Live Widevine DASH (HW_SECURE_ALL) SIGSEGVs in GStreamer app-demux-sourc

Vega Open Beta Bug Reports
1

:warning: Before you continue

Before submitting a bug report, please review our troubleshooting documentation at Redirect | /docs/vega/0.24/troubleshoot-overview.html

If you still want to file a bug report, please make sure to fill in all the details below and provide the necessary information.

NOTE: PLEASE ONLY REPORT A SINGLE BUG USING THIS TEMPLATE.
If you’re experiencing multiple issues, please file a separate report for each.

:backhand_index_pointing_right: Bug Description

1. Summary

Hi team,

Live Widevine DASH (HW_SECURE_ALL) SIGSEGVs in GStreamer app-demux-sourc a few seconds after playback starts. VOD on the same DRM stack plays. We’re supposing our issue is related to this bug report: HW Decoder Freeze on Mid-Playback DRM Key Rotation (Live DASH, HW_SECURE_ALL) - #23 by Ivy . This used to work in production; it started failing around the 48N image. Shaka-only reload / VideoPlayer.deinitialize() also native-crashes.

here below more information

Thanks

Nadya

Name:
App Link on Amazon Appstore (found through Developer Console → Actions column in App List → View on Amazon.com): La7 - App on Amazon Appstore

Bug Severity
Select one that applies

  • Impacts operation of app
  • Blocks current development
  • Improvement suggestion
  • Issue with documentation (If selected, please share the doc link and describe the issue)
  • Other

2. Steps to Reproduce

  1. Cold-start the app (no VOD first).
  2. Play live DRM DASH.
  3. Playback starts; playhead moves.
  4. Within ~8–12 s: SIGSEGV.

3. Observed Behavior

Explain what actually happened, noting any discrepancies or malfunctions.

MSE stays healthy (appendBuffer, buffered range grows, error=null).
Every live CMAF fragment logs on_encrypted_media_init_data: Encrypted media is received.
Then ACR_BEGIN COMM:app-demux-sourc SIG:11.
Fingerprint: app-demux-sourc_11_7b15f81b1886a2eb9790d0dc39fd1c44
Descriptor: b463ce04d0bdf4a95f48e3349115ac79
Example: pid 12071, 18 Sep 2026 10:16:57 UTC, crash_1789726617_5000_5000_12071_11_com_la7_it.acr

4. Expected Behavior

Describe what you expected the SDK to do under normal operation.

Live key/init-data updates bind to the active HW_SECURE_ALL decoder without wedging or crashing. If they cannot, surface HTMLMediaElement.error instead of SIGSEGV.

4.a Possible Root Cause & Temporary Workaround

Fill out anything you have tried. If you don’t know, N/A is acceptable

no workaround found

5. Logs or crash report

(Please make sure to provide relevant logs as attachment)

For crash issues, please refer this guide for faster troubleshooting: Detect Where the App Crash Originates - Amazon Vega Docs

  • App/Device Logs

  • Crash Logs

  • Crash Report

  • For issues with Vega Studio Extension, please share log files from below folders:
    For v0.22+:

    ~/.vscode/extensions/amazon.vega-extension-<version>/ExtensionLogs
~/.vscode/extensions/amazon.vega-ui-extension-<version>/ExtensionLogs

    For v0.21 and earlier:

     ~/.vscode/extensions/amazon.kepler-extension-<version>/ExtensionLogs
 ~/.vscode/extensions/amazon.kepler-ui-extension-<version>/ExtensionLogs

6. Environment

Please fill out the fields related to your bug below:

  • SDK Version: 0.24.9914

  • React Native Version: RN0.72

  • App State: Foreground

  • OS Information: Please ssh into the device via vega exec vda shell (or kepler exec vda shell for v0.21 and earlier) and copy the output from cat /etc/os-release into the answer section below. Note, if you don’t have a simulator running or device attached, the command will respond with vda: no devices/emulators found

    NAME="OS"
OE_VERSION="4.0.0"
OS_MAJOR_VERSION="1"
OS_MINOR_VERSION="2"
RELEASE_ID="23"
OS_VERSION="1.2"
BRANCH_CODE="TV Ship"
BUILD_DESC="OS 1.2 (TV Ship/48)"
BUILD_FINGERPRINT="4.0.476660.0(3072cab629675a74)/48N:user/release-keys"
BUILD_VARIANT="user"
BUILD_TAGS="release-keys"
BUILD_DATE="Thu Sep 10 22:05:50 UTC 2026"
BUILD_TIMESTAMP="1789077950"
VERSION_NUMBER="2301020004820"

    la7Syslog.txt (1.2 MB)

    la7.acr.txt (764.5 KB)

7. Example Code Snippet / Screenshots / Screengrabs

Include any relevant code or component setup in React Native that can help reproduce the bug.

:backhand_index_pointing_right: Playback Issues

If this is a playback issue, please provide your content URL, any pre-conditions (like geo-location), and let us know if it’s x86 or arm7.

Please share the following details in addition:_

  • Player SDK: Shaka 4.16.13-r1.2
  • Player SDK Version: [e.g. 1.23]
    • Audio Codecs: AAC-LC (mp4a.40.2)
    • Video Codecs: H.264 (avc1.4d401e; also seen avc1.4d4015)
    • Manifest Types: DASH (live MPD)

Q: If applicable, please provide your media/content url
If this is created dynamically, tokenized, etc please provide a way for us to access it

Q: Are there any special headers required to reproduce the issue you are facing?

Additionally please provide the following if possible
Provide Screenshots / Screengrabs / Logs. Please include as much information as you can that will help debug.

<!-- Answer here if applicable -->

:backhand_index_pointing_right: Additional Context

Any Additional Context you would like to provide?
Add any other relevant information, such as recent updates to the SDK, dependencies, or device OS that may affect the bug.

<!-- Answer here if applicable  -->
4

Hi @LA7,

Thank you for the detailed bug report, and for attaching the syslog and ACR - they were very helpful.

Confirmed from your la7.acr.txt: this is a native SIGSEGV in the media pipeline on OS 48N (device callie, app 3.2.7). The faulting instruction (pc=0xafb22402) resolves into libgstreamer-1.0.so.0, called from glib, and the process has the full Amazon DRM decode pipeline loaded — libgstamzndecrypt.so, libgstamzndecryptmeta.so, libgstsecinputobmallocator.so (the secure-input allocator used for HW_SECURE_ALL) and libgstkeplervideosink.so. The on-device unwinder couldn’t walk past the faulting frame (failed to set pc register for unwind, frame 1 = 0xffffffff), which indicates the native pipeline state was corrupted at the point of the crash rather than a clean null dereference. Your syslog confirms the setup: live Widevine DASH, HW_SECURE_ALL, Conax license server.

To confirm the mechanism and help us investigate, the following would help most:

1. drmserver / amznDecrypt logs across a key rotation. Neither attachment contains the decrypt-layer logs, which are what we need to see how the rotated key is bound. These aren’t emitted at default levels - please enable verbose media logging and capture across a rotation

2. Symbolicated ACR. You’ve attached the raw ACR; running it through the flow in Debug crashes with the Amazon Crash Report ( Symbolicate App Crash Reports - Amazon Vega Docs ) and Detect Where the App Crash Originates ( Detect Where the App Crash Originates - Amazon Vega Docs ) will confirm whether the frame is in app or Amazon code.

3. Manifest DRM permissions - please confirm your manifest.toml declares both services:

[[wants.service]]
id = "com.amazon.drm.key"

[[wants.service]]
id = "com.amazon.drm.crypto"

[[needs.privilege]]
id = "com.amazon.privilege.security.file-sharing"

Security note: your uploaded log attachment appears to contain some sensitive information. We’d recommend reviewing it and redacting or rotating anything sensitive before leaving it publicly attached.

Our team is investigating and will provide an update as soon as we have more information.

Thanks for helping us improve the Vega platform.

Warm regards,
Aishwarya

5

Hi @amen , thank you for a quick reply.

  1. Confirmed in manifest.toml:
  • [[wants.service]] id = "com.amazon.drm.key"
  • [[wants.service]] id = "com.amazon.drm.crypto"
  • [[needs.privilege]] id = "com.amazon.privilege.security.file-sharing"

(com.amazon.media.secureplayback is also declared.)

  1. symbolicated ACR we will share via our private Amazon contact.
  2. loggingctl config --set-level drmserver debug (and amznDecrypt / media) returns Caller does not have sufficient privilege from the developer shell. vda root is blocked on this user build. We cannot raise decrypt-daemon verbosity ourselves.

Also today we’re NOT observing Live DASH SIGSEGVs, but a live-freeze instead. A clean install does not fix live HW_SECURE_ALL on this stick. We share this logs as well via our private contact.

Please, let me know if you need more info/ logs etc to investigate it.

Best

Nadya

6

Update.

a new cold start app crashed with SIGSEGV after a live DRM DASH title launch.

acr and symbolicated acr logs are shared via our private contact.

Thanks

Nadya