Webtorrent-related browser crash on Linux

[fmarier]

I ran into this crash this morning: https://stats.brave.com/dashboard#crash/5d94efd2e1f167001f41da1e

It crashed the whole browser, not just a tab.

Relevant part of the stack trace:

Thread 5 (crashed)
 0  brave!net::HttpResponseHeaders::EnumerateHeader(unsigned long*, base::BasicStringPiece, std::__1::allocator > > const&, std::__1::basic_string, std::__1::allocator >*) const [iterator : 1437 + 0x0]
    rax = 0xffffc32ba1ce9aa6   rdx = 0x0000000000000005
    rcx = 0x00007fef28fdd000   rbx = 0x0000000000000008
    rsi = 0x00007fef28fdd018   rdi = 0x00003cd6f52f8500
    rbp = 0x00007fef28fdcff0   rsp = 0x00007fef28fdcfb0
     r8 = 0x0000000000000080    r9 = 0x00007fef28fdd310
    r10 = 0x00007ffd037be080   r11 = 0x0000000002e16eba
    r12 = 0x00003cd6f52f8500   r13 = 0x00007fef28fdd020
    r14 = 0x0000000000000000   r15 = 0x00007fef28fdd018
    rip = 0x00005560b7f50955
    Found by: given as instruction pointer in context
 1  brave!net::HttpResponseHeaders::GetMimeTypeAndCharset(std::__1::basic_string, std::__1::allocator >*, std::__1::basic_string, std::__1::allocator >*) const [http_response_headers.cc : 888 + 0x8]
    rbp = 0x00007fef28fdd080   rsp = 0x00007fef28fdd000
    rip = 0x00005560b7f5105c
    Found by: previous frame's frame pointer
 2  brave!net::HttpResponseHeaders::GetMimeType(std::__1::basic_string, std::__1::allocator >*) const [http_response_headers.cc : 895 + 0x5]
    rbp = 0x00007fef28fdd0c0   rsp = 0x00007fef28fdd090
    rip = 0x00005560b7f51116
    Found by: previous frame's frame pointer
 3  brave!webtorrent::OnHeadersReceived_TorrentRedirectWork(net::HttpResponseHeaders const*, scoped_refptr*, GURL*, base::RepeatingCallback const&, std::__1::shared_ptr) [brave_torrent_redirect_network_delegate_helper.cc : 46 + 0x8]
    rbp = 0x00007fef28fdd230   rsp = 0x00007fef28fdd0d0
    rip = 0x00005560b6797081
    Found by: previous frame's frame pointer
 4  brave!base::internal::Invoker*, GURL*, base::RepeatingCallback const&, std::__1::shared_ptr)>, int (net::HttpResponseHeaders const*, scoped_refptr*, GURL*, base::RepeatingCallback const&, std::__1::shared_ptr)>::Run(base::internal::BindStateBase*, net::HttpResponseHeaders const*, scoped_refptr*, GURL*, base::RepeatingCallback const&, std::__1::shared_ptr&&) [bind_internal.h : 399 + 0xe]
    rbp = 0x00007fef28fdd260   rsp = 0x00007fef28fdd240
    rip = 0x00005560b679041a
    Found by: previous frame's frame pointer

brave://version

Brave	0.68.142 Chromium: 77.0.3865.90 (Build officiel) (64 bits)
Révision	58c425ba843df2918d9d4b409331972646c393dd-refs/branch-heads/3865@{#830}
Système d'exploitation	Linux

[yrliou]

I think it is captured in #6193, there is a crash report listed in the issue (https://stats.brave.com/dashboard#crash/5d8d13425b062b001f078863) which seems to be the same, closing as a duplicate now.