257892 2023-06-09 08:54:39 -0700 MS Teams browser meeting IncomingAudioMediaStreamTrackRendererUnit crashes with failed: Bad bounds passed to std::clamp 2023-06-13 05:05:39 -0700 1 1 1 Unclassified WebKit Canvas WebKit Local Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 kkinnunen kkinnunen dino webkit-bug-importer oldest_to_newest 1960745 0 kkinnunen 2023-06-09 08:54:39 -0700 MS Teams browser meeting IncomingAudioMediaStreamTrackRendererUnit crashes with failed: Bad bounds passed to std::clamp 1960746 1 kkinnunen 2023-06-09 08:55:09 -0700 <rdar://110382833> 1960747 2 kkinnunen 2023-06-09 08:55:32 -0700 Attached two reproductions of invalid synchronization algorithm for the time bounds 1960748 3 466648 kkinnunen 2023-06-09 08:56:18 -0700 Created attachment 466648 invalid algorithm reproduction 1 1960749 4 466649 kkinnunen 2023-06-09 08:56:42 -0700 Created attachment 466649 invalid algorithm reproduction 2 (simpler example) 1960764 5 kkinnunen 2023-06-09 09:25:55 -0700 Pull request: https://github.com/WebKit/WebKit/pull/14813 1961295 6 ews-feeder 2023-06-13 05:05:37 -0700 Committed 265117@main (6dc46a71a3e1): <https://commits.webkit.org/265117@main> Reviewed commits have been landed. Closing PR #14813 and removing active labels. 466648 2023-06-09 08:56:18 -0700 2023-06-09 08:56:18 -0700 invalid algorithm reproduction 1 atomics-ringbuffer-audio.cpp text/x-csrc 1602 kkinnunen Ly8gYysrIC1zdGQ9YysrMjAgYXRvbWljcy1yaW5nYnVmZmVyLWF1ZGlvLmNwcCAtbyBhdG9taWNz LXJpbmdidWZmZXItYXVkaW8gLWcgLU8zCiNpbmNsdWRlIDxhdG9taWM+CiNpbmNsdWRlIDx0aHJl YWQ+CgpzdHJ1Y3QgVGltZUJvdW5kcyB7CiAgICB1aW50NjRfdCBzdGFydEZyYW1lIHsgMCB9Owog ICAgdWludDY0X3QgZW5kRnJhbWUgeyAwIH07Cn07Cgpjb25zdGV4cHIgc2l6ZV90IGJvdW5kc0J1 ZmZlclNpemUgPSAzMjsKCnN0cnVjdCBUaW1lQm91bmRzQnVmZmVyIHsKICAgIFRpbWVCb3VuZHMg YnVmZmVyW2JvdW5kc0J1ZmZlclNpemVdOwogICAgc3RkOjphdG9taWM8dW5zaWduZWQ+IGluZGV4 IHsgMCB9Owp9OwoKdm9pZCBwcm9kdWNlcihUaW1lQm91bmRzQnVmZmVyJiBiKQp7CiAgICBzaXpl X3QgcyA9IDA7CiAgICBzaXplX3QgZSA9IDA7CiAgICBmb3IgKDs7KSB7CiAgICAgICAgdW5zaWdu ZWQgaW5kZXggPSBiLmluZGV4ICsgMTsKICAgICAgICBiLmJ1ZmZlcltpbmRleCAlIGJvdW5kc0J1 ZmZlclNpemVdID0geyArK3MsICsrZSB9OwogICAgICAgIGIuaW5kZXggPSBpbmRleDsKICAgIH0K fQoKdm9pZCBjb25zdW1lcihUaW1lQm91bmRzQnVmZmVyJiBiKQp7CiAgICBUaW1lQm91bmRzIG1h eEJvdW5kczsKICAgIHVuc2lnbmVkIG1heEluZGV4ID0gMDsKICAgIGZvciAoOzspIHsKICAgICAg ICB1bnNpZ25lZCBpbmRleCA9IGIuaW5kZXg7CiAgICAgICAgYXV0byBib3VuZHMgPSBiLmJ1ZmZl cltpbmRleCAlIGJvdW5kc0J1ZmZlclNpemVdOwogICAgICAgIGlmIChib3VuZHMuc3RhcnRGcmFt ZSA8IG1heEJvdW5kcy5zdGFydEZyYW1lKSB7CiAgICAgICAgICAgIGZwcmludGYoc3RkZXJyLCAi c3RhcnQ6JWxsdSBtYXguc3RhcnQ6JWxsdSBpbmRleDoldSBtYXhJbmRleDoldVxuIiwgYm91bmRz LnN0YXJ0RnJhbWUsIG1heEJvdW5kcy5zdGFydEZyYW1lLCBpbmRleCwgbWF4SW5kZXgpOwogICAg ICAgICAgICBhYm9ydCgpOwogICAgICAgIH0KICAgICAgICBpZiAoYm91bmRzLmVuZEZyYW1lIDwg bWF4Qm91bmRzLmVuZEZyYW1lKSB7CiAgICAgICAgICAgIGZwcmludGYoc3RkZXJyLCAiZW5kOiVs bHUgbWF4LmVuZDolbGx1IGluZGV4OiV1IG1heEluZGV4OiV1XG4iLCBib3VuZHMuZW5kRnJhbWUs IG1heEJvdW5kcy5lbmRGcmFtZSwgaW5kZXgsIG1heEluZGV4KTsKICAgICAgICAgICAgYWJvcnQo KTsKICAgICAgICB9CiAgICAgICAgaWYgKGJvdW5kcy5zdGFydEZyYW1lID4gYm91bmRzLmVuZEZy YW1lKSB7CiAgICAgICAgICAgIGZwcmludGYoc3RkZXJyLCAic3RhcnQ6JWxsdSBlbmQ6JWxsdSBp bmRleDoldSBtYXhJbmRleDoldVxuIiwgYm91bmRzLnN0YXJ0RnJhbWUsIGJvdW5kcy5lbmRGcmFt ZSwgaW5kZXgsIG1heEluZGV4KTsKICAgICAgICAgICAgYWJvcnQoKTsKICAgICAgICB9CiAgICAg ICAgbWF4Qm91bmRzID0gYm91bmRzOwogICAgICAgIG1heEluZGV4ID0gaW5kZXg7CiAgICB9Cn0K CmludCBtYWluKGludCwgY2hhcioqKQp7CiAgICBUaW1lQm91bmRzQnVmZmVyIGI7CiAgICBzdGQ6 OnRocmVhZCB0MihbJl17cHJvZHVjZXIoYik7fSk7CiAgICBjb25zdW1lcihiKTsKICAgIHJldHVy biAwOwp9 466649 2023-06-09 08:56:42 -0700 2023-06-09 08:56:42 -0700 invalid algorithm reproduction 2 (simpler example) atomics-ringbuffer-audio2.cpp text/x-csrc 1017 kkinnunen Ly8gYysrIC1zdGQ9YysrMjAgYXRvbWljcy1yaW5nYnVmZmVyLWF1ZGlvMi5jcHAgLW8gYXRvbWlj cy1yaW5nYnVmZmVyLWF1ZGlvMiAtZyAtTzMgJiYgLi9hdG9taWNzLXJpbmdidWZmZXItYXVkaW8y CiNpbmNsdWRlIDxhdG9taWM+CiNpbmNsdWRlIDx0aHJlYWQ+Cgpjb25zdGV4cHIgc2l6ZV90IGJv dW5kc0J1ZmZlclNpemUgPSAzMjsKCnN0cnVjdCBCb3VuZHMgewogICAgc3RkOjphdG9taWM8dWlu dDY0X3Q+IGJ1ZmZlcltib3VuZHNCdWZmZXJTaXplXSB7IH07CiAgICBzdGQ6OmF0b21pYzx1bnNp Z25lZD4gaW5kZXggeyAwIH07Cn07Cgp2b2lkIHByb2R1Y2VyKEJvdW5kcyYgYikKewogICAgdW5z aWduZWQgaW5kZXggPSAwOwogICAgZm9yICg7OykgewogICAgICAgIGIuYnVmZmVyW2luZGV4ICUg Ym91bmRzQnVmZmVyU2l6ZV0gPSBpbmRleDsKICAgICAgICBiLmluZGV4ID0gaW5kZXg7CiAgICAg ICAgKytpbmRleDsKICAgIH0KfQoKdm9pZCBjb25zdW1lcihCb3VuZHMmIGIpCnsKICAgIHVpbnQ2 NF90IG1heEJvdW5kcyA9IDA7CiAgICBzaXplX3QgbWF4SW5kZXggPSAwOwogICAgZm9yICg7Oykg ewogICAgICAgIHNpemVfdCBpbmRleCA9IGIuaW5kZXg7CiAgICAgICAgdWludDY0X3QgYm91bmRz ID0gYi5idWZmZXJbaW5kZXggJSBib3VuZHNCdWZmZXJTaXplXTsKICAgICAgICBpZiAoYm91bmRz IDwgbWF4Qm91bmRzKSB7CiAgICAgICAgICAgIGZwcmludGYoc3RkZXJyLCAiYm91bmRzOiVsbHUg bWF4OiVsbHUgaW5kZXg6JXp1IG1heEluZGV4OiV6dVxuIiwgYm91bmRzLCBtYXhCb3VuZHMsIGlu ZGV4LCBtYXhJbmRleCk7CiAgICAgICAgICAgIGFib3J0KCk7CiAgICAgICAgfQogICAgICAgIG1h eEJvdW5kcyA9IGJvdW5kczsKICAgICAgICBtYXhJbmRleCA9IGluZGV4OwogICAgfQp9CgppbnQg bWFpbihpbnQsIGNoYXIqKikKewogICAgQm91bmRzIGI7CiAgICBzdGQ6OnRocmVhZCB0MihbJl17 cHJvZHVjZXIoYik7fSk7CiAgICBjb25zdW1lcihiKTsKICAgIHJldHVybiAwOwp9