[Webkit-unassigned] [Bug 201388] New: [GStreamer] Crash involving SourceBufferPrivateGStreamer

Sun Sep 1 05:26:19 PDT 2019

https://bugs.webkit.org/show_bug.cgi?id=201388

            Bug ID: 201388
           Summary: [GStreamer] Crash involving
                    SourceBufferPrivateGStreamer
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Media
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at gnome.org

This occurred on youtube.com. Not reproducible.

(gdb) bt
#0  0x00007f707e250d18 in WTF::doubleHash(unsigned int) (key=<optimized out>)
    at DerivedSources/ForwardingHeaders/wtf/DumbPtrTraits.h:43
#1  0x00007f707e250d18 in WTF::HashTable<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> >, WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> >, WTF::IdentityExtractor, WTF::PtrHash<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > >, WTF::HashTraits<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > >, WTF::HashTraits<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > > >::lookupForWriting<WTF::IdentityHashTranslator<WTF::HashTraits<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > >, WTF::PtrHash<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > > >, WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > >(WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > const&) (key=..., this=0x0)
    at DerivedSources/ForwardingHeaders/wtf/HashTable.h:750
#2  0x00007f707e250d18 in WTF::HashTable<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> >, WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> >, WTF::IdentityExtractor, WTF::PtrHash<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > >, WTF::HashTraits<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > >, WTF::HashTraits<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > > >::lookupForWriting(WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > const&) (key=..., this=0x0) at DerivedSources/ForwardingHeaders/wtf/HashTable.h:469
#3  0x00007f707e250d18 in WTF::HashTable<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> >, WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> >, WTF::IdentityExtractor, WTF::PtrHash<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > >, WTF::HashTraits<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > >, WTF::HashTraits<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > > >::reinsert(WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> >&&) (entry=..., this=0x0) at DerivedSources/ForwardingHeaders/wtf/HashTable.h:1030
#4  0x00007f707e250d18 in WTF::HashTable<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> >, WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> >, WTF::IdentityExtractor, WTF::PtrHash<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > >, WTF::HashTraits<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > >, WTF::HashTraits<WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> > > >::rehash(unsigned int, WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> >*) (this=0x0, newTableSize=<optimized out>, entry=0x7ffc0fb72490) at DerivedSources/ForwardingHeaders/wtf/HashTable.h:1293
#5  0x00007f577d55ac10 in  ()
#6  0x00007f577d55b970 in  ()
#7  0x00007f707e2538f2 in WTF::Vector<_GstAppSrc*, 0ul, WTF::CrashOnOverflow, 16ul>::expandCapacity(unsigned long) (this=0x7f707e24f323 <WebCore::MediaSourceClientGStreamerMSE::append(WTF::RefPtr<WebCore::SourceBufferPrivateGStreamer, WTF::DumbPtrTraits<WebCore::SourceBufferPrivateGStreamer> >, WTF::Vector<unsigned char, 0ul, WTF::CrashOnOverflow, 16ul>&&)+227>, newMinCapacity=<optimized out>) at DerivedSources/ForwardingHeaders/wtf/Vector.h:327
#8  0x00007f702411cf30 in  ()
#9  0x00007f702411d080 in  ()
#10 0x00007f707d1cd15f in WTF::HashTable<WTF::AtomString, WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer> >, WTF::AtomStringHash, WTF::HashMap<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer, WTF::AtomStringHash, WTF::HashTraits<WTF::AtomString>, WTF::HashTraits<WebCore::SourceBuffer::TrackBuffer> >::KeyValuePairTraits, WTF::HashTraits<WTF::AtomString> >::isEmptyOrDeletedBucket(WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer> const&) (value=...) at DerivedSources/ForwardingHeaders/wtf/text/WTFString.h:367
#11 0x00007f707d1cd15f in WTF::HashTableConstIterator<WTF::AtomString, WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer> >, WTF::AtomStringHash, WTF::HashMap<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer, WTF::AtomStringHash, WTF::HashTraits<WTF::AtomString>, WTF::HashTraits<WebCore::SourceBuffer::TrackBuffer> >::KeyValuePairTraits, WTF::HashTraits<WTF::AtomString> >::skipEmptyBuckets() (this=<optimized out>, this=<optimized out>) at DerivedSources/ForwardingHeaders/wtf/HashTable.h:121
#12 0x00007f707d1cd15f in WTF::HashTableConstIterator<WTF::AtomString, WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer> >, WTF::AtomStringHash, WTF::HashMap<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer, WTF::AtomStringHash, WTF::HashTraits<WTF::AtomString>, WTF::HashTraits<WebCore::SourceBuffer::TrackBuffer> >::KeyValuePairTraits, WTF::HashTraits<WTF::AtomString> >::operator++() (this=<synthetic pointer>) at DerivedSources/ForwardingHeaders/wtf/HashTable.h:183
#13 0x00007f707d1cd15f in WTF::HashTableIterator<WTF::AtomString, WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer> >, WTF::AtomStringHash, WTF::HashMap<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer, WTF::AtomStringHash, WTF::HashTraits<WTF::AtomString>, WTF::HashTraits<WebCore::SourceBuffer::TrackBuffer> >::KeyValuePairTraits, WTF::HashTraits<WTF::AtomString> >::operator++() (this=<synthetic pointer>) at DerivedSources/ForwardingHeaders/wtf/HashTable.h:266
#14 0x00007f707d1cd15f in WTF::HashTableIteratorAdapter<WTF::HashTable<WTF::AtomString, WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer> >, WTF::AtomStringHash, WTF::HashMap<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer, WTF::AtomStringHash, WTF::HashTraits<WTF::AtomString>, WTF::HashTraits<WebCore::SourceBuffer::TrackBuffer> >::KeyValuePairTraits, WTF::HashTraits<WTF::AtomString> >, WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer> >::operator++() (this=<synthetic pointer>) at DerivedSources/ForwardingHeaders/wtf/HashIterators.h:74
#15 0x00007f707d1cd15f in WTF::HashTableValuesIterator<WTF::HashTable<WTF::AtomString, WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer>, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer> >, WTF::AtomStringHash, WTF::HashMap<WTF::AtomString, WebCore::SourceBuffer::TrackBuffer, WTF::AtomStringHash, WTF::HashTraits<WTF::AtomString>, WTF::HashTraits<WebCore::SourceBuffer::TrackBuffer> >::KeyValuePairTraits, WTF::HashTraits<WTF::AtomString> >, WTF::AtomString, WebCore::SourceBuffer::TrackBuffer>::operator++() (this=<synthetic pointer>) at DerivedSources/ForwardingHeaders/wtf/HashIterators.h:157
#16 0x00007f707d1cd15f in WebCore::SourceBuffer::setTimestampOffset(double) (this=<optimized out>, offset=6.9175979694419147e-310) at ../Source/WebCore/Modules/mediasource/SourceBuffer.cpp:186
#17 0x00007ffc0fb725d0 in  ()
#18 0x00007f707a772a20 in WTF::GRefPtr<_GMainLoop>::~GRefPtr() (this=<synthetic pointer>, __in_chrg=<optimized out>) at ../Source/WTF/wtf/glib/GRefPtr.h:74
#19 0x00007f707a772a20 in WTF::RunLoop::stop() (this=<optimized out>) at ../Source/WTF/wtf/glib/RunLoopGLib.cpp:116
#20 0x00007f707ae96280 in g_source_callback_funcs () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#21 0x000055aa4d777950 in  ()
#22 0x00007f707d1c7f16 in WTF::VectorDestructor<true, WebCore::PlatformTimeRanges::Range>::destruct(WebCore::PlatformTimeRanges::Range*, WebCore::PlatformTimeRanges::Range*) (end=<optimized out>, begin=<optimized out>) at DerivedSources/ForwardingHeaders/wtf/Vector.h:63
#23 0x00007f707d1c7f16 in WTF::VectorTypeOperations<WebCore::PlatformTimeRanges::Range>::destruct(WebCore::PlatformTimeRanges::Range*, WebCore::PlatformTimeRanges::Range*) (end=0x413264799c651000, begin=<optimized out>) at DerivedSources/ForwardingHeaders/wtf/Vector.h:243
#24 0x00007f707d1c7f16 in WTF::Vector<WebCore::PlatformTimeRanges::Range, 0ul, WTF::CrashOnOverflow, 16ul>::~Vector() (this=0x7f577d55a650, __in_chrg=<optimized out>) at DerivedSources/ForwardingHeaders/wtf/Vector.h:675
#25 0x00007f707d1c7f16 in WebCore::PlatformTimeRanges::~PlatformTimeRanges() (this=0x7f577d55a650, __in_chrg=<optimized out>) at ../Source/WebCore/platform/graphics/PlatformTimeRanges.h:39
#26 0x00007f707d1c7f16 in std::default_delete<WebCore::PlatformTimeRanges>::operator()(WebCore::PlatformTimeRanges*) const (this=<optimized out>, __ptr=0x7f577d55a650) at /usr/include/c++/9.2.0/bits/unique_ptr.h:81
#27 0x00007f707d1c7f16 in std::default_delete<WebCore::PlatformTimeRanges>::operator()(WebCore::PlatformTimeRanges*) const (this=0x7ffc0fb72580, __ptr=0x7f577d55a650) at /usr/include/c++/9.2.0/bits/unique_ptr.h:75
#28 0x00007f707d1c7f16 in std::unique_ptr<WebCore::PlatformTimeRanges, std::default_delete<WebCore::PlatformTimeRanges> >::~unique_ptr() (this=0x7ffc0fb72580, __in_chrg=<optimized out>) at /usr/include/c++/9.2.0/bits/unique_ptr.h:284
#29 0x00007f707d1c7f16 in WebCore::MediaSource::monitorSourceBuffers() (this=<optimized out>) at ../Source/WebCore/Modules/mediasource/MediaSource.cpp:465
#30 0x00007f707d7a996c in JSC::ClassInfo::isSubClassOf(JSC::ClassInfo const*) const (other=<optimized out>, this=<optimized out>) at DerivedSources/ForwardingHeaders/JavaScriptCore/ClassInfo.h:209
#31 0x00007f707d7a996c in JSC::JSCell::inherits(JSC::VM&, JSC::ClassInfo const*) const (this=0x0, info=<optimized out>, vm=...) at DerivedSources/ForwardingHeaders/JavaScriptCore/JSCellInlines.h:314
#32 0x00007f707d7a996c in JSC::JSCastingHelpers::FinalTypeDispatcher<false>::inheritsGeneric<JSC::JSPromiseDeferred, JSC::JSCell>(JSC::VM&, JSC::JSCell*) (from=0x0, vm=...) at DerivedSources/ForwardingHeaders/JavaScriptCore/JSCast.h:93
#33 0x00007f707d7a996c in JSC::JSCastingHelpers::InheritsTraits<JSC::JSPromiseDeferred>::inherits<JSC::JSCell>(JSC::VM&, JSC::JSCell*) (from=0x0, vm=...) at DerivedSources/ForwardingHeaders/JavaScriptCore/JSCast.h:127
#34 0x00007f707d7a996c in JSC::jsDynamicCast<JSC::JSPromiseDeferred*, JSC::JSCell>(JSC::VM&, JSC::JSCell*) (from=0x0, vm=...) at DerivedSources/ForwardingHeaders/JavaScriptCore/JSCast.h:155
#35 0x00007f707d7a996c in JSC::jsDynamicCast<JSC::JSPromiseDeferred*>(JSC::VM&, JSC::JSValue) (from=..., vm=...) at DerivedSources/ForwardingHeaders/JavaScriptCore/JSCast.h:165
#36 0x00007f707d7a996c in WebCore::DOMGuarded<JSC::JSPromiseDeferred>::guarded() const (this=0x7f57090832b8) at ../Source/WebCore/bindings/js/JSDOMGuardedObject.h:63
#37 0x00007f707d7a996c in WebCore::DeferredPromise::deferred() const (this=0x7f57090832b8) at ../Source/WebCore/bindings/js/JSDOMPromiseDeferred.h:146
#38 0x00007f707d7a996c in WebCore::DeferredPromise::resolve(JSC::ExecState&, JSC::JSValue) (resolution=..., state=..., this=0x7f57090832b8) at ../Source/WebCore/bindings/js/JSDOMPromiseDeferred.h:150
#39 0x00007f707d7a996c in WebCore::DeferredPromise::resolve() (this=0x7f57090832b8) at ../Source/WebCore/bindings/js/JSDOMPromiseDeferred.h:78
#40 0x00007f707d7a996c in WebCore::DeferredPromise::resolve() (this=0x7f57090832b8) at ../Source/WebCore/bindings/js/JSDOMPromiseDeferred.h:70
#41 0x00007f707d7a996c in WebCore::DOMPromiseDeferred<void>::resolve() (this=0x7f5787713640) at ../Source/WebCore/bindings/js/JSDOMPromiseDeferred.h:240
#42 0x00007f707d7a996c in WebCore::HTMLMediaElement::resolvePendingPlayPromises(WTF::Vector<WebCore::DOMPromiseDeferred<void>, 0ul, WTF::CrashOnOverflow, 16ul>&&) (this=<optimized out>, pendingPlayPromises=...) at ../Source/WebCore/html/HTMLMediaElement.cpp:1046
#43 0x00007f707459dcd0 in  ()
#44 0x00007f707a772a20 in WTF::GRefPtr<_GMainLoop>::~GRefPtr() (this=<synthetic pointer>, __in_chrg=<optimized out>) at ../Source/WTF/wtf/glib/GRefPtr.h:74
#45 0x00007f707a772a20 in WTF::RunLoop::stop() (this=<optimized out>) at ../Source/WTF/wtf/glib/RunLoopGLib.cpp:116
#46 0x413264799c651000 in  ()
#47 0x0000000000000000 in  ()

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190901/8e48f411/attachment-0001.html>