Media/WebRTC/2012-11-13

11/13/2012, 9am Pacific: (NOTE: We were all at the IETF conference in Atlanta last week, so we cancelled last week's meeting.)

Notes:

1) Crash bugs & Sec-Critical bugs, Major Functionality Bugs: where are we?

• (jsmith) Crash bugs:https://bugzilla.mozilla.org/buglist.cgi?keywords=crash%2C%20;keywords_type=allwords;list_id=4686619;resolution=---;query_format=advanced;component=WebRTC;component=WebRTC%3A%20Audio%2FVideo;component=WebRTC%3A%20Networking;component=WebRTC%3A%20Signaling;product=Core
• (jsmith) Sec-Critical Bugs:https://bugzilla.mozilla.org/buglist.cgi?keywords=sec-critical%2C%20;keywords_type=allwords;list_id=4686623;resolution=---;query_format=advanced;component=WebRTC;component=WebRTC%3A%20Audio%2FVideo;component=WebRTC%3A%20Networking;component=WebRTC%3A%20Signaling;product=Core
• We're going to focus on the following 3 bug fixes for the next week:

  1) NSS start up & network shut down fixes (Jesup)

  2) Garbage Collection of PeerConnections (Ekr)

  3) Big lock patch (Ekr)

• Once these are in and landed, we'll reassess where we are on crash bugs. We believe most of the reproducible crashes will be addressed by these three fixes.

2) gUM

• Functionality: Where are we on blockers?
  • Blockers: https://bugzilla.mozilla.org/buglist.cgi?list_id=4754515;resolution=---;status_whiteboard_typeehugg=allwordssubstr;query_format=advanced;status_whiteboard=blocking-gum%2B
  • We still have around 25 bugs (we're fixing them at roughly the same rate as new ones are getting reported)
  • We're going to focus on these as soon as crash/critical bugs in one are dealt with.
  • Anyone who is looking for work to do should pick one of the blocker gUM bugs to work on
• UX design
  • 3 bugs must land per the privacy team before we can take gUM out from behind its pref

    1) Bug 804611 - Add a "Don't ask me again"

    2) Bug 805632 - getUserMedia: Add an easy way within Firefox to shut down camera/microphone access after access has been granted

    3) Bug 805631 versus Bug 799417 - Indicate camera/microphone is active on one or more tabs

  • Need mock up for Bug 805632 first
  • Boriss is going to work on these for the next couple of weeks. She will focus on Bug 805632 first. Maire will try to get more help for Dao to implement these quickly.

3) Testing

• Plan to move Automation Testing Forward
  • Henrik intends to support writing crash tests
  • Jason is almost completed with the basic gUM automation - need to address Roc's feedback
  • Jason needs to triage crash bugs for in-testsuite nominations (need to get it up to date)
• Jason plans to do a test pass again with gUM soon for local media streams and camera release (stop())
• Jason - Been backlogged with B2G priorities, so full stack testing of PeerConnection & DataChannels hasn't heavily started - want to get through gUM stuff first, then work through those next
• Dan to talk to Ted more re getting C++ tests running automated on Android
• Reassess where we are after the 3 big fixes (listed at the top) are done and then focus on

  1) what else blocks automated testing.

  2) blocker gUM bugs

4) Other bugs people are working

• None mentioned

5) What changes do we have to make as a result of TPAC and IETF?

• Deferred to future conversations

6) Interop with Google

• prefix/suffix discussion on dev.platform (Randell suggested that folks look at that thread)
• Ekr is willing to fly to Seattle to get interop working with Justin. Google wants to do an interop Firefox/Chrome demo for the WebRTC Expo (Nov 27 & 28)

7) Anything we need to bring up on the hangout with Google?

• Ask about support for Firefox/Chrome Interop if there is the opportunity

8) Security review preparation

• Curtis has indicated they believe fuzzing and targeted reviews are all that is needed at this point (Dan Veditz should be confirsssming this).
• A reasonable list for targeted security review would be: (This text is basically a draft of what we plan to suggest to the security team)
  • getUserMedia() (dom/media/MediaManager*, content/media/webrtc/*, JS UI)
  • media/webrtc/signaling (large imported library; we've made more mods there though, including a lot of mods to improve security like infallible malloc, replacement of snprintf/strncpy/etc with safe versions, making the SDP creation code use an auto-expanding (infallible) buffer, etc. New code is focused around JSEP support, interfacing with the conduits and MediaStreams (MediaPipeline.cpp), and extending it to support multiple audio/video streams (and video-without-audio), etc. We won't want to review it all for security, but targeted sections and changes. All the changes to the library have been peer-reviewed.
  • PeerConnection.js and PeerConnectionImpl/Ctx (lives in signaling/src/peerconnection)
  • media/mtransport (audio/video conduits, DTLS (already reviewed by bsmith), SRTP (network/srtp))
  • DataChannels (network/sctp/*, dom/media/nsDOMDataChannel.cpp)

    NOTE: media/webrtc/trunk has almost no changes other than build stuff versus stable upstream shared with Chrome.

    We said that gUM, signaling, and PeerConnection are the first to present to the security team and that mtransport and DataChannels are less critical to review (less risky).

9) Discuss any current blockers for people or new items that haven't been discussed

• None mentioned
• We said good bye to Anant whose last day as a Mozilla employee is Nov 16. :-(