SEGV on mozilla::AudioChannelsDownMix

RESOLVED DUPLICATE of bug 876215

Status

()

Core
Audio/Video
RESOLVED DUPLICATE of bug 876215
4 years ago
4 years ago

People

(Reporter: Atte Kettunen, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [sg:dupe 876215])

Attachments

(1 attachment)

(Reporter)

Description

4 years ago
Created attachment 755281 [details]
Repro-file

Tested on:

OS: Ubuntu 12.04

Firefox: ASAN opt-build from https://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-central-linux64-asan/1369790612/



ASAN-report:

=================================================================
==30039== ERROR: AddressSanitizer: SEGV on unknown address 0x7f13a5351efc (pc 0x7f0fa0613336 sp 0x7f0f795de300 bp 0x7f0f795de3f0 T28)
AddressSanitizer can not provide additional info.
    #0 0x7f0fa0613335 in mozilla::AudioChannelsDownMix(nsTArray<void const*> const&, float**, unsigned int, unsigned int) /builds/slave/m-cen-l64-asan-000000000000000/build/content/media/AudioChannelFormat.cpp:175
    #1 0x7f0fa06170b7 in mozilla::AudioNodeStream::ObtainInputBlock(mozilla::AudioChunk&, unsigned int) /builds/slave/m-cen-l64-asan-000000000000000/build/content/media/AudioNodeStream.cpp:355
    #2 0x7f0fa0618385 in mozilla::AudioNodeStream::ProduceOutput(long, long) /builds/slave/m-cen-l64-asan-000000000000000/build/content/media/AudioNodeStream.cpp:421
    #3 0x7f0fa06862d2 in mozilla::AudioNodeStream::SampleRate() const /builds/slave/m-cen-l64-asan-000000000000000/build/content/media/MediaStreamGraph.cpp:937
    #4 0x7f0fa0698815 in mozilla::(anonymous namespace)::MediaStreamGraphThreadRunnable::Run() /builds/slave/m-cen-l64-asan-000000000000000/build/content/media/MediaStreamGraph.cpp:1184
    #5 0x7f0fa2d6c432 in NS_ProcessNextEvent(nsIThread*, bool) /builds/slave/m-cen-l64-asan-000000000000000/build/obj-firefox/xpcom/build/nsThreadUtils.cpp:238
.
.
.
This is not reproducible anymore.

Tested with m-i changeset: 133183:1c67a51e0fe5
(Reporter)

Comment 2

4 years ago
Reproduces for me on m-c changeset: 133192:e58336e81395 

I'll let you know if this reproduces after next merge.

Updated

4 years ago
Attachment #755281 - Attachment mime type: text/plain → text/html

Comment 3

4 years ago
Dupe of bug 876215.
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 876215
Group: core-security
Whiteboard: [sg:dupe 876215]
You need to log in before you can comment on or make changes to this bug.