Status

()

RESOLVED INCOMPLETE
6 years ago
6 years ago

People

(Reporter: ekr, Unassigned)

Tracking

({crash})

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [WebRTC] [blocking-webrtc-])

(Reporter)

Description

6 years ago
I saw this during testing but have not investigated.

0x000000010001d55d in malloc_rtree_get_locked (rtree=0x100201080, key=4782555136) at /Users/ekr/dev/mozilla-inbound/memory/mozjemalloc/jemalloc.c:2575
(gdb) bt
#0  0x000000010001d55d in malloc_rtree_get_locked (rtree=0x100201080, key=4782555136) at /Users/ekr/dev/mozilla-inbound/memory/mozjemalloc/jemalloc.c:2575
#1  0x000000010001cfdd in malloc_rtree_get (rtree=0x100201080, key=4782555136) at /Users/ekr/dev/mozilla-inbound/memory/mozjemalloc/jemalloc.c:2598
#2  0x0000000100015576 in isalloc_validate (ptr=0x11d1b1928) at /Users/ekr/dev/mozilla-inbound/memory/mozjemalloc/jemalloc.c:4458
#3  0x00000001000190de in ozone_free_definite_size (zone=0x100057000, ptr=0x11d1b1928, size=8) at /Users/ekr/dev/mozilla-inbound/memory/mozjemalloc/jemalloc.c:7061
#4  0x00000001042aec30 in webrtc::RTPFragmentationHeader::~RTPFragmentationHeader (this=0x14b100288) at module_common_types.h:144
#5  0x00000001042aeb85 in webrtc::RTPFragmentationHeader::~RTPFragmentationHeader (this=0x14b100288) at module_common_types.h:140
#6  0x00000001043e48b7 in webrtc::RtpFormatVp8::~RtpFormatVp8 (this=0x14b100278) at rtp_format_vp8.h:47
#7  0x00000001043e4875 in webrtc::RtpFormatVp8::~RtpFormatVp8 (this=0x14b100278) at rtp_format_vp8.h:47
#8  0x00000001043e46c6 in webrtc::RTPSenderVideo::SendVP8 (this=0x12a121800, frameType=webrtc::kVideoFrameDelta, payloadType=100 'd', captureTimeStamp=1189005862, capture_time_ms=394986047, payloadData=0x14807d000 "1G", payloadSize=1251, fragmentation=0x14b100948, rtpTypeHdr=0x14b100874) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/modules/rtp_rtcp/source/rtp_sender_video.cc:468
#9  0x00000001043e3fbb in webrtc::RTPSenderVideo::SendVideo (this=0x12a121800, videoType=webrtc::kRtpVp8Video, frameType=webrtc::kVideoFrameDelta, payloadType=100 'd', captureTimeStamp=1189005862, capture_time_ms=394986047, payloadData=0x14807d000 "1G", payloadSize=1251, fragmentation=0x14b100948, codecInfo=0x0, rtpTypeHdr=0x14b100874) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/modules/rtp_rtcp/source/rtp_sender_video.cc:293
#10 0x00000001043c879d in webrtc::RTPSender::SendOutgoingData (this=0x1480ee008, frame_type=webrtc::kVideoFrameDelta, payload_type=100 'd', capture_timestamp=1189005862, capture_time_ms=394986047, payload_data=0x14807d000 "1G", payload_size=1251, fragmentation=0x14b100948, codec_info=0x0, rtp_type_hdr=0x14b100874) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/modules/rtp_rtcp/source/rtp_sender.cc:507
#11 0x00000001043a525b in webrtc::ModuleRtpRtcpImpl::SendOutgoingData (this=0x147e60000, frameType=webrtc::kVideoFrameDelta, payloadType=100 'd', timeStamp=1189005862, capture_time_ms=394986047, payloadData=0x14807d000 "1G", payloadSize=1251, fragmentation=0x14b100948, rtpVideoHdr=0x14b100868) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/modules/rtp_rtcp/source/rtp_rtcp_impl.cc:877
#12 0x0000000104383e0e in webrtc::ViEEncoder::SendData (this=0x12aa2cf20, frame_type=webrtc::kVideoFrameDelta, payload_type=100 'd', time_stamp=1189005862, capture_time_ms=394986047, payload_data=0x14807d000 "1G", payload_size=1251, fragmentation_header=@0x14b100948, rtp_video_hdr=0x14b100868) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/video_engine/vie_encoder.cc:713
#13 0x0000000104383e9a in non-virtual thunk to webrtc::ViEEncoder::SendData(webrtc::FrameType, unsigned char, unsigned int, long long, unsigned char const*, unsigned int, webrtc::RTPFragmentationHeader const&, webrtc::RTPVideoHeader const*) () at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/video_engine/vie_encoder.cc:721
#14 0x000000010432f98b in webrtc::VCMEncodedFrameCallback::Encoded (this=0x148fff628, encodedImage=@0x11fef9428, codecSpecificInfo=0x14b100920, fragmentationHeader=0x14b100948) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/modules/video_coding/main/source/generic_encoder.cc:199
#15 0x000000010434a44d in webrtc::VP8Encoder::GetEncodedPartitions (this=0x11fef9420, input_image=@0x12a1220d8) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/modules/video_coding/codecs/vp8/vp8.cc:556
#16 0x000000010434a070 in webrtc::VP8Encoder::Encode (this=0x11fef9420, input_image=@0x12a1220d8, codec_specific_info=0x14b100bc0, frame_type=webrtc::kDeltaFrame) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/modules/video_coding/codecs/vp8/vp8.cc:395
#17 0x000000010432f4bc in webrtc::VCMGenericEncoder::Encode (this=0x1210d1d00, inputFrame=@0x12a1220d8, codecSpecificInfo=0x14b100bc0, frameType=webrtc::kVideoFrameDelta) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/modules/video_coding/main/source/generic_encoder.cc:64
#18 0x00000001043464a7 in webrtc::VideoCodingModuleImpl::AddVideoFrame (this=0x148ffd000, videoFrame=@0x12a1220d8, contentMetrics=0x0, codecSpecificInfo=0x14b100bc0) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/modules/video_coding/main/source/video_coding_impl.cc:680
#19 0x00000001043830f0 in webrtc::ViEEncoder::DeliverFrame (this=0x12aa2cf20, id=4097, video_frame=0x12a1220d8, num_csrcs=0, CSRC=0x0) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/video_engine/vie_encoder.cc:519
#20 0x0000000104383343 in non-virtual thunk to webrtc::ViEEncoder::DeliverFrame(int, webrtc::VideoFrame*, int, unsigned int const*) () at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/video_engine/vie_encoder.cc:553
#21 0x0000000104388ca6 in webrtc::ViEFrameProviderBase::DeliverFrame (this=0x12a122000, video_frame=0x12a1220d8, num_csrcs=0, CSRC=0x0) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/video_engine/vie_frame_provider_base.cc:61
#22 0x000000010436b05b in webrtc::ViECapturer::DeliverI420Frame (this=0x12a122000, video_frame=0x12a1220d8) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/video_engine/vie_capturer.cc:607
#23 0x000000010436ac06 in webrtc::ViECapturer::ViECaptureProcess (this=0x12a122000) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/video_engine/vie_capturer.cc:541
#24 0x0000000104368ae5 in webrtc::ViECapturer::ViECaptureThreadFunction (obj=0x12a122000) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/video_engine/vie_capturer.cc:529
#25 0x0000000104321d63 in webrtc::ThreadPosix::Run (this=0x127b87180) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/system_wrappers/source/thread_posix.cc:361
#26 0x0000000104321ab5 in StartThread (lpParameter=0x127b87180) at /Users/ekr/dev/mozilla-inbound/media/webrtc/trunk/src/system_wrappers/source/thread_posix.cc:72
#27 0x00007fff85485fd6 in _pthread_start ()
#28 0x00007fff85485e89 in thread_start ()
I got nothing.  I'd guess freed-memory corruption from elsewhere, or *maybe* buffer-overrun, but I doubt that.
(Reporter)

Comment 2

6 years ago
OK, if I find a good repro case I will run under ASAN and try to figure it out
Whiteboard: waiting to reproduce
blocking- unless/until we repro this, or have more info/ideas

Derf (and mreavy) should be on this bug.
Whiteboard: waiting to reproduce → [WebRTC] [blocking-webrtc-]
(Reporter)

Comment 4

6 years ago
I believe jesup@c1 is right. Suggest we close this.
Group: core-security
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Keywords: crash
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.