Issue 514559 in chromium: CRAS dev_stream_set_delay crash

[chro...@googlecode.com]

Status: Available
Owner: ----
CC: chin...@chromium.org, hyc...@chromium.org, cychi...@chromium.org,
dgr...@chromium.org, conra...@chromium.org
Labels: Type-Bug Pri-2 Cr-OS-Kernel-Audio OS-chrome

New issue 514559 by chin...@chromium.org: CRAS dev_stream_set_delay crash
https://code.google.com/p/chromium/issues/detail?id=514559

There 2 new reports of crashes in dev_stream_set_delay
They are both first seen in 7077.76.0 and only occur on SNOW.



Thread 0 CRASHED [SIGSEGV @ 0x00000000 ]MAGIC SIGNATURE THREAD
0xb6fe75bc [cras -dev_stream.c:560 ] dev_stream_set_delay
0xb6fca679 [cras -audio_thread.c:622 ] audio_io_thread
0xb6f7b6c9 [libpthread-2.19.so -pthread_create.c:311 ] start_thread
0xb6d9f2fb [libc-2.19.so + 0x0009e2fb ] clone



Thread 0 CRASHED [SIGABRT @ 0x00000000 ]MAGIC SIGNATURE THREAD
0xb6d1e636 [libc-2.19.so + 0x00016636 ]
0xb6d2e323 [libc-2.19.so -raise.c:56 ] raise
0xb6d2f30f [libc-2.19.so -abort.c:89 ] abort
0xb6d5a875 [libc-2.19.so -libc_fatal.c:175 ] __libc_message
0xb6db282d [libc-2.19.so -fortify_fail.c:31 ] __fortify_fail
0xb6db27ff [libc-2.19.so -stack_chk_fail.c:28 ] __stack_chk_fail
0xb6fee6d9 [cras -dev_stream.c:560 ] dev_stream_set_delay
0xb6fd1679 [cras -audio_thread.c:622 ] audio_io_thread
0xb6f826c9 [libpthread-2.19.so -pthread_create.c:311 ] start_thread
0xb6da62fb [libc-2.19.so + 0x0009e2fb ] clone


--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[chro...@googlecode.com]

Updates:
Status: Assigned
Owner: hyc...@chromium.org

Comment #1 on issue 514559 by hyc...@chromium.org: CRAS
dev_stream_set_delay crash
https://code.google.com/p/chromium/issues/detail?id=514559

(No comment was entered for this change.)

[chro...@googlecode.com]

Comment #2 on issue 514559 by hyc...@chromium.org: CRAS
dev_stream_set_delay crash
https://code.google.com/p/chromium/issues/detail?id=514559

(gdb) bt
#0 0xb6fc65bc in dev_stream_set_delay
(dev_stream=dev_stream@entry=0xb5b00590,
delay_frames=delay_frames@entry=3058306976)
at server/dev_stream.c:560
#1 0xb6fa967a in fetch_streams (thread=<optimized out>, adev=<optimized
out>) at server/audio_thread.c:622
#2 output_stream_fetch (thread=<optimized out>) at
server/audio_thread.c:1119
#3 stream_dev_io (thread=0xb64a1460) at server/audio_thread.c:1446
#4 audio_io_thread (arg=0xb64a1460) at server/audio_thread.c:1517
#5 0xb6f5a6ca in ?? ()

Note that delay_frames is 3058306976 from minidump, and 3057573792 in the
other crash. It's not clear how the crash happened.

[chro...@googlecode.com]

Comment #3 on issue 514559 by cychi...@chromium.org: CRAS
dev_stream_set_delay crash
https://code.google.com/p/chromium/issues/detail?id=514559

I reproduced this on peach_pit latest R46 7390.17.0 image.
I played google music and open 15 tabs.


Program terminated with signal SIGSEGV, Segmentation fault.
#0 0xb6f50334 in dev_stream_set_delay
(dev_stream=dev_stream@entry=0xb5b04618,
delay_frames=delay_frames@entry=3057799072)
at server/dev_stream.c:565
565 server/dev_stream.c: No such file or directory.
(gdb) bt
#0 0xb6f50334 in dev_stream_set_delay
(dev_stream=dev_stream@entry=0xb5b04618,
delay_frames=delay_frames@entry=3057799072)
at server/dev_stream.c:565
#1 0xb6f32368 in fetch_streams (thread=<optimized out>, adev=<optimized
out>) at server/audio_thread.c:604

#2 output_stream_fetch (thread=<optimized out>) at

server/audio_thread.c:1074

[chro...@googlecode.com]

Comment #4 on issue 514559 by cychi...@chromium.org: CRAS
dev_stream_set_delay crash
https://code.google.com/p/chromium/issues/detail?id=514559

Attach the core file and cras.debug

core file:

https://drive.google.com/a/google.com/file/d/0B8wq2Jyx2rnGbnJ4ZzRnbC1IYzA/view?usp=sharing


Attachments:
cras.debug 1.2 MB

[chro...@googlecode.com]

Updates:
Labels: -Pri-2 Pri-1

Comment #5 on issue 514559 by dgr...@chromium.org: CRAS
dev_stream_set_delay crash
https://code.google.com/p/chromium/issues/detail?id=514559

This is by far causing the most crashes on the latest stable build. Looks
like ARM only.