Opus crash illegal instruction [@ec_decode]

VERIFIED FIXED

Status

()

defect
--
critical
VERIFIED FIXED
7 years ago
3 years ago

People

(Reporter: posidron, Unassigned)

Tracking

({crash, sec-high, testcase})

Trunk
x86_64
macOS
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(firefox-esr10 unaffected)

Details

(Whiteboard: [asan])

Attachments

(2 attachments)

Posted audio testcase
The testcase is an unmodified sample of testvector10.bit.opus

894062592[1339b4280]: 1339e2a80 Decoding Media Headers
894062592[1339b4280]: Opus stream header:
894062592[1339b4280]:  channels: 2
894062592[1339b4280]:   preskip: 0
894062592[1339b4280]:  original: 0 Hz
894062592[1339b4280]:      gain: 0,00 dB
894062592[1339b4280]: Channel Mapping:
894062592[1339b4280]:    family: 0
894062592[1339b4280]:   streams: 1
894062592[1339b4280]: Opus decoder init, to skip 0
894062592[1339b4280]: Got Ogg duration from seeking to end 32000000
++DOMWINDOW == 12 (0x132591d00) [serial = 12] [outer = 0x132892c80]
894062592[1339b4280]: Opus decoder pushing 960 frames
894062592[1339b4280]: 1339e2a80 Media start time is 0
894062592[1339b4280]: 1339e2a80 Media goes from 0 to 32000000 (duration 32000000) seekable=1
894062592[1339b4280]: 1339e2a80 Changed state from DECODING_METADATA to DECODING
894062592[1339b4280]: 1339e2a80 Start DecodeLoop()
894062592[1339b4280]: Opus decoder pushing 480 frames
894062592[1339b4280]: Opus decoder pushing 960 frames
894062592[1339b4280]: Opus decoder pushing 240 frames
894062592[1339b4280]: Opus decoder pushing 960 frames
894062592[1339b4280]: Opus decoder pushing 120 frames
894062592[1339b4280]: Opus decoder pushing 480 frames
894062592[1339b4280]: Opus decoder pushing 240 frames
894062592[1339b4280]: Opus decoder pushing 480 frames
894062592[1339b4280]: Opus decoder pushing 120 frames
894062592[1339b4280]: Opus decoder pushing 240 frames
894062592[1339b4280]: Opus decoder pushing 120 frames
894062592[1339b4280]: Opus decoder pushing 1920 frames
894062592[1339b4280]: Opus decoder pushing 960 frames
894062592[1339b4280]: Opus decoder pushing 960 frames
894062592[1339b4280]: Opus decoder pushing 960 frames
894062592[1339b4280]: Opus decoder pushing 480 frames
894062592[1339b4280]: Opus decoder pushing 960 frames
894062592[1339b4280]: Opus decoder pushing 960 frames
894062592[1339b4280]: Opus decoder pushing 120 frames
894062592[1339b4280]: Opus decoder pushing 120 frames
894062592[1339b4280]: Opus decoder pushing 960 frames
894062592[1339b4280]: Opus decoder pushing 480 frames
894062592[1339b4280]: Opus decoder pushing 960 frames
894062592[1339b4280]: Opus decoder pushing 240 frames
894062592[1339b4280]: Opus decoder pushing 240 frames
894062592[1339b4280]: Opus decoder pushing 240 frames
894062592[1339b4280]: Opus decoder pushing 240 frames
894062592[1339b4280]: Opus decoder pushing 1920 frames
894062592[1339b4280]: Opus decoder pushing 960 frames
894062592[1339b4280]: Opus decoder pushing 960 frames
894062592[1339b4280]: Opus decoder pushing 960 frames
894062592[1339b4280]: Opus decoder pushing 240 frames
894062592[1339b4280]: Opus decoder pushing 240 frames
894062592[1339b4280]: Opus decoder pushing 4800 frames
894062592[1339b4280]: Opus decoder pushing 1920 frames
894062592[1339b4280]: Opus decoder pushing 4800 frames
894062592[1339b4280]: Opus decoder pushing 1920 frames
894062592[1339b4280]: Opus decoder pushing 960 frames
Posted file callstack
Fixed by provided patch in bug 750231
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Status: RESOLVED → VERIFIED
Group: core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.