Closed Bug 1419325 Opened 7 years ago Closed 6 years ago

SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/clang/bin/../lib/gcc/x86_64-unknown-linux-gnu/4.9.4/../../../../include/c++/4.9.4/bits/atomic_base.h:628:16 in fetch_sub

Categories

(Core :: WebRTC: Audio/Video, defect, P1)

Product:
Core
Component:
WebRTC: Audio/Video
Type:
defect

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla65
Tracking Flags:
Tracking Status
firefox-esr60 --- wontfix
firefox59 --- wontfix

People

(Reporter: aryx, Assigned: bwc)

References

(Blocks 1 open bug)

Details

(Keywords: csectype-uaf, sec-high)

https://treeherder.mozilla.org/logviewer.html#?job_id=146322097&repo=mozilla-inbound [task 2017-11-21T06:11:31.358Z] 06:11:31 INFO - TEST-START | Shutdown [task 2017-11-21T06:11:31.359Z] 06:11:31 INFO - Passed: 26269 [task 2017-11-21T06:11:31.360Z] 06:11:31 INFO - Failed: 0 [task 2017-11-21T06:11:31.361Z] 06:11:31 INFO - Todo: 1715 [task 2017-11-21T06:11:31.362Z] 06:11:31 INFO - Mode: e10s [task 2017-11-21T06:11:31.363Z] 06:11:31 INFO - Slowest: 52405ms - /tests/dom/media/tests/mochitest/test_peerConnection_scaleResolution.html [task 2017-11-21T06:11:31.384Z] 06:11:31 INFO - SimpleTest FINISHED [task 2017-11-21T06:11:31.385Z] 06:11:31 INFO - TEST-INFO | Ran 1 Loops [task 2017-11-21T06:11:31.386Z] 06:11:31 INFO - SimpleTest FINISHED [task 2017-11-21T06:11:31.788Z] 06:11:31 INFO - GECKO(3110) | ###!!! [Child][MessageChannel] Error: (msgtype=0x760007,name=PTCPSocket::Msg_Close) Closed channel: cannot send/recv [task 2017-11-21T06:11:31.789Z] 06:11:31 INFO - GECKO(3110) | ###!!! [Child][MessageChannel] Error: (msgtype=0x760007,name=PTCPSocket::Msg_Close) Closed channel: cannot send/recv [task 2017-11-21T06:11:31.790Z] 06:11:31 INFO - GECKO(3110) | ###!!! [Child][MessageChannel] Error: (msgtype=0x760007,name=PTCPSocket::Msg_Close) Closed channel: cannot send/recv [task 2017-11-21T06:11:31.790Z] 06:11:31 INFO - GECKO(3110) | ###!!! [Child][MessageChannel] Error: (msgtype=0x760007,name=PTCPSocket::Msg_Close) Closed channel: cannot send/recv [task 2017-11-21T06:11:31.794Z] 06:11:31 INFO - GECKO(3110) | ###!!! [Child][MessageChannel] Error: (msgtype=0x760007,name=PTCPSocket::Msg_Close) Closed channel: cannot send/recv [task 2017-11-21T06:11:31.797Z] 06:11:31 INFO - GECKO(3110) | ###!!! [Child][MessageChannel] Error: (msgtype=0x760007,name=PTCPSocket::Msg_Close) Closed channel: cannot send/recv [task 2017-11-21T06:11:31.799Z] 06:11:31 INFO - GECKO(3110) | ###!!! [Child][MessageChannel] Error: (msgtype=0x760007,name=PTCPSocket::Msg_Close) Closed channel: cannot send/recv [task 2017-11-21T06:11:31.801Z] 06:11:31 INFO - GECKO(3110) | [Main Thread]: D/DataChannel Shutting down SCTP [task 2017-11-21T06:11:31.802Z] 06:11:31 INFO - GECKO(3110) | ###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost [task 2017-11-21T06:11:31.819Z] 06:11:31 INFO - GECKO(3110) | [Main Thread]: I/signaling [main|MediaPipeline] MediaPipeline.cpp:1823: MediaPipeline::NotifyDirectListenerUninstalled() listener=0x60c000631000 [task 2017-11-21T06:11:31.840Z] 06:11:31 INFO - GECKO(3110) | ================================================================= [task 2017-11-21T06:11:31.842Z] 06:11:31 ERROR - GECKO(3110) | ==3161==ERROR: AddressSanitizer: heap-use-after-free on address 0x6150012b7200 at pc 0x7fcfb7393d3f bp 0x7fffc77f0e10 sp 0x7fffc77f0e08 [task 2017-11-21T06:11:31.843Z] 06:11:31 INFO - GECKO(3110) | WRITE of size 4 at 0x6150012b7200 thread T0 (Web Content) [task 2017-11-21T06:11:31.861Z] 06:11:31 INFO - GECKO(3110) | ###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost [task 2017-11-21T06:11:31.919Z] 06:11:31 INFO - GECKO(3110) | ###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost [task 2017-11-21T06:11:32.016Z] 06:11:32 INFO - GECKO(3110) | (ice/ERR) ICE(PC:1511244555277819 (id=2147484024 url=http://mochi.test:8888/tests/dom/media/tests/mochitest/test_peerConnection_scaleResolution.)/STREAM(0-1511244555277819 (id=2147484024 url=http://mochi.test:8888/tests/dom/media/tests/mochitest/test_peerConnection_scaleResolution. aLevel=0)/COMP(1): Refresh consent failed with 3 [task 2017-11-21T06:11:32.407Z] 06:11:32 INFO - GECKO(3110) | [Socket Thread]: E/mtransport Couldn't send media on '0-1511244555266676 (id=2147484024 url=http://mochi.test:8888/tests/dom/media/tests/mochitest/test_peerConnection_scaleResolution. aLevel=0' [task 2017-11-21T06:11:32.407Z] 06:11:32 INFO - GECKO(3110) | [Socket Thread]: E/signaling [Socket Thread|MediaPipeline] MediaPipeline.cpp:967: Failed write on stream aecfa475da384f77| Transmit video[{3bf5d496-3e4f-4c7f-bed8-60e8b7da23ad}] [task 2017-11-21T06:11:32.590Z] 06:11:32 INFO - GECKO(3110) | #0 0x7fcfb7393d3e in fetch_sub /builds/worker/workspace/build/src/clang/bin/../lib/gcc/x86_64-unknown-linux-gnu/4.9.4/../../../../include/c++/4.9.4/bits/atomic_base.h:628:16 [task 2017-11-21T06:11:32.592Z] 06:11:32 INFO - GECKO(3110) | #1 0x7fcfb7393d3e in Release /builds/worker/workspace/build/src/xpcom/string/nsSubstring.cpp:228 [task 2017-11-21T06:11:32.592Z] 06:11:32 INFO - GECKO(3110) | #2 0x7fcfb7393d3e in ReleaseData /builds/worker/workspace/build/src/xpcom/string/nsSubstring.cpp:127 [task 2017-11-21T06:11:32.593Z] 06:11:32 INFO - GECKO(3110) | #3 0x7fcfb7393d3e in nsTSubstring<char16_t>::Finalize() /builds/worker/workspace/build/src/xpcom/string/nsTSubstring.cpp:191 [task 2017-11-21T06:11:32.601Z] 06:11:32 INFO - GECKO(3110) | #4 0x7fcfb8889d8c in ~nsTSubstring /builds/worker/workspace/build/src/obj-firefox/dist/include/nsTSubstring.h:77:5 [task 2017-11-21T06:11:32.602Z] 06:11:32 INFO - GECKO(3110) | #5 0x7fcfb8889d8c in mozilla::dom::RTCStatsReportInternal::~RTCStatsReportInternal() /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/dom/RTCStatsReportBinding.h:800 [task 2017-11-21T06:11:32.620Z] 06:11:32 INFO - GECKO(3110) | #6 0x7fcfb904ac83 in ~nsAutoPtr /builds/worker/workspace/build/src/obj-firefox/dist/include/nsAutoPtr.h:78:5 [task 2017-11-21T06:11:32.621Z] 06:11:32 INFO - GECKO(3110) | #7 0x7fcfb904ac83 in Destruct /builds/worker/workspace/build/src/obj-firefox/dist/include/nsTArray.h:562 [task 2017-11-21T06:11:32.623Z] 06:11:32 INFO - GECKO(3110) | #8 0x7fcfb904ac83 in DestructRange /builds/worker/workspace/build/src/obj-firefox/dist/include/nsTArray.h:2026 [task 2017-11-21T06:11:32.624Z] 06:11:32 INFO - GECKO(3110) | #9 0x7fcfb904ac83 in nsTArray_Impl<nsAutoPtr<mozilla::dom::RTCStatsReportInternal>, nsTArrayInfallibleAllocator>::RemoveElementsAt(unsigned long, unsigned long) /builds/worker/workspace/build/src/obj-firefox/dist/include/nsTArray.h:2079 [task 2017-11-21T06:11:32.625Z] 06:11:32 INFO - GECKO(3110) | #10 0x7fcfb8feb9df in Clear /builds/worker/workspace/build/src/obj-firefox/dist/include/nsTArray.h:1752:18 [task 2017-11-21T06:11:32.627Z] 06:11:32 INFO - GECKO(3110) | #11 0x7fcfb8feb9df in ~nsTArray_Impl /builds/worker/workspace/build/src/obj-firefox/dist/include/nsTArray.h:885 [task 2017-11-21T06:11:32.628Z] 06:11:32 INFO - GECKO(3110) | #12 0x7fcfb8feb9df in mozilla::PeerConnectionCtx::~PeerConnectionCtx() /builds/worker/workspace/build/src/media/webrtc/signaling/src/peerconnection/PeerConnectionCtx.cpp:438 [task 2017-11-21T06:11:32.630Z] 06:11:32 INFO - GECKO(3110) | #13 0x7fcfb8febc8d in mozilla::PeerConnectionCtx::~PeerConnectionCtx() /builds/worker/workspace/build/src/media/webrtc/signaling/src/peerconnection/PeerConnectionCtx.cpp:432:41 [task 2017-11-21T06:11:32.631Z] 06:11:32 INFO - GECKO(3110) | #14 0x7fcfb8fe6c61 in mozilla::PeerConnectionCtx::Destroy() /builds/worker/workspace/build/src/media/webrtc/signaling/src/peerconnection/PeerConnectionCtx.cpp:180:5 [task 2017-11-21T06:11:32.632Z] 06:11:32 INFO - GECKO(3110) | #15 0x7fcfb9046146 in mozilla::PeerConnectionCtxObserver::Observe(nsISupports*, char const*, char16_t const*) /builds/worker/workspace/build/src/media/webrtc/signaling/src/peerconnection/PeerConnectionCtx.cpp:73:7 [task 2017-11-21T06:11:32.633Z] 06:11:32 INFO - GECKO(3110) | #16 0x7fcfb744989c in nsObserverList::NotifyObservers(nsISupports*, char const*, char16_t const*) /builds/worker/workspace/build/src/xpcom/ds/nsObserverList.cpp:112:19 [task 2017-11-21T06:11:32.652Z] 06:11:32 INFO - GECKO(3110) | #17 0x7fcfb744d268 in nsObserverService::NotifyObservers(nsISupports*, char const*, char16_t const*) /builds/worker/workspace/build/src/xpcom/ds/nsObserverService.cpp:296:19 [task 2017-11-21T06:11:32.654Z] 06:11:32 INFO - GECKO(3110) | #18 0x7fcfb759ac8c in mozilla::ShutdownXPCOM(nsIServiceManager*) /builds/worker/workspace/build/src/xpcom/build/XPCOMInit.cpp:865:26 [task 2017-11-21T06:11:32.655Z] 06:11:32 INFO - GECKO(3110) | #19 0x7fcfc20d5db4 in XRE_TermEmbedding() /builds/worker/workspace/build/src/toolkit/xre/nsEmbedFunctions.cpp:224:3 [task 2017-11-21T06:11:32.656Z] 06:11:32 INFO - GECKO(3110) | #20 0x7fcfb8344045 in mozilla::ipc::ScopedXREEmbed::Stop() /builds/worker/workspace/build/src/ipc/glue/ScopedXREEmbed.cpp:108:5 [task 2017-11-21T06:11:32.658Z] 06:11:32 INFO - GECKO(3110) | #21 0x7fcfc20d65b2 in XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/workspace/build/src/toolkit/xre/nsEmbedFunctions.cpp:707:16 [task 2017-11-21T06:11:32.659Z] 06:11:32 INFO - GECKO(3110) | #22 0x4ebb1e in content_process_main /builds/worker/workspace/build/src/browser/app/../../ipc/contentproc/plugin-container.cpp:63:30 [task 2017-11-21T06:11:32.660Z] 06:11:32 INFO - GECKO(3110) | #23 0x4ebb1e in main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:280 [task 2017-11-21T06:11:32.742Z] 06:11:32 INFO - GECKO(3110) | #24 0x7fcfd5afe82f in __libc_start_main /build/glibc-bfm8X4/glibc-2.23/csu/../csu/libc-start.c:291 [task 2017-11-21T06:11:32.746Z] 06:11:32 INFO - GECKO(3110) | #25 0x41d408 in _start (/builds/worker/workspace/build/application/firefox/firefox+0x41d408) [task 2017-11-21T06:11:32.751Z] 06:11:32 INFO - GECKO(3110) | 0x6150012b7200 is located 0 bytes inside of 512-byte region [0x6150012b7200,0x6150012b7400) [task 2017-11-21T06:11:32.753Z] 06:11:32 INFO - GECKO(3110) | freed by thread T10 (Socket Thread) here: [task 2017-11-21T06:11:32.755Z] 06:11:32 INFO - GECKO(3110) | #0 0x4bb93b in __interceptor_free /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:47:3 [task 2017-11-21T06:11:32.758Z] 06:11:32 INFO - GECKO(3110) | #1 0x7fcfb8889d8c in ~nsTSubstring /builds/worker/workspace/build/src/obj-firefox/dist/include/nsTSubstring.h:77:5 [task 2017-11-21T06:11:32.759Z] 06:11:32 INFO - GECKO(3110) | #2 0x7fcfb8889d8c in mozilla::dom::RTCStatsReportInternal::~RTCStatsReportInternal() /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/dom/RTCStatsReportBinding.h:800 [task 2017-11-21T06:11:32.762Z] 06:11:32 INFO - GECKO(3110) | #3 0x7fcfb904ac83 in ~nsAutoPtr /builds/worker/workspace/build/src/obj-firefox/dist/include/nsAutoPtr.h:78:5 [task 2017-11-21T06:11:32.763Z] 06:11:32 INFO - GECKO(3110) | #4 0x7fcfb904ac83 in Destruct /builds/worker/workspace/build/src/obj-firefox/dist/include/nsTArray.h:562 [task 2017-11-21T06:11:32.765Z] 06:11:32 INFO - GECKO(3110) | #5 0x7fcfb904ac83 in DestructRange /builds/worker/workspace/build/src/obj-firefox/dist/include/nsTArray.h:2026 [task 2017-11-21T06:11:32.768Z] 06:11:32 INFO - GECKO(3110) | #6 0x7fcfb904ac83 in nsTArray_Impl<nsAutoPtr<mozilla::dom::RTCStatsReportInternal>, nsTArrayInfallibleAllocator>::RemoveElementsAt(unsigned long, unsigned long) /builds/worker/workspace/build/src/obj-firefox/dist/include/nsTArray.h:2079 [task 2017-11-21T06:11:32.769Z] 06:11:32 INFO - GECKO(3110) | #7 0x7fcfb8fea89e in Clear /builds/worker/workspace/build/src/obj-firefox/dist/include/nsTArray.h:1752:18 [task 2017-11-21T06:11:32.770Z] 06:11:32 INFO - GECKO(3110) | #8 0x7fcfb8fea89e in mozilla::EverySecondTelemetryCallback_s(nsAutoPtr<mozilla::Vector<nsAutoPtr<mozilla::RTCStatsQuery>, 0ul, mozilla::MallocAllocPolicy> >) /builds/worker/workspace/build/src/media/webrtc/signaling/src/peerconnection/PeerConnectionCtx.cpp:311 [task 2017-11-21T06:11:32.772Z] 06:11:32 INFO - GECKO(3110) | #9 0x7fcfb905c6ea in void mozilla::detail::RunnableFunctionCallHelper<void>::apply<void (*)(nsAutoPtr<mozilla::Vector<nsAutoPtr<mozilla::RTCStatsQuery>, 0ul, mozilla::MallocAllocPolicy> >), nsAutoPtr<mozilla::Vector<nsAutoPtr<mozilla::RTCStatsQuery>, 0ul, mozilla::MallocAllocPolicy> >, 0ul>(void (*)(nsAutoPtr<mozilla::Vector<nsAutoPtr<mozilla::RTCStatsQuery>, 0ul, mozilla::MallocAllocPolicy> >), mozilla::Tuple<nsAutoPtr<mozilla::Vector<nsAutoPtr<mozilla::RTCStatsQuery>, 0ul, mozilla::MallocAllocPolicy> > >&, mozilla::IndexSequence<0ul>) /builds/worker/workspace/build/src/obj-firefox/dist/include/mtransport/runnable_utils.h:81:5 [task 2017-11-21T06:11:32.773Z] 06:11:32 INFO - GECKO(3110) | #10 0x7fcfb905c35a in mozilla::runnable_args_func<void (*)(nsAutoPtr<mozilla::Vector<nsAutoPtr<mozilla::RTCStatsQuery>, 0ul, mozilla::MallocAllocPolicy> >), nsAutoPtr<mozilla::Vector<nsAutoPtr<mozilla::RTCStatsQuery>, 0ul, mozilla::MallocAllocPolicy> > >::Run() /builds/worker/workspace/build/src/obj-firefox/dist/include/mtransport/runnable_utils.h:121:5 [task 2017-11-21T06:11:32.776Z] 06:11:32 INFO - GECKO(3110) | #11 0x7fcfb7543a36 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:1037:14 [task 2017-11-21T06:11:32.780Z] 06:11:32 INFO - GECKO(3110) | #12 0x7fcfb755e3b8 in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:513:10 [task 2017-11-21T06:11:32.782Z] 06:11:32 INFO - GECKO(3110) | #13 0x7fcfb7764aa4 in mozilla::net::nsSocketTransportService::Run() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp:990:21 [task 2017-11-21T06:11:32.785Z] 06:11:32 INFO - GECKO(3110) | #14 0x7fcfb7766d2c in non-virtual thunk to mozilla::net::nsSocketTransportService::Run() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp:857:27 [task 2017-11-21T06:11:32.786Z] 06:11:32 INFO - GECKO(3110) | #15 0x7fcfb7543a36 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:1037:14 [task 2017-11-21T06:11:32.793Z] 06:11:32 INFO - GECKO(3110) | #16 0x7fcfb755e3b8 in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:513:10 [task 2017-11-21T06:11:32.795Z] 06:11:32 INFO - GECKO(3110) | #17 0x7fcfb833ae60 in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/workspace/build/src/ipc/glue/MessagePump.cpp:364:5 [task 2017-11-21T06:11:32.798Z] 06:11:32 INFO - GECKO(3110) | #18 0x7fcfb829a65b in RunInternal /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:326:10 [task 2017-11-21T06:11:32.800Z] 06:11:32 INFO - GECKO(3110) | #19 0x7fcfb829a65b in RunHandler /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:319 [task 2017-11-21T06:11:32.804Z] 06:11:32 INFO - GECKO(3110) | #20 0x7fcfb829a65b in MessageLoop::Run() /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:299 [task 2017-11-21T06:11:32.805Z] 06:11:32 INFO - GECKO(3110) | #21 0x7fcfb753ee53 in nsThread::ThreadFunc(void*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:425:11 [task 2017-11-21T06:11:32.808Z] 06:11:32 INFO - GECKO(3110) | #22 0x7fcfd27d7513 in _pt_root /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:216:5 [task 2017-11-21T06:11:32.809Z] 06:11:32 INFO - GECKO(3110) | #23 0x7fcfd6b5c6b9 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76b9) [task 2017-11-21T06:11:32.812Z] 06:11:32 INFO - GECKO(3110) | previously allocated by thread T0 (Web Content) here: [task 2017-11-21T06:11:32.814Z] 06:11:32 INFO - GECKO(3110) | #0 0x4bbc8c in malloc /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:64:3 [task 2017-11-21T06:11:32.816Z] 06:11:32 INFO - GECKO(3110) | #1 0x7fcfb7392ac6 in Alloc /builds/worker/workspace/build/src/xpcom/string/nsSubstring.cpp:257:22 [task 2017-11-21T06:11:32.817Z] 06:11:32 INFO - GECKO(3110) | #2 0x7fcfb7392ac6 in nsTSubstring<char16_t>::MutatePrep(unsigned int, char16_t**, mozilla::detail::StringDataFlags*) /builds/worker/workspace/build/src/xpcom/string/nsTSubstring.cpp:165 [task 2017-11-21T06:11:32.818Z] 06:11:32 INFO - GECKO(3110) | #3 0x7fcfb73a34a7 in nsTSubstring<char16_t>::SetCapacity(unsigned int, mozilla::fallible_t const&) /builds/worker/workspace/build/src/xpcom/string/nsTSubstring.cpp:780:8 [task 2017-11-21T06:11:32.820Z] 06:11:32 INFO - GECKO(3110) | #4 0x7fcfb737e75a in SetLength /builds/worker/workspace/build/src/xpcom/string/nsTSubstring.cpp:820:8 [task 2017-11-21T06:11:32.824Z] 06:11:32 INFO - GECKO(3110) | #5 0x7fcfb737e75a in AppendASCIItoUTF16(nsTSubstring<char> const&, nsTSubstring<char16_t>&, mozilla::fallible_t const&) /builds/worker/workspace/build/src/xpcom/string/nsReadableUtils.cpp:199 [task 2017-11-21T06:11:32.825Z] 06:11:32 INFO - GECKO(3110) | #6 0x7fcfb73816c9 in AppendASCIItoUTF16 /builds/worker/workspace/build/src/xpcom/string/nsReadableUtils.cpp:189:8 [task 2017-11-21T06:11:32.827Z] 06:11:32 INFO - GECKO(3110) | #7 0x7fcfb73816c9 in AppendASCIItoUTF16(char const*, nsTSubstring<char16_t>&) /builds/worker/workspace/build/src/xpcom/string/nsReadableUtils.cpp:241 [task 2017-11-21T06:11:32.829Z] 06:11:32 INFO - GECKO(3110) | #8 0x7fcfb8fe7bb8 in NS_ConvertASCIItoUTF16 /builds/worker/workspace/build/src/obj-firefox/dist/include/nsString.h:83:5 [task 2017-11-21T06:11:32.831Z] 06:11:32 INFO - GECKO(3110) | #9 0x7fcfb8fe7bb8 in mozilla::PeerConnectionImpl::BuildStatsQuery_m(mozilla::dom::MediaStreamTrack*, mozilla::RTCStatsQuery*) /builds/worker/workspace/build/src/media/webrtc/signaling/src/peerconnection/PeerConnectionImpl.cpp:3654 [task 2017-11-21T06:11:32.832Z] 06:11:32 INFO - GECKO(3110) | #10 0x7fcfb8fe7106 in mozilla::PeerConnectionCtx::EverySecondTelemetryCallback_m(nsITimer*, void*) /builds/worker/workspace/build/src/media/webrtc/signaling/src/peerconnection/PeerConnectionCtx.cpp:343:11 [task 2017-11-21T06:11:32.834Z] 06:11:32 INFO - GECKO(3110) | #11 0x7fcfb7563166 in nsTimerImpl::Fire(int) /builds/worker/workspace/build/src/xpcom/threads/nsTimerImpl.cpp:701:7 [task 2017-11-21T06:11:32.836Z] 06:11:32 INFO - GECKO(3110) | #12 0x7fcfb7534cc6 in nsTimerEvent::Run() /builds/worker/workspace/build/src/xpcom/threads/TimerThread.cpp:286:11 [task 2017-11-21T06:11:32.843Z] 06:11:32 INFO - GECKO(3110) | #13 0x7fcfb751e101 in mozilla::SchedulerGroup::Runnable::Run() /builds/worker/workspace/build/src/xpcom/threads/SchedulerGroup.cpp:396:25 [task 2017-11-21T06:11:32.844Z] 06:11:32 INFO - GECKO(3110) | #14 0x7fcfb7543a36 in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:1037:14 [task 2017-11-21T06:11:32.846Z] 06:11:32 INFO - GECKO(3110) | #15 0x7fcfb755e3b8 in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:513:10 [task 2017-11-21T06:11:32.847Z] 06:11:32 INFO - GECKO(3110) | #16 0x7fcfb8339af1 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/workspace/build/src/ipc/glue/MessagePump.cpp:97:21 [task 2017-11-21T06:11:32.848Z] 06:11:32 INFO - GECKO(3110) | #17 0x7fcfb829a65b in RunInternal /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:326:10 [task 2017-11-21T06:11:32.849Z] 06:11:32 INFO - GECKO(3110) | #18 0x7fcfb829a65b in RunHandler /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:319 [task 2017-11-21T06:11:32.850Z] 06:11:32 INFO - GECKO(3110) | #19 0x7fcfb829a65b in MessageLoop::Run() /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:299 [task 2017-11-21T06:11:32.852Z] 06:11:32 INFO - GECKO(3110) | #20 0x7fcfbdd9f99f in nsBaseAppShell::Run() /builds/worker/workspace/build/src/widget/nsBaseAppShell.cpp:159:27 [task 2017-11-21T06:11:32.853Z] 06:11:32 INFO - GECKO(3110) | #21 0x7fcfc20d6bc7 in XRE_RunAppShell() /builds/worker/workspace/build/src/toolkit/xre/nsEmbedFunctions.cpp:877:22 [task 2017-11-21T06:11:32.855Z] 06:11:32 INFO - GECKO(3110) | #22 0x7fcfb829a65b in RunInternal /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:326:10 [task 2017-11-21T06:11:32.857Z] 06:11:32 INFO - GECKO(3110) | #23 0x7fcfb829a65b in RunHandler /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:319 [task 2017-11-21T06:11:32.859Z] 06:11:32 INFO - GECKO(3110) | #24 0x7fcfb829a65b in MessageLoop::Run() /builds/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:299 [task 2017-11-21T06:11:32.860Z] 06:11:32 INFO - GECKO(3110) | #25 0x7fcfc20d657a in XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/workspace/build/src/toolkit/xre/nsEmbedFunctions.cpp:703:34 [task 2017-11-21T06:11:32.862Z] 06:11:32 INFO - GECKO(3110) | #26 0x4ebb1e in content_process_main /builds/worker/workspace/build/src/browser/app/../../ipc/contentproc/plugin-container.cpp:63:30 [task 2017-11-21T06:11:32.864Z] 06:11:32 INFO - GECKO(3110) | #27 0x4ebb1e in main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:280 [task 2017-11-21T06:11:32.868Z] 06:11:32 INFO - GECKO(3110) | #28 0x7fcfd5afe82f in __libc_start_main /build/glibc-bfm8X4/glibc-2.23/csu/../csu/libc-start.c:291 [task 2017-11-21T06:11:32.869Z] 06:11:32 INFO - GECKO(3110) | Thread T10 (Socket Thread) created by T0 (Web Content) here: [task 2017-11-21T06:11:32.871Z] 06:11:32 INFO - GECKO(3110) | #0 0x4a4066 in __interceptor_pthread_create /builds/worker/workspace/moz-toolchain/src/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:245:3 [task 2017-11-21T06:11:32.872Z] 06:11:32 INFO - GECKO(3110) | #1 0x7fcfd27d42b9 in _PR_CreateThread /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:457:14 [task 2017-11-21T06:11:32.873Z] 06:11:32 INFO - GECKO(3110) | #2 0x7fcfd27d3ece in PR_CreateThread /builds/worker/workspace/build/src/nsprpub/pr/src/pthreads/ptthread.c:548:12 [task 2017-11-21T06:11:32.875Z] 06:11:32 INFO - GECKO(3110) | #3 0x7fcfb7540792 in nsThread::Init(nsTSubstring<char> const&) /builds/worker/workspace/build/src/xpcom/threads/nsThread.cpp:598:8 [task 2017-11-21T06:11:32.876Z] 06:11:32 INFO - GECKO(3110) | #4 0x7fcfb754870f in nsThreadManager::NewNamedThread(nsTSubstring<char> const&, unsigned int, nsIThread**) /builds/worker/workspace/build/src/xpcom/threads/nsThreadManager.cpp:357:22 [task 2017-11-21T06:11:32.877Z] 06:11:32 INFO - GECKO(3110) | #5 0x7fcfb755c083 in NS_NewNamedThread(nsTSubstring<char> const&, nsIThread**, nsIRunnable*, unsigned int) /builds/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:139:45 [task 2017-11-21T06:11:32.880Z] 06:11:32 INFO - GECKO(3110) | #6 0x7fcfb77619ad in NS_NewNamedThread<14> /builds/worker/workspace/build/src/obj-firefox/dist/include/nsThreadUtils.h:72:10 [task 2017-11-21T06:11:32.881Z] 06:11:32 INFO - GECKO(3110) | #7 0x7fcfb77619ad in mozilla::net::nsSocketTransportService::Init() /builds/worker/workspace/build/src/netwerk/base/nsSocketTransportService2.cpp:560 [task 2017-11-21T06:11:32.882Z] 06:11:32 INFO - GECKO(3110) | #8 0x7fcfb827555c in nsSocketTransportServiceConstructor(nsISupports*, nsID const&, void**) /builds/worker/workspace/build/src/netwerk/build/nsNetModule.cpp:76:1 [task 2017-11-21T06:11:32.884Z] 06:11:32 INFO - GECKO(3110) | #9 0x7fcfb74fa6c1 in nsComponentManagerImpl::CreateInstanceByContractID(char const*, nsISupports*, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1086:19 [task 2017-11-21T06:11:32.885Z] 06:11:32 INFO - GECKO(3110) | #10 0x7fcfb74f1a4b in nsComponentManagerImpl::GetServiceByContractID(char const*, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1446:10 [task 2017-11-21T06:11:32.889Z] 06:11:32 INFO - GECKO(3110) | #11 0x7fcfb75005ba in CallGetService /builds/worker/workspace/build/src/xpcom/components/nsComponentManagerUtils.cpp:67:43 [task 2017-11-21T06:11:32.890Z] 06:11:32 INFO - GECKO(3110) | #12 0x7fcfb75005ba in nsGetServiceByContractIDWithError::operator()(nsID const&, void**) const /builds/worker/workspace/build/src/xpcom/components/nsComponentManagerUtils.cpp:292 [task 2017-11-21T06:11:32.891Z] 06:11:32 INFO - GECKO(3110) | #13 0x7fcfb73c5b60 in nsCOMPtr_base::assign_from_gs_contractid_with_error(nsGetServiceByContractIDWithError const&, nsID const&) /builds/worker/workspace/build/src/xpcom/base/nsCOMPtr.cpp:106:7 [task 2017-11-21T06:11:32.892Z] 06:11:32 INFO - GECKO(3110) | [Socket Thread]: E/mtransport Couldn't send media on '0-1511244555277819 (id=2147484024 url=http://mochi.test:8888/tests/dom/media/tests/mochitest/test_peerConnection_scaleResolution. aLevel=0' [task 2017-11-21T06:11:32.894Z] 06:11:32 INFO - GECKO(3110) | [Socket Thread]: E/signaling [Socket Thread|MediaPipeline] MediaPipeline.cpp:967: Failed write on stream d6a93e3fd9c7c86a| Receive video[{3bf5d496-3e4f-4c7f-bed8-60e8b7da23ad}] [task 2017-11-21T06:11:32.896Z] 06:11:32 INFO - GECKO(3110) | #14 0x7fcfb76c9173 in operator= /builds/worker/workspace/build/src/obj-firefox/dist/include/nsCOMPtr.h:697:5 [task 2017-11-21T06:11:32.897Z] 06:11:32 INFO - GECKO(3110) | #15 0x7fcfb76c9173 in InitializeSocketTransportService /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:297 [task 2017-11-21T06:11:32.899Z] 06:11:32 INFO - GECKO(3110) | #16 0x7fcfb76c9173 in mozilla::net::nsIOService::SetOffline(bool) /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:1098 [task 2017-11-21T06:11:32.901Z] 06:11:32 INFO - GECKO(3110) | #17 0x7fcfb76c8228 in mozilla::net::nsIOService::Init() /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:264:5 [task 2017-11-21T06:11:32.904Z] 06:11:32 INFO - GECKO(3110) | #18 0x7fcfb76ca9d5 in mozilla::net::nsIOService::GetInstance() /builds/worker/workspace/build/src/netwerk/base/nsIOService.cpp:359:13 [task 2017-11-21T06:11:32.905Z] 06:11:32 INFO - GECKO(3110) | #19 0x7fcfb82752a2 in nsIOServiceConstructor(nsISupports*, nsID const&, void**) /builds/worker/workspace/build/src/netwerk/build/nsNetModule.cpp:58:1 [task 2017-11-21T06:11:32.907Z] 06:11:32 INFO - GECKO(3110) | #20 0x7fcfb74fa6c1 in nsComponentManagerImpl::CreateInstanceByContractID(char const*, nsISupports*, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1086:19 [task 2017-11-21T06:11:32.910Z] 06:11:32 INFO - GECKO(3110) | #21 0x7fcfb74f1a4b in nsComponentManagerImpl::GetServiceByContractID(char const*, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1446:10 [task 2017-11-21T06:11:32.912Z] 06:11:32 INFO - GECKO(3110) | #22 0x7fcfb9248e4a in CallGetService<nsIIOService> /builds/worker/workspace/build/src/obj-firefox/dist/include/nsServiceManagerUtils.h:89:10 [task 2017-11-21T06:11:32.916Z] 06:11:32 INFO - GECKO(3110) | #23 0x7fcfb9248e4a in nsScriptSecurityManager::Init() /builds/worker/workspace/build/src/caps/nsScriptSecurityManager.cpp:1348 [task 2017-11-21T06:11:32.917Z] 06:11:32 INFO - GECKO(3110) | #24 0x7fcfb9249a62 in nsScriptSecurityManager::InitStatics() /builds/worker/workspace/build/src/caps/nsScriptSecurityManager.cpp:1422:30 [task 2017-11-21T06:11:32.918Z] 06:11:32 INFO - GECKO(3110) | #25 0x7fcfb8d9dd74 in nsXPConnect::InitStatics() /builds/worker/workspace/build/src/js/xpconnect/src/nsXPConnect.cpp:129:5 [task 2017-11-21T06:11:32.919Z] 06:11:32 INFO - GECKO(3110) | #26 0x7fcfb8d2ff08 in xpcModuleCtor() /builds/worker/workspace/build/src/js/xpconnect/src/XPCModule.cpp:13:5 [task 2017-11-21T06:11:32.920Z] 06:11:32 INFO - GECKO(3110) | #27 0x7fcfbef65b08 in Initialize() /builds/worker/workspace/build/src/layout/build/nsLayoutModule.cpp:315:8 [task 2017-11-21T06:11:32.922Z] 06:11:32 INFO - GECKO(3110) | #28 0x7fcfb74f9348 in Load /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:763:21 [task 2017-11-21T06:11:32.924Z] 06:11:32 INFO - GECKO(3110) | #29 0x7fcfb74f9348 in nsFactoryEntry::GetFactory() /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1785 [task 2017-11-21T06:11:32.925Z] 06:11:32 INFO - GECKO(3110) | #30 0x7fcfb74fa65d in nsComponentManagerImpl::CreateInstanceByContractID(char const*, nsISupports*, nsID const&, void**) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:1083:41 [task 2017-11-21T06:11:32.926Z] 06:11:32 INFO - GECKO(3110) | #31 0x7fcfb74ffffd in CallCreateInstance /builds/worker/workspace/build/src/xpcom/components/nsComponentManagerUtils.cpp:149:38 [task 2017-11-21T06:11:32.929Z] 06:11:32 INFO - GECKO(3110) | #32 0x7fcfb74ffffd in nsCreateInstanceByContractID::operator()(nsID const&, void**) const /builds/worker/workspace/build/src/xpcom/components/nsComponentManagerUtils.cpp:197 [task 2017-11-21T06:11:32.930Z] 06:11:32 INFO - GECKO(3110) | #33 0x7fcfb73c5ee6 in nsCOMPtr_base::assign_from_helper(nsCOMPtr_helper const&, nsID const&) /builds/worker/workspace/build/src/xpcom/base/nsCOMPtr.cpp:128:7 [task 2017-11-21T06:11:32.931Z] 06:11:32 INFO - GECKO(3110) | #34 0x7fcfb74e3506 in nsCOMPtr /builds/worker/workspace/build/src/obj-firefox/dist/include/nsCOMPtr.h:605:5 [task 2017-11-21T06:11:32.933Z] 06:11:32 INFO - GECKO(3110) | #35 0x7fcfb74e3506 in LogMessageWithContext(mozilla::FileLocation&, unsigned int, char const*, ...) /builds/worker/workspace/build/src/xpcom/components/ManifestParser.cpp:190 [task 2017-11-21T06:11:32.936Z] 06:11:32 INFO - GECKO(3110) | #36 0x7fcfb74e966e in nsComponentManagerImpl::ManifestContract(nsComponentManagerImpl::ManifestProcessingContext&, int, char* const*) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:695:5 [task 2017-11-21T06:11:32.938Z] 06:11:32 INFO - GECKO(3110) | #37 0x7fcfb74e6c8e in ParseManifest(NSLocationType, mozilla::FileLocation&, char*, bool, bool) /builds/worker/workspace/build/src/xpcom/components/ManifestParser.cpp:777:48 [task 2017-11-21T06:11:32.939Z] 06:11:32 INFO - GECKO(3110) | #38 0x7fcfb74f5e26 in DoRegisterManifest /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:547:5 [task 2017-11-21T06:11:32.940Z] 06:11:32 INFO - GECKO(3110) | #39 0x7fcfb74f5e26 in nsComponentManagerImpl::RegisterManifest(NSLocationType, mozilla::FileLocation&, bool) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:560 [task 2017-11-21T06:11:32.941Z] 06:11:32 INFO - GECKO(3110) | #40 0x7fcfb74f6143 in nsComponentManagerImpl::ManifestManifest(nsComponentManagerImpl::ManifestProcessingContext&, int, char* const*) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:569:3 [task 2017-11-21T06:11:32.945Z] 06:11:32 INFO - GECKO(3110) | #41 0x7fcfb74e6957 in ParseManifest(NSLocationType, mozilla::FileLocation&, char*, bool, bool) /builds/worker/workspace/build/src/xpcom/components/ManifestParser.cpp:769:9 [task 2017-11-21T06:11:32.946Z] 06:11:32 INFO - GECKO(3110) | #42 0x7fcfb74f5e26 in DoRegisterManifest /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:547:5 [task 2017-11-21T06:11:32.947Z] 06:11:32 INFO - GECKO(3110) | #43 0x7fcfb74f5e26 in nsComponentManagerImpl::RegisterManifest(NSLocationType, mozilla::FileLocation&, bool) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:560 [task 2017-11-21T06:11:32.949Z] 06:11:32 INFO - GECKO(3110) | #44 0x7fcfb74f48e9 in nsComponentManagerImpl::RereadChromeManifests(bool) /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:721:5 [task 2017-11-21T06:11:32.949Z] 06:11:32 INFO - GECKO(3110) | #45 0x7fcfb74f3111 in nsComponentManagerImpl::Init() /builds/worker/workspace/build/src/xpcom/components/nsComponentManager.cpp:352:5 [task 2017-11-21T06:11:32.950Z] 06:11:32 INFO - GECKO(3110) | #46 0x7fcfb7599bc6 in NS_InitXPCOM2 /builds/worker/workspace/build/src/xpcom/build/XPCOMInit.cpp:677:51 [task 2017-11-21T06:11:32.950Z] 06:11:32 INFO - GECKO(3110) | #47 0x7fcfc20d5b2e in XRE_InitEmbedding2(nsIFile*, nsIFile*, nsIDirectoryServiceProvider*) /builds/worker/workspace/build/src/toolkit/xre/nsEmbedFunctions.cpp:187:8 [task 2017-11-21T06:11:32.952Z] 06:11:32 INFO - GECKO(3110) | #48 0x7fcfb8344494 in mozilla::ipc::ScopedXREEmbed::Start() /builds/worker/workspace/build/src/ipc/glue/ScopedXREEmbed.cpp:97:10 [task 2017-11-21T06:11:32.954Z] 06:11:32 INFO - GECKO(3110) | #49 0x7fcfbd5ee9bc in mozilla::dom::ContentProcess::Init(int, char**) /builds/worker/workspace/build/src/dom/ipc/ContentProcess.cpp:244:13 [task 2017-11-21T06:11:32.955Z] 06:11:32 INFO - GECKO(3110) | #50 0x7fcfc20d6568 in XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/workspace/build/src/toolkit/xre/nsEmbedFunctions.cpp:671:21 [task 2017-11-21T06:11:32.956Z] 06:11:32 INFO - GECKO(3110) | #51 0x4ebb1e in content_process_main /builds/worker/workspace/build/src/browser/app/../../ipc/contentproc/plugin-container.cpp:63:30 [task 2017-11-21T06:11:32.957Z] 06:11:32 INFO - GECKO(3110) | #52 0x4ebb1e in main /builds/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:280 [task 2017-11-21T06:11:32.959Z] 06:11:32 INFO - GECKO(3110) | #53 0x7fcfd5afe82f in __libc_start_main /build/glibc-bfm8X4/glibc-2.23/csu/../csu/libc-start.c:291 [task 2017-11-21T06:11:32.961Z] 06:11:32 INFO - GECKO(3110) | SUMMARY: AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/clang/bin/../lib/gcc/x86_64-unknown-linux-gnu/4.9.4/../../../../include/c++/4.9.4/bits/atomic_base.h:628:16 in fetch_sub [task 2017-11-21T06:11:32.962Z] 06:11:32 INFO - GECKO(3110) | Shadow bytes around the buggy address: [task 2017-11-21T06:11:32.965Z] 06:11:32 INFO - GECKO(3110) | 0x0c2a8024edf0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa [task 2017-11-21T06:11:32.965Z] 06:11:32 INFO - GECKO(3110) | 0x0c2a8024ee00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa [task 2017-11-21T06:11:32.965Z] 06:11:32 INFO - GECKO(3110) | 0x0c2a8024ee10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa [task 2017-11-21T06:11:32.967Z] 06:11:32 INFO - GECKO(3110) | 0x0c2a8024ee20: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa [task 2017-11-21T06:11:32.968Z] 06:11:32 INFO - GECKO(3110) | 0x0c2a8024ee30: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa [task 2017-11-21T06:11:32.969Z] 06:11:32 INFO - GECKO(3110) | =>0x0c2a8024ee40:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd [task 2017-11-21T06:11:32.976Z] 06:11:32 INFO - GECKO(3110) | 0x0c2a8024ee50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd [task 2017-11-21T06:11:32.977Z] 06:11:32 INFO - GECKO(3110) | 0x0c2a8024ee60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd [task 2017-11-21T06:11:32.978Z] 06:11:32 INFO - GECKO(3110) | 0x0c2a8024ee70: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd [task 2017-11-21T06:11:32.981Z] 06:11:32 INFO - GECKO(3110) | 0x0c2a8024ee80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa [task 2017-11-21T06:11:32.983Z] 06:11:32 INFO - GECKO(3110) | 0x0c2a8024ee90: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa [task 2017-11-21T06:11:32.984Z] 06:11:32 INFO - GECKO(3110) | Shadow byte legend (one shadow byte represents 8 application bytes): [task 2017-11-21T06:11:32.985Z] 06:11:32 INFO - GECKO(3110) | Addressable: 00 [task 2017-11-21T06:11:32.986Z] 06:11:32 INFO - GECKO(3110) | Partially addressable: 01 02 03 04 05 06 07 [task 2017-11-21T06:11:32.987Z] 06:11:32 INFO - GECKO(3110) | Heap left redzone: fa [task 2017-11-21T06:11:32.987Z] 06:11:32 INFO - GECKO(3110) | Heap right redzone: fb [task 2017-11-21T06:11:32.989Z] 06:11:32 INFO - GECKO(3110) | Freed heap region: fd [task 2017-11-21T06:11:32.990Z] 06:11:32 INFO - GECKO(3110) | Stack left redzone: f1 [task 2017-11-21T06:11:32.997Z] 06:11:32 INFO - GECKO(3110) | Stack mid redzone: f2 [task 2017-11-21T06:11:32.998Z] 06:11:32 INFO - GECKO(3110) | Stack right redzone: f3 [task 2017-11-21T06:11:32.999Z] 06:11:32 INFO - GECKO(3110) | Stack partial redzone: f4 [task 2017-11-21T06:11:33.003Z] 06:11:33 INFO - GECKO(3110) | Stack after return: f5 [task 2017-11-21T06:11:33.004Z] 06:11:33 INFO - GECKO(3110) | Stack use after scope: f8 [task 2017-11-21T06:11:33.005Z] 06:11:33 INFO - GECKO(3110) | Global redzone: f9 [task 2017-11-21T06:11:33.005Z] 06:11:33 INFO - GECKO(3110) | Global init order: f6 [task 2017-11-21T06:11:33.005Z] 06:11:33 INFO - GECKO(3110) | Poisoned by user: f7 [task 2017-11-21T06:11:33.006Z] 06:11:33 INFO - GECKO(3110) | Container overflow: fc [task 2017-11-21T06:11:33.006Z] 06:11:33 INFO - GECKO(3110) | Array cookie: ac [task 2017-11-21T06:11:33.007Z] 06:11:33 INFO - GECKO(3110) | Intra object redzone: bb [task 2017-11-21T06:11:33.012Z] 06:11:33 INFO - GECKO(3110) | ASan internal: fe [task 2017-11-21T06:11:33.013Z] 06:11:33 INFO - GECKO(3110) | Left alloca redzone: ca [task 2017-11-21T06:11:33.014Z] 06:11:33 INFO - GECKO(3110) | Right alloca redzone: cb [task 2017-11-21T06:11:33.015Z] 06:11:33 INFO - GECKO(3110) | ==3161==ABORTING
Looks like the STS thread frees something on a stats run, and then main thread tries free the same resources on shutdown. Nico as you are our stats expert in residence can I ask you to take an initial look here?
Rank: 8
Flags: needinfo?(na-g)
Priority: -- → P1
Yes, I can take a look at this.
Assignee: nobody → na-g
The broken assumption seems to be that the EverySecondTelemetryTimer runs on the main thread. The PeerConnectionCtx destructor cancels the telemetry timer from the main thread, which used to be the synchronization point. I believe this was introduced with the change to named runnables.
Flags: needinfo?(na-g)
Aryx: Does this bug still happen DrNo: if this bug still happens it's a UAF and likely sec-high. What's the next step? It sounds like Nico did find a broken assumption in the code.
Flags: needinfo?(drno)
Flags: needinfo?(aryx.bugmail)
Keywords: sec-high
No failure summary matches for "atomic_base.h[...] in fetch_sub" in the Treeherder database (oldest data from 2018-05-20).
Flags: needinfo?(aryx.bugmail)
Nico do you know if we changed code in this area? Do we need to fix what you found in comment #3? If so could you please take a look at fixing it.
Flags: needinfo?(drno) → needinfo?(na-g)

As I don't even see the EverySecondTelemetryTimer any more in our code I'm assuming this bug is no longer relevant. Nico what do you say?

I think this may still be an issue. I am doing a deeper dive today.

There haven't been any crashes in the last 6 months. I think this may have been resolved when :bwc refactored the GetStats to use promises in bug 1494312.

Flags: needinfo?(na-g)

(In reply to Nico Grunbaum [:ng] from comment #9)

There haven't been any crashes in the last 6 months. I think this may have been resolved when :bwc refactored the GetStats to use promises in bug 1494312.

Since this only ever crashed on treeherder and bug 1494312 landed in 65 and thus this has been running for months on treeherder I would assume it's safe to call this fixed.

Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED

Is there anything we can realistically do for ESR60 here?

Assignee: na-g → docfaraday
Blocks: 1494312
Group: media-core-security → core-security-release
status-firefox59: affected → wontfix
status-firefox-esr60: --- → ?
Flags: needinfo?(docfaraday)
Target Milestone: --- → mozilla65
No longer blocks: 1494312
Depends on: 1494312

(In reply to Ryan VanderMeulen [:RyanVM] from comment #11)

Is there anything we can realistically do for ESR60 here?

This work is not going to be possible to port to 60 without bringing a lot of other stuff with it. It is not impossible to try to fix it in a more limited way, but that would basically be a new bug.

Flags: needinfo?(docfaraday)
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.