[Webkit-unassigned] [Bug 180877] New: Web Inspector: CRASH at WebCore::InspectorCanvas::resetRecordingData + 416

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=180877

            Bug ID: 180877
           Summary: Web Inspector: CRASH at
                    WebCore::InspectorCanvas::resetRecordingData + 416
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Web Inspector
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: bburg at apple.com
                CC: inspector-bugzilla-changes at group.apple.com

CRASHING TEST: webgl/1.0.2/conformance/attribs/gl-disabled-vertex-attrib.html

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                   0x000000017bfbfe50 WebCore::InspectorCanvas::resetRecordingData() + 416
1   com.apple.WebCore                   0x000000017bfbfb13 WebCore::InspectorCanvas::~InspectorCanvas() + 19
2   com.apple.WebCore                   0x000000017bff3ab8 WebCore::InspectorCanvasAgent::clearCanvasData() + 120
3   com.apple.WebCore                   0x000000017bfcfd39 WebCore::InspectorInstrumentation::didCommitLoadImpl(WebCore::InstrumentingAgents&, WebCore::Frame&, WebCore::DocumentLoader*) + 217
4   com.apple.WebCore                   0x000000017c05b849 WebCore::FrameLoader::dispatchDidCommitLoad(std::optional<WebCore::HasInsecureContent>) + 137
5   com.apple.WebCore                   0x000000017c05b461 WebCore::FrameLoader::receivedFirstData() + 33
6   com.apple.WebCore                   0x000000017c03fdeb WebCore::DocumentLoader::commitData(char const*, unsigned long) + 1627
7   com.apple.WebCore                   0x000000017c03f173 WebCore::DocumentLoader::finishedLoading() + 531
...

Devin thinks we need to just not reset recording data in ~InspectorCanvas, as there is no reason to do that. I am skeptical that InspectorCanvas is not being destructed underneath ~CanvasRenderingContext, as that was the intent of the design.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20171215/35fb6567/attachment.html>