#1003736 chromium: Casting via website provided app causes crash

Package:
chromium
Source:
chromium
Description:
web browser
Submitter:
Kyle Robbertze
Date:
2022-01-21 00:51:02 UTC
Severity:
normal
#1003736#5
Date:
2022-01-14 17:45:16 UTC
From:
To:
Dear Maintainer,

When casting a webpage to a Chromecast, Chromium crashes with the
following error:

free(): double free detected in tcache 2
[0114/193804.521131:ERROR:elf_dynamic_array_reader.h(64)] tag not found
[2928:2948:0114/193804.608997:ERROR:broker_posix.cc(40)] Recvmsg error: Connection reset by peer (104)
fish: Job 1, 'chromium' terminated by signal SIGABRT (Abort)

This is a new issue since the last update to unstable. Casting the tab
works, however using the website-provided app triggers the crash. It can
be replicated by opening a YouTube video, click on the cast icon and select
a Chromecast. It will crash after connecting (i.e. YouTube's dashboard
is displayed on the TV) while trying to start playing the video.
#1003736#10
Date:
2022-01-15 00:27:49 UTC
From:
To:
On Fri, 14 Jan 2022 19:45:16 +0200 Kyle Robbertze wrote:
 > Package: chromium
 > Version: 97.0.4692.71-0.1
 > Severity: normal
 >
 > Dear Maintainer,
 >
 > When casting a webpage to a Chromecast, Chromium crashes with the
 > following error:
 >
 > free(): double free detected in tcache 2
 > [0114/193804.521131:ERROR:elf_dynamic_array_reader.h(64)] tag not found
 > [2928:2948:0114/193804.608997:ERROR:broker_posix.cc(40)] Recvmsg
error: Connection reset by peer (104)
 > fish: Job 1, 'chromium' terminated by signal SIGABRT (Abort)
 >
 > This is a new issue since the last update to unstable. Casting the tab
 > works, however using the website-provided app triggers the crash. It can
 > be replicated by opening a YouTube video, click on the cast icon and
select
 > a Chromecast. It will crash after connecting (i.e. YouTube's dashboard
 > is displayed on the TV) while trying to start playing the video.
 >

I can't reproduce this, since I don't have a device to cast to. Can you
please "sudo apt-get install gdb", run "chromium -g", type "run" in gdb,
do your youtube app casting, and then "bt" in gdb when it crashes. The
backtrace may show us some more useful info.
#1003736#15
Date:
2022-01-21 00:47:59 UTC
From:
To:
On Fri, 14 Jan 2022 19:27:49 -0500 Andres Salomon wrote:
 > On Fri, 14 Jan 2022 19:45:16 +0200 Kyle Robbertze wrote:
 > > Package: chromium
 > > Version: 97.0.4692.71-0.1
 > > Severity: normal
 > >
 > > Dear Maintainer,
 > >
 > > When casting a webpage to a Chromecast, Chromium crashes with the
 > > following error:
 > >
 > > free(): double free detected in tcache 2
 > > [0114/193804.521131:ERROR:elf_dynamic_array_reader.h(64)] tag not found
 > > [2928:2948:0114/193804.608997:ERROR:broker_posix.cc(40)] Recvmsg
 > error: Connection reset by peer (104)
 > > fish: Job 1, 'chromium' terminated by signal SIGABRT (Abort)
 > >
 > > This is a new issue since the last update to unstable. Casting the tab
 > > works, however using the website-provided app triggers the crash.
It can
 > > be replicated by opening a YouTube video, click on the cast icon and
 > select
 > > a Chromecast. It will crash after connecting (i.e. YouTube's dashboard
 > > is displayed on the TV) while trying to start playing the video.
 > >
 >
 > I can't reproduce this, since I don't have a device to cast to. Can you
 > please "sudo apt-get install gdb", run "chromium -g", type "run" in gdb,
 > do your youtube app casting, and then "bt" in gdb when it crashes. The
 > backtrace may show us some more useful info.


Also, chromium's development branch (99.0.4818.0-0.1) is now in
experimental. Please let me know if your issue is solved with this version.