New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 824638 link

Starred by 2 users

Issue metadata

Status: Verified
Owner:
Closed: Jun 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug-Regression



Sign in to add a comment

CHECK failure: 0 < AvaliableSpace() in aec_core.cc

Project Member Reported by ClusterFuzz, Mar 22 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5314432394330112

Fuzzer: libFuzzer_audio_processing_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  0 < AvaliableSpace() in aec_core.cc
  rtc::FatalMessage::~FatalMessage
  webrtc::BlockBuffer::ExtractExtendedBlock
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=540793:540796

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5314432394330112

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
 
Cc: brajkumar@chromium.org
Components: Blink>WebRTC>Audio
Labels: -Type-Bug M-67 Test-Predator-Wrong Type-Bug-Regression
Owner: aleloi@chromium.org
Status: Assigned (was: Untriaged)
This issue looks similar to  bug  814314 , hence assigning to the same owner for more updates.

aleloi@ Could you please take a look in to this issue?

Thanks!

Comment 2 by aleloi@chromium.org, Mar 22 2018

Status: Started (was: Assigned)
I'm aware of it. Slowly working on a fix: https://webrtc-review.googlesource.com/c/src/+/60482
Should this be bumped to M69?
Please, fix this ASAP. Ask for help if needed. Thanks!
Project Member

Comment 5 by ClusterFuzz, Jun 19 2018

ClusterFuzz has detected this issue as fixed in range 567943:567948.

Detailed report: https://clusterfuzz.com/testcase?key=5314432394330112

Fuzzer: libFuzzer_audio_processing_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  0 < AvaliableSpace() in aec_core.cc
  rtc::FatalMessage::~FatalMessage
  webrtc::BlockBuffer::ExtractExtendedBlock
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=540793:540796
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=567943:567948

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5314432394330112

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 6 by ClusterFuzz, Jun 19 2018

Labels: ClusterFuzz-Verified
Status: Verified (was: Started)
ClusterFuzz testcase 5314432394330112 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
Project Member

Comment 7 by bugdroid1@chromium.org, Jun 19 2018

The following revision refers to this bug:
  https://webrtc.googlesource.com/src.git/+/8a5edb2568e0f21cec3a02c50429dca712910729

commit 8a5edb2568e0f21cec3a02c50429dca712910729
Author: Alex Loiko <aleloi@webrtc.org>
Date: Tue Jun 19 10:24:55 2018

Always enable 'delay-agnostic' in APM fuzzer.

This 'fixes' a bug in the non-delay-agnostic code by not fuzzing it.
We plan to always enable the delay-agnostic feature. In Chrome,
delay-agnostic mode is always on:
https://cs.chromium.org/chromium/src/content/renderer/media/stream/media_stream_audio_processor.cc?l=579

Bug:  chromium:824638   webrtc:9423 
Change-Id: I3d9cac2bc11857fd55549d13c52db4c99dec956c
Reviewed-on: https://webrtc-review.googlesource.com/83984
Commit-Queue: Alex Loiko <aleloi@webrtc.org>
Reviewed-by: Sam Zackrisson <saza@webrtc.org>
Cr-Commit-Position: refs/heads/master@{#23651}
[modify] https://crrev.com/8a5edb2568e0f21cec3a02c50429dca712910729/test/fuzzers/audio_processing_configs_fuzzer.cc

Project Member

Comment 8 by bugdroid1@chromium.org, Jun 20 2018

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/56be636374195e020d6e0dfb50ba383b320d60f9

commit 56be636374195e020d6e0dfb50ba383b320d60f9
Author: webrtc-chromium-autoroll <webrtc-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com>
Date: Wed Jun 20 01:18:30 2018

Roll src/third_party/webrtc 790da37b72f9..66cadcc6b924 (19 commits)

https://webrtc.googlesource.com/src.git/+log/790da37b72f9..66cadcc6b924


git log 790da37b72f9..66cadcc6b924 --date=short --no-merges --format='%ad %ae %s'
2018-06-19 danilchap@webrtc.org Replace rtc::Optional with absl::optional in pc
2018-06-19 buildbot@webrtc.org Roll chromium_revision c27ef6f9f6..6e14efc13e (568443:568572)
2018-06-19 deadbeef@webrtc.org Return SSRC stats with the old stats API when SSRCs are unsignaled.
2018-06-19 philipel@webrtc.org Clean up in module_common_types.h by removing the unused struct RTPAudioHeader.
2018-06-19 nisse@webrtc.org Add setter method EncodedFrame::SetTimestamp.
2018-06-19 buildbot@webrtc.org Roll chromium_revision 9d565db4c0..c27ef6f9f6 (568343:568443)
2018-06-19 phensman@webrtc.org Add separate native library for instrumentationtests
2018-06-19 danilchap@webrtc.org Add Parsing/Building generic frame descriptor extension
2018-06-19 nisse@webrtc.org Add nisse@ as owner of api/video/
2018-06-19 yvesg@webrtc.org Reformat the WebRTC code base
2018-06-19 danilchap@webrtc.org Replace rtc::Optional with absl::optional in modules/audio_coding
2018-06-19 gustaf@webrtc.org AEC3: Unittests for MovingAverage
2018-06-19 nisse@webrtc.org Drop tools/gyp from dependencies
2018-06-19 aleloi@webrtc.org Cover AecDump calls in APM fuzzer.
2018-06-19 gustaf@webrtc.org AEC3: Average the spectrum of multiple nearend frames in the suppressor.
2018-06-19 nisse@webrtc.org Delete picture id and tl0 index from CodecSpecificInfo.
2018-06-19 danilchap@webrtc.org Replace rtc::Optional with absl::optional in modules/audio processing
2018-06-19 magjed@webrtc.org Android: Simlify createOesTextureBuffer() in VideoFrameBufferTest
2018-06-19 aleloi@webrtc.org Always enable 'delay-agnostic' in APM fuzzer.


Created with:
  gclient setdep -r src/third_party/webrtc@66cadcc6b924

The AutoRoll server is located here: https://webrtc-chromium-roll.skia.org

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+/master/autoroll/README.md

If the roll is causing failures, please contact the current sheriff, who should
be CC'd on the roll, and stop the roller if necessary.

CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.mac:mac_chromium_archive_rel_ng

BUG=chromium:None,chromium:none,chromium:None,chromium:None,chromium:853699,chromium:853699,chromium:824638 webrtc:9423
TBR=webrtc-chromium-sheriffs-robots@google.com

Change-Id: I0aa4269fd97a57bb9c4e5e326670ff92848c8d82
Reviewed-on: https://chromium-review.googlesource.com/1107178
Commit-Queue: Emircan Uysaler <emircan@chromium.org>
Reviewed-by: webrtc-chromium-autoroll <webrtc-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com>
Cr-Commit-Position: refs/heads/master@{#568679}
[modify] https://crrev.com/56be636374195e020d6e0dfb50ba383b320d60f9/DEPS

Cc: peah@chromium.org yutak@chromium.org olka@chromium.org tommi@chromium.org mcasas@chromium.org maxmorin@chromium.org
 Issue 696838  has been merged into this issue.

Sign in to add a comment