[Webkit-unassigned] [Bug 215725] [GLIB] REGRESSION(r265975): context-lost-restored.html is failing and two other WebGL tests are crashing

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=215725

--- Comment #2 from Lauro Moura <lmoura at igalia.com> ---
(In reply to Diego Pino from comment #0)
> 
> Regressions: Unexpected crashes (2)
>         fast/canvas/webgl/webgl-compressed-texture-astc.html [ Crash ]
>         webgl/1.0.3/conformance/extensions/get-extension.html [ Crash ]

Both when enabling WebGLCompressedTextureASTC. Trace:

Thread 1 (Thread 0x7f18436fc2c0 (LWP 24571)):
#0  0x00007f185c23ad61 in WebCore::WebGLExtension::operator new(unsigned long) (size=32) at ../../Source/WebCore/html/canvas/WebGLExtension.cpp:36
#1  0x00007f185c24a088 in WebCore::WebGLRenderingContext::getExtension(WTF::String const&) (this=0x7effed8fb540, name=...) at ../../Source/WebCore/html/canvas/WebGLRenderingContext.cpp:161
#2  0x00007f185aecff4d in WebCore::jsWebGLRenderingContextPrototypeFunctionGetExtensionBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*) (lexicalGlobalObject=0x7effedb61068, callFrame=0x7fff48956320, castedThis=0x7effd33ca728) at DerivedSources/WebCore/JSWebGLRenderingContext.cpp:6473
#3  0x00007f185aea4f89 in WebCore::IDLOperation<WebCore::JSWebGLRenderingContext>::call<&WebCore::jsWebGLRenderingContextPrototypeFunctionGetExtensionBody, (WebCore::CastedThisErrorBehavior)0>(JSC::JSGlobalObject&, JSC::CallFrame&, char const*) (lexicalGlobalObject=..., callFrame=..., operationName=0x7f185fa4d0de "getExtension") at ../../Source/WebCore/bindings/js/JSDOMOperation.h:53
#4  0x00007f185aea4c64 in WebCore::jsWebGLRenderingContextPrototypeFunctionGetExtension(JSC::JSGlobalObject*, JSC::CallFrame*) (lexicalGlobalObject=0x7effedb61068, callFrame=0x7fff48956320) at DerivedSources/WebCore/JSWebGLRenderingContext.cpp:6478
#5  0x00007f1802a87178 in  ()
#6  0x00007fff489563b0 in  ()
#7  0x00007f184a961650 in llint_op_call () at /app/webkit/WebKitBuild/Debug/lib/libjavascriptcoregtk-4.0.so.18
#8  0x0000000000000000 in  ()

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200821/7f4167d1/attachment-0001.htm>