firefox-30.0_1,1 crash youtube HTML5 videos

[Joseph Olatt]

On Mon, Jul 07, 2014 at 08:03:26PM +0200, Tijl Coosemans wrote:
> On Mon, 7 Jul 2014 08:57:42 -0700 Joseph Olatt wrote:
> > On Mon, Jul 07, 2014 at 11:43:23AM +0200, Tijl Coosemans wrote:
> > > On Mon, 7 Jul 2014 02:04:51 -0700 Joseph Olatt wrote:
> > > > Was wondering if anybody else was encountering Firefox crashing when
> > > > attempting to play HTML5 youtube videos? 
> > > > 
> > > > The system is: 
> > > > 
> > > >   FreeBSD peace 10.0-STABLE FreeBSD 10.0-STABLE #1 r266948: Mon Jun  2
> > > >   14:12:35 CDT 2014     root at peace:/usr/obj/usr/src/sys/PEACE  i386
> > > > 
> > > > and Firefox is being built from source. Compiling with debug symbols and
> > > > getting a backtrace on the core provides:
> > > > 
> > > > 
> > > > (gdb) GNU gdb 6.1.1 [FreeBSD]
> > > > <snip>
> > > > [New Thread 28501080 (LWP 100126/firefox)]
> > > > (gdb) bt
> > > > #0  0x39144f52 in ff_ac3dsp_init_x86 () from /usr/local/lib/gstreamer-1.0/libgstlibav.so
> > > > #1  0x00000000 in ?? ()
> > > > (gdb) 
> > > 
> > > Can you build gstreamer1-libav with debug symbols and regenerate this
> > > backtrace?  Also, what cpu is this running on?  Did you set CPUTYPE or
> > > CFLAGS in /etc/make.conf?
> > 
> > Tijl,
> > 
> > Thanks for responding. 
> > 
> > Strange things happen... I did the following:
> > 
> > (1) I re-compiled gstreamer1-libav *with* debug symbols. 
> > (2) Started Firefox, went to youtube and played a HTML5 video. It played 
> >     fine. Firefox did not crash.
> > (3) I re-compiled gstreamer1-libav *without* debug symbols.
> > (4) I repeated step #2. Firefox crashed at the same location as before.
> > (5) Repeated step #3. No crash. Strange...
> > 
> > The processor type is:
> > 
> >   CPU: Intel(R) Core(TM)2 CPU         T5600  @ 1.83GHz (1828.80-MHz 686-class CPU)
> >     Origin = "GenuineIntel"  Id = 0x6f6  Family = 0x6  Model = 0xf Stepping = 6
> > 
> > Full dmesg output is at: 
> > 
> >   http://www.eskimo.com/~joji/dmesg.txt
> > 
> > 
> > Looks like there is a bug in gstreamer1-libav. Just don't know how to
> > find it if it doesn't show up when debug symbols included..
> > 
> > Suggestions?
> 
> Try to build gstreamer1-libav with:
> 
> make WITH_DEBUG=yes DEBUG_FLAGS="-O2 -ggdb" install

Hope the below helps:

(gdb) bt
#0  .text () at libavcodec/x86/h264_deblock.asm:504
#1  0x3a505b45 in loop_filter (h=0x10, start_x=3, end_x=989936568) at
libavcodec/h264.c:3601
#2  0x3a50423f in decode_slice (avctx=0x3a191200, arg=<value optimized
out>)
    at libavcodec/h264.c:3772
#3  0x3a503d8f in execute_decode_slices (h=0x3b011000) at
libavcodec/h264.c:3840
#4  0x3a4ee5fa in decode_nal_units (h=<value optimized out>, buf=0x3
<Address 0x3 out of bounds>, 
    buf_size=<value optimized out>) at libavcodec/h264.c:4129
#5  0x3a4ff31e in decode_frame (avctx=<value optimized out>,
avpkt=<value optimized out>)
    at libavcodec/h264.c:4219
#6  0x3a61c8e5 in frame_worker_thread (arg=0x3a13f000) at
libavcodec/pthread.c:384
#7  0x2817366c in pthread_create () from /lib/libthr.so.3
#8  0x00000000 in ?? ()
Current language:  auto; currently asm
(gdb)                                                                                                


Full output of backtrace at:
  http://www.eskimo.com/~joji/firefox-gdb-2.txt