Open Bug 1767891 Opened 2 years ago Updated 2 years ago

Assertion failure: silenceNeed == 0, at /builds/worker/checkouts/gecko/dom/media/DeviceInputTrack.cpp:145

Categories

(Core :: Audio/Video: MediaStreamGraph, defect)

Unspecified
Android
defect

Tracking

()

Tracking Status
firefox101 --- affected
firefox102 --- affected

People

(Reporter: tsmith, Assigned: chunmin)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, testcase)

Attachments

(1 file)

Attached file testcase.html (deleted) —

Found while fuzzing m-c 20220414-6c55ba30c858 (--enable-debug --enable-fuzzing)

The fuzzers are seeing this on Android (x86).

Assertion failure: silenceNeed == 0, at /builds/worker/checkouts/gecko/dom/media/DeviceInputTrack.cpp:145

eip = 0xbd32dde6   esp = 0xa98da730   ebp = 0xa98da868   ebx = 0xc5301aac
esi = 0x00000091   edi = 0x00000000   eax = 0xc2c1ad64   ecx = 0xc5f59c74
edx = 0x00000000   efl = 0x00210286
OS|Android|0.0.0 Linux 5.4.86-android11-2-00006-gae78026f427c-ab7595864 #1 SMP PREEMPT Thu Jul 29 20:54:47 UTC 2021 i686
CPU|x86|GenuineIntel family 6 model 6 stepping 3|4
GPU|||
Crash|SIGSEGV /SEGV_MAPERR|0x0|37
37|0|libxul.so|mozilla::NativeInputTrack::ProcessInput(long long, long long, unsigned int)|hg:hg.mozilla.org/mozilla-central:dom/media/DeviceInputTrack.cpp:6c55ba30c85897a828e03a9b0b05921cb8917b35|126|0x29
37|1|libxul.so|mozilla::MediaTrackGraphImpl::Process(mozilla::AudioMixer*)|hg:hg.mozilla.org/mozilla-central:dom/media/MediaTrackGraph.cpp:6c55ba30c85897a828e03a9b0b05921cb8917b35|1281|0x1d
37|2|libxul.so|mozilla::MediaTrackGraphImpl::OneIterationImpl(long long, long long, mozilla::AudioMixer*)|hg:hg.mozilla.org/mozilla-central:dom/media/MediaTrackGraph.cpp:6c55ba30c85897a828e03a9b0b05921cb8917b35|1415|0xf
37|3|libxul.so|mozilla::GraphRunner::Run()|hg:hg.mozilla.org/mozilla-central:dom/media/GraphRunner.cpp:6c55ba30c85897a828e03a9b0b05921cb8917b35|139|0x41
37|4|libxul.so|nsThread::ProcessNextEvent(bool, bool*)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:6c55ba30c85897a828e03a9b0b05921cb8917b35|1174|0x10
37|5|libxul.so|NS_ProcessNextEvent(nsIThread*, bool)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.cpp:6c55ba30c85897a828e03a9b0b05921cb8917b35|465|0x11
37|6|libxul.so|mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessagePump.cpp:6c55ba30c85897a828e03a9b0b05921cb8917b35|330|0x10
37|7|libxul.so|MessageLoop::RunInternal()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:6c55ba30c85897a828e03a9b0b05921cb8917b35|380|0x16
37|8|libxul.so|MessageLoop::Run()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:6c55ba30c85897a828e03a9b0b05921cb8917b35|355|0xb
37|9|libxul.so|nsThread::ThreadFunc(void*)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:6c55ba30c85897a828e03a9b0b05921cb8917b35|378|0xe
37|10|libnss3.so|_pt_root|hg:hg.mozilla.org/mozilla-central:nsprpub/pr/src/pthreads/ptthread.c:6c55ba30c85897a828e03a9b0b05921cb8917b35|201|0x9
37|11|libc.so||||0xe42c5
37|12|libc.so||||0x785f8
37|13|libc.so||||0x5ac27
37|14|libc.so||||0xe4260
37|15|libnss3.so|pt_recvfrom_cont|hg:hg.mozilla.org/mozilla-central:nsprpub/pr/src/pthreads/ptio.c:6c55ba30c85897a828e03a9b0b05921cb8917b35|996|0x22
Flags: in-testsuite?
Component: Audio/Video → Audio/Video: MediaStreamGraph
Flags: needinfo?(cchang)

This implies mPendingData.GetDuration() is not 0 and ProcessInput asks to process more frames than NotifyInputData provides.

I am not able to reproduce this on Linux by the testcase.html. I'll try to reproduce it on Android.

Assignee: nobody → cchang
Severity: -- → S4
Flags: needinfo?(cchang)
Regressions: 1741959
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: