Opus crash illegal instruction [@ncwrs_urow]

VERIFIED FIXED

Status

()

Core
Audio/Video
--
critical
VERIFIED FIXED
6 years ago
2 years ago

People

(Reporter: posidron, Unassigned)

Tracking

(Blocks: 1 bug, {crash, sec-high, testcase})

Trunk
x86_64
Mac OS X
crash, sec-high, testcase
Points:
---

Firefox Tracking Flags

(firefox-esr10 unaffected)

Details

(Whiteboard: [asan])

Attachments

(2 attachments)

(Reporter)

Description

6 years ago
Created attachment 629478 [details]
testcase

Original sample is: shinjuku.uncoupled.opus


828260352[1446dfe80]: 1446ffa80 Decoding Media Headers
828260352[1446dfe80]: Opus stream header:
828260352[1446dfe80]:  channels: 2
828260352[1446dfe80]:   preskip: 356
828260352[1446dfe80]:  original: 44100 Hz
828260352[1446dfe80]:      gain: 0,00 dB
828260352[1446dfe80]: Channel Mapping:
828260352[1446dfe80]:    family: 1
828260352[1446dfe80]:   streams: 2
828260352[1446dfe80]: WARNING: Invalid Opus packet.: file /Users/cdiehl/Code/Mozilla/mc-asan/content/media/ogg/nsOggCodecState.cpp, line 1015
WARNING: Invalid Opus packet.: file /Users/cdiehl/Code/Mozilla/mc-asan/content/media/ogg/nsOggCodecState.cpp, line 1015
828260352[1446dfe80]: WARNING: Invalid Opus packet.: file /Users/cdiehl/Code/Mozilla/mc-asan/content/media/ogg/nsOggCodecState.cpp, line 1015
WARNING: Invalid Opus packet.: file /Users/cdiehl/Code/Mozilla/mc-asan/content/media/ogg/nsOggCodecState.cpp, line 1015
828260352[1446dfe80]: WARNING: Invalid Opus packet.: file /Users/cdiehl/Code/Mozilla/mc-asan/content/media/ogg/nsOggCodecState.cpp, line 1015
WARNING: Invalid Opus packet.: file /Users/cdiehl/Code/Mozilla/mc-asan/content/media/ogg/nsOggCodecState.cpp, line 1015
828260352[1446dfe80]: WARNING: Invalid Opus packet.: file /Users/cdiehl/Code/Mozilla/mc-asan/content/media/ogg/nsOggCodecState.cpp, line 1015
WARNING: Invalid Opus packet.: file /Users/cdiehl/Code/Mozilla/mc-asan/content/media/ogg/nsOggCodecState.cpp, line 1015
828260352[1446dfe80]: Opus decoder init, to skip 356
828260352[1446dfe80]: Got Ogg duration from seeking to end 9380875
828260352[1446dfe80]: Opus decoder skipping 356 frames
828260352[1446dfe80]: Opus decoder pushing 604 frames
828260352[1446dfe80]: 1446ffa80 Media start time is 50000
828260352[1446dfe80]: 1446ffa80 Media goes from 50000 to 9380875 (duration 9330875) seekable=1
828260352[1446dfe80]: 1446ffa80 Changed state from DECODING_METADATA to DECODING
828260352[1446dfe80]: 1446ffa80 Start DecodeLoop()
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
828260352[1446dfe80]: Opus decoder pushing 960 frames
Illegal instruction: 4
(Reporter)

Updated

6 years ago
Attachment #629478 - Attachment description: audio/ogg → testcase
Attachment #629478 - Attachment mime type: text/plain → audio/ogg
(Reporter)

Comment 1

6 years ago
Created attachment 629479 [details]
callstack
(Reporter)

Comment 2

6 years ago
Fixed by provided patch in bug 750231
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
(Reporter)

Updated

6 years ago
Status: RESOLVED → VERIFIED

Updated

6 years ago
status-firefox-esr10: --- → unaffected

Updated

3 years ago
Group: core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.