|mozilla::MP3Demuxer::Init()|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3Demuxer.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|45|0x14
32|7|libxul.so|mozilla::detail::ProxyFunctionRunnable<mozilla::MediaFormatReader::DemuxerProxy::Init()::$_2, mozilla::MozPromise<mozilla::MediaResult, mozilla::MediaResult, false> >::Run()|git:github.com/mozilla-firefox/firefox:xpcom/threads/MozPromise.h:acc5651bb965d06857ba179ffffc95fc84770c77|1838|0x53
32|8|libxul.so|mozilla::TaskQueue::Runner::Run()|git:github.com/mozilla-firefox/firefox:xpcom/threads/TaskQueue.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|263|0x2d7
32|9|libxul.so|nsThreadPool::Run()|git:github.com/mozilla-firefox/firefox:xpcom/threads/nsThreadPool.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|441|0x7ee
32|10|libxul.so|nsThread::ProcessNextEvent(bool, bool*)|git:github.com/mozilla-firefox/firefox:xpcom/threads/nsThread.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|1158|0x794
32|11|libxul.so|NS_ProcessNextEvent(nsIThread*, bool)|git:github.com/mozilla-firefox/firefox:xpcom/threads/nsThreadUtils.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|461|0x4f
32|12|libxul.so|mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*)|git:github.com/mozilla-firefox/firefox:ipc/glue/MessagePump.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|299|0xc6
32|13|libxul.so|MessageLoop::Run()|git:github.com/mozilla-firefox/firefox:ipc/chromium/src/base/message_loop.cc:acc5651bb965d06857ba179ffffc95fc84770c77|343|0x61
32|14|libxul.so|nsThread::ThreadFunc(void*)|git:github.com/mozilla-firefox/firefox:xpcom/threads/nsThread.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|373|0x1be
32|15|libnspr4.so|_pt_root|git:github.com/mozilla-firefox/firefox:nsprpub/pr/src/pthreads/ptthread.c:acc5651bb965d06857ba179ffffc95fc84770c77|191|0x18c
32|16|firefox-bin|set_alt_signal_stack_and_start(PthreadCreateParams*)|git:github.com/mozilla-firefox/firefox:mozglue/interposers/pthread_create_interposer.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|81|0x10c
Updated•9 months ago
|
Keywords: csectype-undefined
Updated•9 months ago
|
Group: media-core-security
Keywords: csectype-undefined
Updated•9 months ago
|
Severity: -- → S3
Priority: -- → P3
You need to log in
before you can comment on or make changes to this bug.
Description
•