Closed
Bug 1480750
Opened 6 years ago
Closed 6 years ago
Crash in mozilla::TransceiverImpl::UpdateVideoConduit
Categories
(Core :: WebRTC: Signaling, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 1465617
People
(Reporter: whimboo, Unassigned, NeedInfo)
Details
(Keywords: crash)
Crash Data
This bug was filed from the Socorro interface and is
report bp-18dc498f-7958-4ca1-9480-cf2670180803.
=============================================================
Top 10 frames of crashing thread:
0 libxul.so mozilla::TransceiverImpl::UpdateVideoConduit media/webrtc/signaling/src/peerconnection/TransceiverImpl.cpp:935
1 libxul.so mozilla::TransceiverImpl::UpdateConduit media/webrtc/signaling/src/peerconnection/TransceiverImpl.cpp:249
2 libxul.so mozilla::PeerConnectionMedia::UpdateMediaPipelines media/webrtc/signaling/src/peerconnection/PeerConnectionMedia.cpp:491
3 libxul.so mozilla::PeerConnectionImpl::SetSignalingState_m media/webrtc/signaling/src/peerconnection/PeerConnectionImpl.cpp:2849
4 libxul.so mozilla::PeerConnectionImpl::SetRemoteDescription media/webrtc/signaling/src/peerconnection/PeerConnectionImpl.cpp:1935
5 libxul.so mozilla::dom::PeerConnectionImplBinding::setRemoteDescription media/webrtc/signaling/src/peerconnection/PeerConnectionImpl.h:368
6 libxul.so bool mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ThrowExceptions> dom/bindings/BindingUtils.cpp:3285
7 libxul.so js::InternalCallOrConstruct
8 libxul.so Interpret
9 libxul.so js::RunScript
=============================================================
I filed this after it has been reported to me by Hendrik who is on the CC list.
Hendrik, can you please add some details in how to reproduce the bug?
Flags: needinfo?(mozilla)
Reporter | ||
Comment 1•6 years ago
|
||
It's a null pointer crash. So `conduit` should be null in this line:
https://hg.mozilla.org/releases/mozilla-beta/annotate/dd92dec96711e60a8c6a49ebe584fa23a453a292/media/webrtc/signaling/src/peerconnection/TransceiverImpl.cpp#l935
Comment 2•6 years ago
|
||
I am not so sure about that. We dereference (and modify!) conduit before getting to that line, and conduit is a local variable. Also, the function we're calling on conduit (ConfigureSendMediaCodec) is a virtual function; that almost always results in a close-to-null-but-not-quite crash (eg; 0x4 or 0x8). I think something different is going on here, and it would be really nice to have some steps to reproduce.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•