[Webkit-unassigned] [Bug 197877] New: WebCore crash on RenderTreeBuilder when play video within webview

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=197877

            Bug ID: 197877
           Summary: WebCore crash on RenderTreeBuilder when play video
                    within webview
           Product: WebKit
           Version: WebKit Local Build
          Hardware: iPhone / iPad
                OS: iOS 12
            Status: NEW
          Severity: Major
          Priority: P2
         Component: Canvas
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: lidjxy at gmail.com
                CC: dino at apple.com

WebCore 
WTFCrashWithInfo(int, char const*, char const*, int) + 20
1
WebCore 
WebCore::RenderTreeBuilder::RenderTreeBuilder(WebCore::RenderView&) + 358
2       WebCore 
WebCore::RenderTreeUpdater::tearDownRenderers(WebCore::Element&) + 44
3       WebCore 
WebCore::ContainerNode::removeBetween(WebCore::Node*, WebCore::Node*, WebCore::Node&) + 140
4       WebCore 
WebCore::ContainerNode::removeChild(WebCore::Node&) + 644
5       WebCore 
WebCore::VTTCue::removeDisplayTree() + 136
6       WebCore 
WebCore::HTMLMediaElement::updateActiveTextTrackCues(WTF::MediaTime const&) + 5828
7       WebCore 
WTF::Function<void ()>::CallableWrapper<WebCore::HTMLMediaElement::updateActiveTextTrackCues(WTF::MediaTime const&)::$_22>::call() + 172
8       AVFoundation    
__67-[AVOccasionalTimebaseObserver initWithTimebase:times:queue:block:]_block_invoke_4 + 68


the stack of function calls, the iOS system is iOS 12.2, and the webkit version is 607.1.40 i think.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190514/1e360179/attachment-0001.html>