Open Bug 2008491 Opened 9 months ago Updated 9 months ago

AssertedCast error: Cannot cast 6054900614474205447 from int64_t to int32_t: out of range

Categories

(Core :: Audio/Video: Playback, defect, P3)

defect

Tracking

()

Tracking Status
firefox148 --- affected

People

(Reporter: tsmith, Unassigned)

References

(Blocks 1 open bug, )

Details

(Keywords: assertion, pernosco)

Found with m-c 20260103-bd631654e320 (--enable-debug)

This was found by visiting a live website with a debug build. I'm marking this as s-s until it can be investigated.

STR:

  • Launch browser and visit site

This issue was triggered by visiting https://days.pravoslavie.ru/Days/20260101.html. A Pernosco session is available here: https://pernos.co/debug/O1X4UGBhRMrbrUnY8YR8rQ/index.html

AssertedCast error: Cannot cast 6054900614474205447 from int64_t to int32_t: out of range

32|0|libxul.so|mozilla::readAndConvertToInt<long>(mozilla::BufferReader*)|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3FrameParser.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|473|0x12c
32|1|libxul.so|mozilla::FrameParser::VBRHeader::ParseVBRI(mozilla::BufferReader*)|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3FrameParser.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|537|0x433
32|2|libxul.so|mozilla::FrameParser::VBRHeader::Parse(mozilla::BufferReader*, unsigned long)|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3FrameParser.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|575|0x31
32|3|libxul.so|mozilla::MP3TrackDemuxer::GetNextFrame(mozilla::media::Interval<long> const&)|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3Demuxer.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|655|0x240
32|4|libxul.so|mozilla::MP3TrackDemuxer::Init()|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3Demuxer.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|103|0x6a
32|5|libxul.so|mozilla::MP3Demuxer::InitInternal()|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3Demuxer.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|41|0xe4
32|6|libxul.so|mozilla::MP3Demuxer::Init()|git:github.com/mozilla-firefox/firefox:dom/media/mp3/MP3Demuxer.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|45|0x14
32|7|libxul.so|mozilla::detail::ProxyFunctionRunnable<mozilla::MediaFormatReader::DemuxerProxy::Init()::$_2, mozilla::MozPromise<mozilla::MediaResult, mozilla::MediaResult, false> >::Run()|git:github.com/mozilla-firefox/firefox:xpcom/threads/MozPromise.h:acc5651bb965d06857ba179ffffc95fc84770c77|1838|0x53
32|8|libxul.so|mozilla::TaskQueue::Runner::Run()|git:github.com/mozilla-firefox/firefox:xpcom/threads/TaskQueue.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|263|0x2d7
32|9|libxul.so|nsThreadPool::Run()|git:github.com/mozilla-firefox/firefox:xpcom/threads/nsThreadPool.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|441|0x7ee
32|10|libxul.so|nsThread::ProcessNextEvent(bool, bool*)|git:github.com/mozilla-firefox/firefox:xpcom/threads/nsThread.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|1158|0x794
32|11|libxul.so|NS_ProcessNextEvent(nsIThread*, bool)|git:github.com/mozilla-firefox/firefox:xpcom/threads/nsThreadUtils.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|461|0x4f
32|12|libxul.so|mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*)|git:github.com/mozilla-firefox/firefox:ipc/glue/MessagePump.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|299|0xc6
32|13|libxul.so|MessageLoop::Run()|git:github.com/mozilla-firefox/firefox:ipc/chromium/src/base/message_loop.cc:acc5651bb965d06857ba179ffffc95fc84770c77|343|0x61
32|14|libxul.so|nsThread::ThreadFunc(void*)|git:github.com/mozilla-firefox/firefox:xpcom/threads/nsThread.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|373|0x1be
32|15|libnspr4.so|_pt_root|git:github.com/mozilla-firefox/firefox:nsprpub/pr/src/pthreads/ptthread.c:acc5651bb965d06857ba179ffffc95fc84770c77|191|0x18c
32|16|firefox-bin|set_alt_signal_stack_and_start(PthreadCreateParams*)|git:github.com/mozilla-firefox/firefox:mozglue/interposers/pthread_create_interposer.cpp:acc5651bb965d06857ba179ffffc95fc84770c77|81|0x10c
Group: media-core-security
Severity: -- → S3
Priority: -- → P3
You need to log in before you can comment on or make changes to this bug.