[Webkit-unassigned] [Bug 192697] New: [GStreamer] Crash in webrtc::RTCStatsReport::AddStats

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Dec 14 04:20:58 PST 2018


https://bugs.webkit.org/show_bug.cgi?id=192697

            Bug ID: 192697
           Summary: [GStreamer] Crash in webrtc::RTCStatsReport::AddStats
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Media Elements
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at igalia.com
                CC: bugs-noreply at webkitgtk.org

I tried to join a Jitsi Meet meeting (using Igalia's Jitsi Meet) instance using a debug MiniBrowser built using build-webkit. After entering the meeting password, WebKit crashed immediately.

$ run-minibrowser --gtk
Starting MiniBrowser.
GLib-GIO-Message: 06:14:48.200: Using the 'memory' GSettings backend.  Your settings will not be saved or shared with other applications.
GLib-GIO-Message: 06:14:48.526: Using the 'memory' GSettings backend.  Your settings will not be saved or shared with other applications.
GLib-GIO-Message: 06:14:48.829: Using the 'memory' GSettings backend.  Your settings will not be saved or shared with other applications.
(delay_based_bwe.cc:311): BWE Setting start bitrate to: 300000
(webrtcvoiceengine.cc:1614): Unknown codec opus/48000/2 { minptime=10 useinbandfec=1 } (111)
(webrtcmediaengine.cc:168): Unsupported RTP extension: {uri: urn:ietf:params:rtp-hdrext:sdes:rtp-stream-id, id: 4}
(delay_based_bwe.cc:311): BWE Setting start bitrate to: 800000


#
# Fatal error in ../../Source/ThirdParty/libwebrtc/Source/webrtc/stats/rtcstatsreport.cc, line 75
# last system error: 0
# Check failed: result.second
# A stats object with ID RTCMediaStreamTrack_receiver_0 is already present in this stats report.
#

==== C stack trace ===============================

 1: rtc::FatalMessage::~FatalMessage()
 2: webrtc::RTCStatsReport::AddStats(std::unique_ptr<webrtc::RTCStats const, std::default_delete<webrtc::RTCStats const> >)
/home/mcatanzaro/Projects/WebKit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37(+0xc102c35) [0x7fbf22106c35]
 4: webrtc::RTCStatsCollector::ProduceMediaStreamAndTrackStats_s(long, webrtc::RTCStatsReport*) const
 5: webrtc::RTCStatsCollector::ProducePartialResultsOnSignalingThread(long)
 6: webrtc::RTCStatsCollector::GetStatsReport(rtc::scoped_refptr<webrtc::RTCStatsCollectorCallback>)
 7: webrtc::PeerConnection::GetStats(webrtc::RTCStatsCollectorCallback*)
 8: void webrtc::ReturnType<void>::Invoke<webrtc::PeerConnectionInterface, void (webrtc::PeerConnectionInterface::*)(webrtc::RTCStatsCollectorCallback*), webrtc::RTCStatsCollectorCallback*>(webrtc::PeerConnectionInterface*, void (webrtc::PeerConnectionInterface::*)(webrtc::RTCStatsCollectorCallback*), webrtc::RTCStatsCollectorCallback*)
 9: webrtc::MethodCall1<webrtc::PeerConnectionInterface, void, webrtc::RTCStatsCollectorCallback*>::OnMessage(rtc::Message*)
10: webrtc::internal::SynchronousMethodCall::OnMessage(rtc::Message*)
11: rtc::MessageQueue::Dispatch(rtc::Message*)
12: rtc::Thread::ProcessMessages(int)
13: rtc::Thread::Run()
14: rtc::Thread::PreRun(void*)
/lib64/libpthread.so.0(+0x858e) [0x7fbf1020958e]
16: clone



The crash is on a secondary thread so the backtrace is relatively simple:

#0  0x00007fbf0e76c53f in raise () from /lib64/libc.so.6
No symbol table info available.
#1  0x00007fbf0e756895 in abort () from /lib64/libc.so.6
No symbol table info available.
#2  0x00007fbf21e6c521 in rtc::FatalMessage::~FatalMessage (
    this=0x7fbde97fb460, __in_chrg=<optimized out>)
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/rtc_base/checks.cc:125
No locals.
#3  0x00007fbf21ea706b in webrtc::RTCStatsReport::AddStats (
    this=0x7fbc586a3650, stats=std::unique_ptr<const webrtc::RTCStats> = {...})
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/stats/rtcstatsreport.cc:75
        result = {first = 
    {first = "RTCMediaStreamTrack_receiver_0", second = std::unique_ptr<const webrtc::RTCStats> = {get() = 0x7fbc586a5510}}, second = false}
#4  0x00007fbf22106c35 in webrtc::(anonymous namespace)::ProduceReceiverMediaTrackStats (timestamp_us=1544789780959336, track_media_info_map=..., 
    receivers=std::vector of length 8, capacity 8 = {...}, 
    report=0x7fbc586a3650)
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/pc/rtcstatscollector.cc:610
        track = 0x7fbc5869f240
        video_receiver_info = 0x7fbc586a1ed8
        video_track_stats = std::unique_ptr<webrtc::RTCMediaStreamTrackStats> = {get() = 0x0}
        receiver = {ptr_ = 0x7fbc5869f280}
        __for_range = std::vector of length 8, capacity 8 = {{
            ptr_ = 0x7fbc5869d7a0}, {ptr_ = 0x7fbc5869dc80}, {
            ptr_ = 0x7fbc5869e200}, {ptr_ = 0x7fbc5869ed20}, {
            ptr_ = 0x7fbc5869f280}, {ptr_ = 0x7fbc5869f950}, {
            ptr_ = 0x7fbc5869ffa0}, {ptr_ = 0x7fbc586a03c0}}
        __for_begin = {ptr_ = 0x7fbc5869f280}
        __for_end = {ptr_ = 0x0}
#5  0x00007fbf2210b0f4 in webrtc::RTCStatsCollector::ProduceMediaStreamAndTrackStats_s (this=0x7fbc580909e0, timestamp_us=1544789780959336, 
    report=0x7fbc586a3650)
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/pc/rtcstatscollector.cc:1019
No locals.
#6  0x00007fbf22108d10 in webrtc::RTCStatsCollector::ProducePartialResultsOnSignalingThread (this=0x7fbc580909e0, timestamp_us=1544789780959336)
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/pc/rtcstatscollector.cc:773
        report = {ptr_ = 0x7fbc586a3650}
#7  0x00007fbf221089a4 in webrtc::RTCStatsCollector::GetStatsReport (
    this=0x7fbc580909e0, callback=...)
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/pc/rtcstatscollector.cc:746
        timestamp_us = 1544789780959336
        cache_now_us = 223975051893
        __FUNCTION__ = "GetStatsReport"
#8  0x00007fbf220b8c93 in webrtc::PeerConnection::GetStats (
    this=0x7fbc5808fa60, callback=0x15abce0)
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/pc/peerconnection.cc:1473
No locals.
#9  0x00007fbf21e15760 in webrtc::ReturnType<void>::Invoke<webrtc::PeerConnectionInterface, void (webrtc::PeerConnectionInterface::*)(webrtc::RTCStatsCollectorCallback*), webrtc::RTCStatsCollectorCallback*> (this=0x7fbde87fa5e0, 
    c=0x7fbc5808fa60, 
    m=&virtual webrtc::PeerConnectionInterface::GetStats(webrtc::RTCStatsCollectorCallback*), a1=0x15abce0)
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/api/proxy.h:106
No locals.
#10 0x00007fbf21e13157 in webrtc::MethodCall1<webrtc::PeerConnectionInterface, void, webrtc::RTCStatsCollectorCallback*>::OnMessage (this=0x7fbde87fa590)
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/api/proxy.h:193
No locals.
#11 0x00007fbf21db471c in webrtc::internal::SynchronousMethodCall::OnMessage (
    this=0x7fbde87fa550)
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/api/proxy.cc:33
No locals.
#12 0x00007fbf21e74bcc in rtc::MessageQueue::Dispatch (this=0xfe4800, 
    pmsg=0x7fbde97fc950)
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/rtc_base/messagequeue.cc:531
        trace_event_unique_catstatic529 = 0x7fbf24931cf8 ""
        trace_event_unique_profileScope529 = {p_data_ = 0x0, data_ = {
            category_enabled = 0x702578302000 <error: Cannot access memory at address 0x702578302000>, name = 0x0}}
        start_time = 223975051
        end_time = 223974788
        diff = -1
#13 0x00007fbf21e9dfa2 in rtc::Thread::ProcessMessages (this=0xfe4800, 
    cmsLoop=-1)
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/rtc_base/thread.cc:485
        msg = {posted_from = {
            function_name_ = 0x7fbf248f0978 <webrtc::PeerConnectionProxyWithInternal<webrtc::PeerConnectionInterface>::GetStats(webrtc::RTCStatsCollectorCallback*)::__FUNCTION__> "GetStats", 
            file_and_line_ = 0x7fbf248ef2a8 "../../Source/ThirdParty/libwebrtc/Source/webrtc/api/peerconnectionproxy.h:72"}, phandler = 0x7fbde87fa558, 
          message_id = 0, pdata = 0x0, ts_sensitive = 0}
        msEnd = 0
        cmsNext = -1
#14 0x00007fbf21e9d519 in rtc::Thread::Run (this=0xfe4800)
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/rtc_base/thread.cc:314
No locals.
#15 0x00007fbf21e9d4d6 in rtc::Thread::PreRun (pv=0x1529150)
    at ../../Source/ThirdParty/libwebrtc/Source/webrtc/rtc_base/thread.cc:301
        init = 0x1529150
#16 0x00007fbf1020958e in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#17 0x00007fbf0e8316a3 in clone () from /lib64/libc.so.6
No symbol table info available.
Undefined command: "exit".  Try "help".

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20181214/cfb2ef33/attachment-0001.html>


More information about the webkit-unassigned mailing list