[Webkit-unassigned] [Bug 149914] New: Crash in RenderLayerBacking::notifyAnimationStarted()

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Oct 7 21:38:39 PDT 2015


https://bugs.webkit.org/show_bug.cgi?id=149914

            Bug ID: 149914
           Summary: Crash in RenderLayerBacking::notifyAnimationStarted()
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Local Build
          Hardware: iOS
                OS: iOS 9.0
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: dbates at webkit.org
                CC: ap at webkit.org, simon.fraser at apple.com

Created attachment 262673
  --> https://bugs.webkit.org/attachment.cgi?id=262673&action=review
Crash Report

When I looked at <https://build.webkit.org/results/Apple%20iOS%209%20Simulator%20Release%20WK2%20(Tests)/r190705%20(180)/results.html>, I noticed that the test compositing/reflections/nested-reflection.html crashed the iOS WebContent process with the following backtrace:

[[
Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x0000000000000358
...
Application Specific Information:
CoreSimulator 179 - Device: iPhone 5s WebKit Tester - Runtime: iOS 9.0 (13A340) - DeviceType: iPhone 5s
CRASHING TEST: compositing/reflections/nested-reflection-transition.html
...

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                 0x0000000114e9e67f WebCore::RenderLayerBacking::notifyAnimationStarted(WebCore::GraphicsLayer const*, WTF::String const&, double) + 31
1   com.apple.WebKit                  0x0000000110cc35bc void IPC::handleMessage<Messages::DrawingArea::AcceleratedAnimationDidStart, WebKit::DrawingArea, void (WebKit::DrawingArea::*)(unsigned long long, WTF::String const&, double)>(IPC::MessageDecoder&, WebKit::DrawingArea*, void (WebKit::DrawingArea::*)(unsigned long long, WTF::String const&, double)) + 88
2   com.apple.WebKit                  0x0000000110ce0dd9 IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::MessageDecoder&) + 113
3   com.apple.WebKit                  0x0000000110e4bdde WebKit::WebProcess::didReceiveMessage(IPC::Connection&, IPC::MessageDecoder&) + 28
4   com.apple.WebKit                  0x0000000110ca18a5 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::MessageDecoder, std::__1::default_delete<IPC::MessageDecoder> >) + 127
5   com.apple.WebKit                  0x0000000110ca3f3e IPC::Connection::dispatchOneMessage() + 126
6   JavaScriptCore                    0x0000000113c46fa5 WTF::RunLoop::performWork() + 437
7   JavaScriptCore                    0x0000000113c47352 WTF::RunLoop::performWork(void*) + 34
8   com.apple.CoreFoundation          0x000000010e3ad0a1 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
9   com.apple.CoreFoundation          0x000000010e3a2fcc __CFRunLoopDoSources0 + 556
10  com.apple.CoreFoundation          0x000000010e3a2483 __CFRunLoopRun + 867
11  com.apple.CoreFoundation          0x000000010e3a1e98 CFRunLoopRunSpecific + 488
12  com.apple.Foundation              0x000000010da3d891 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 267
13  com.apple.Foundation              0x000000010dad0221 -[NSRunLoop(NSRunLoop) run] + 74
14  libxpc.dylib                      0x000000010f8b1534 _xpc_objc_main + 400
15  libxpc.dylib                      0x000000010f8b38ee xpc_main + 189
16  com.apple.WebKit.WebContent.Development    0x000000010d96d432 main + 375
17  libdyld.dylib                     0x000000010f5d992d start + 1
]]
<https://build.webkit.org/results/Apple%20iOS%209%20Simulator%20Release%20WK2%20(Tests)/r190705%20(180)/compositing/reflections/nested-reflection-crash-log.txt>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20151008/7424ba6f/attachment.html>


More information about the webkit-unassigned mailing list