[Webkit-unassigned] [Bug 155721] New: Crash in MediaPlayer::setPrivateBrowsingMode()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=155721

            Bug ID: 155721
           Summary: Crash in MediaPlayer::setPrivateBrowsingMode()
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Local Build
          Hardware: iOS
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Media Elements
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: dbates at webkit.org
                CC: eric.carlson at apple.com, jeremyj-wk at apple.com,
                    jer.noble at apple.com

Created attachment 274599
  --> https://bugs.webkit.org/attachment.cgi?id=274599&action=review
DumpRenderTree-93680-crash-log

On the Apple iOS 9 Simulator Release WK1 (Tests) bot, the test LayoutTests/fast/replaced/replaced-child-of-absolute-with-auto-height.html crashes in MediaPlayer::setPrivateBrowsingMode():

[[
Process:               DumpRenderTree [93680]
...
Crashed Thread:        3  WebThread

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x00000000000000ea
Exception Note:        EXC_CORPSE_NOTIFY
...
Thread 3 Crashed:: WebThread
0   com.apple.WebCore                 0x0000000105ff35f4 WebCore::MediaPlayer::setPrivateBrowsingMode(bool) + 4 (MediaPlayer.cpp:1075)
1   com.apple.WebCore                 0x0000000105a61d3d WebCore::HTMLMediaElement::loadResource(WebCore::URL const&, WebCore::ContentType&, WTF::String const&) + 1805 (HTMLMediaElement.cpp:1309)
2   com.apple.WebCore                 0x0000000105a6124f WebCore::HTMLMediaElement::selectMediaResource() + 943 (HTMLMediaElement.cpp:1208)
3   com.apple.WebCore                 0x0000000105a5adfc WebCore::HTMLMediaElement::pendingActionTimerFired() + 76 (HTMLMediaElement.cpp:885)
4   com.apple.WebCore                 0x0000000106526b5f WebCore::ThreadTimers::sharedTimerFiredInternal() + 175 (ThreadTimers.cpp:124)
5   com.apple.WebCore                 0x0000000105fd16cf WebCore::timerFired(__CFRunLoopTimer*, void*) + 31 (MainThreadSharedTimerCF.cpp:75)
6   com.apple.CoreFoundation          0x0000000103035364 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
7   com.apple.CoreFoundation          0x0000000103034f11 __CFRunLoopDoTimer + 1089
8   com.apple.CoreFoundation          0x0000000102ff68b1 __CFRunLoopRun + 1937
9   com.apple.CoreFoundation          0x0000000102ff5e98 CFRunLoopRunSpecific + 488
10  com.apple.WebCore                 0x00000001065d0d55 RunWebThread(void*) + 469 (WebCoreThread.mm:691)
11  libsystem_pthread.dylib           0x000000010a1fdc13 _pthread_body + 131
12  libsystem_pthread.dylib           0x000000010a1fdb90 _pthread_start + 168
13  libsystem_pthread.dylib           0x000000010a1fb375 thread_start + 13
]]
<https://build.webkit.org/results/Apple%20iOS%209%20Simulator%20Release%20WK1%20(Tests)/r198483%20(4337)/DumpRenderTree-93680-crash-log.txt>

For convenience the associated test results page is at <https://build.webkit.org/results/Apple%20iOS%209%20Simulator%20Release%20WK1%20(Tests)/r198483%20(4337)/results.html>.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160321/05a13ad4/attachment-0001.html>