[Webkit-unassigned] [Bug 214817] New: [TextureMapper] Crashed in TextureMapperLayer::paintUsingOverlapRegions

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Jul 27 00:10:56 PDT 2020 

https://bugs.webkit.org/show_bug.cgi?id=214817

            Bug ID: 214817
           Summary: [TextureMapper] Crashed in
                    TextureMapperLayer::paintUsingOverlapRegions
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
               URL: http://www.satine.org/research/webkit/snowleopard/snow
                    stack.html
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Platform
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: Hironori.Fujii at sony.com
                CC: cgarcia at igalia.com, magomez at igalia.com,
                    noam at webkit.org

[TextureMapper] Crashed in TextureMapperLayer::paintUsingOverlapRegions

1. Start GTK MiniBrowser
2. Go to http://www.satine.org/research/webkit/snowleopard/snowstack.html
3. Press right arrow key to scroll
4. Crash

Thread 1 (Thread 0x7f1cdffff700 (LWP 61)):
#0  0x00007f1d4ea5f218 in WTFCrash() () at ../../Source/WTF/wtf/Assertions.cpp:295
#1  0x00007f1d5ce7f061 in WTF::CrashOnOverflow::crash() () at DerivedSources/ForwardingHeaders/wtf/CheckedArithmetic.h:127
#2  0x00007f1d5ce7f058 in WTF::CrashOnOverflow::overflowed() () at DerivedSources/ForwardingHeaders/wtf/CheckedArithmetic.h:120
#3  0x00007f1d5dffcfac in WTF::Checked<unsigned int, WTF::CrashOnOverflow>::Checked(WTF::ResultOverflowedTag) (this=0x7f1cdfffa8f0) at DerivedSources/ForwardingHeaders/wtf/CheckedArithmetic.h:658
#4  0x00007f1d5dff9bad in WTF::operator*<unsigned int, int, WTF::CrashOnOverflow>(WTF::Checked<unsigned int, WTF::CrashOnOverflow>, WTF::Checked<int, WTF::CrashOnOverflow>) (lhs=..., rhs=...) at DerivedSources/ForwardingHeaders/wtf/CheckedArithmetic.h:975
#5  0x00007f1d5dff3246 in WTF::operator*<unsigned int, int, WTF::CrashOnOverflow>(WTF::Checked<unsigned int, WTF::CrashOnOverflow>, int) (lhs=..., rhs=156276) at DerivedSources/ForwardingHeaders/wtf/CheckedArithmetic.h:1003
#6  0x00007f1d5dfeec2a in WebCore::IntSize::area<WTF::CrashOnOverflow>() const (this=0x7f1cdfffa940) at DerivedSources/ForwardingHeaders/WebCore/IntSize.h:136
#7  0x00007f1d5e5dbc8d in WebCore::TextureMapperLayer::paintUsingOverlapRegions(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d04265100, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:370
#8  0x00007f1d5e5dcd89 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d04265100, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:485
#9  0x00007f1d5e5dac1f in WebCore::TextureMapperLayer::paintSelfAndChildren(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d04264b80, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:241
#10 0x00007f1d5e5daf86 in WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d04264b80, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:281
#11 0x00007f1d5e5dcd69 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d04264b80, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:481
#12 0x00007f1d5e5dac1f in WebCore::TextureMapperLayer::paintSelfAndChildren(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042ae000, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:241
#13 0x00007f1d5e5daf86 in WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042ae000, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:281
#14 0x00007f1d5e5dcd69 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042ae000, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:481
#15 0x00007f1d5e5dac1f in WebCore::TextureMapperLayer::paintSelfAndChildren(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b3680, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:241
#16 0x00007f1d5e5daf86 in WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b3680, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:281
#17 0x00007f1d5e5dcd69 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b3680, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:481
#18 0x00007f1d5e5dac1f in WebCore::TextureMapperLayer::paintSelfAndChildren(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b3100, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:241
#19 0x00007f1d5e5daf86 in WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b3100, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:281
#20 0x00007f1d5e5dcd69 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b3100, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:481
#21 0x00007f1d5e5dac1f in WebCore::TextureMapperLayer::paintSelfAndChildren(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b0100, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:241
#22 0x00007f1d5e5daf86 in WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b0100, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:281
#23 0x00007f1d5e5dcd69 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b0100, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:481
#24 0x00007f1d5e5dac1f in WebCore::TextureMapperLayer::paintSelfAndChildren(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d04274680, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:241
#25 0x00007f1d5e5daf86 in WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d04274680, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:281
#26 0x00007f1d5e5dcd69 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d04274680, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:481
#27 0x00007f1d5e5dac1f in WebCore::TextureMapperLayer::paintSelfAndChildren(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b2b80, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:241
#28 0x00007f1d5e5daf86 in WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b2b80, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:281
#29 0x00007f1d5e5dcd69 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b2b80, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:481
#30 0x00007f1d5e5dac1f in WebCore::TextureMapperLayer::paintSelfAndChildren(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b2600, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:241
#31 0x00007f1d5e5daf86 in WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b2600, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:281
#32 0x00007f1d5e5dcd69 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b2600, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:481
#33 0x00007f1d5e5dac1f in WebCore::TextureMapperLayer::paintSelfAndChildren(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042ae580, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:241
#34 0x00007f1d5e5daf86 in WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042ae580, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:281
#35 0x00007f1d5e5dcd69 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042ae580, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:481
#36 0x00007f1d5e5dac1f in WebCore::TextureMapperLayer::paintSelfAndChildren(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b2080, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:241
#37 0x00007f1d5e5daf86 in WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b2080, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:281
#38 0x00007f1d5e5dcd69 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b2080, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:481
#39 0x00007f1d5e5dac1f in WebCore::TextureMapperLayer::paintSelfAndChildren(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b1b00, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:241
#40 0x00007f1d5e5daf86 in WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b1b00, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:281
#41 0x00007f1d5e5dcd69 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b1b00, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:481
#42 0x00007f1d5e5dac1f in WebCore::TextureMapperLayer::paintSelfAndChildren(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b1580, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:241
#43 0x00007f1d5e5daf86 in WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b1580, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:281
#44 0x00007f1d5e5dcd69 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b1580, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:481
#45 0x00007f1d5e5dac1f in WebCore::TextureMapperLayer::paintSelfAndChildren(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b1000, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:241
#46 0x00007f1d5e5daf86 in WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b1000, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:281
#47 0x00007f1d5e5dcd69 in WebCore::TextureMapperLayer::paintRecursive(WebCore::TextureMapperPaintOptions const&) (this=0x7f1d042b1000, options=...) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:481
#48 0x00007f1d5e5d9eaf in WebCore::TextureMapperLayer::paint() (this=0x7f1d042b1000) at ../../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:137
#49 0x00007f1d5da03623 in WebKit::CoordinatedGraphicsScene::paintToCurrentGLContext(WebCore::TransformationMatrix const&, WebCore::FloatRect const&, unsigned int) (this=0x7f1cfc27e000, matrix=..., clipRect=..., PaintFlags=0) at ../../Source/WebKit/Shared/CoordinatedGraphics/CoordinatedGraphicsScene.cpp:79
#50 0x00007f1d5da077ea in WebKit::ThreadedCompositor::renderLayerTree() (this=0x7f1cfc283280) at ../../Source/WebKit/Shared/CoordinatedGraphics/threadedcompositor/ThreadedCompositor.cpp:220
#51 0x00007f1d5da068a7 in WebKit::ThreadedCompositor::<lambda()>::operator()(void) const (__closure=0x7f1cfc293848) at ../../Source/WebKit/Shared/CoordinatedGraphics/threadedcompositor/ThreadedCompositor.cpp:56
#52 0x00007f1d5da0e9b8 in WTF::Detail::CallableWrapper<WebKit::ThreadedCompositor::ThreadedCompositor(WebKit::ThreadedCompositor::Client&, WebKit::ThreadedDisplayRefreshMonitor::Client&, WebCore::PlatformDisplayID, const WebCore::IntSize&, float, WebCore::TextureMapper::PaintFlags)::<lambda()>, void>::call(void) (this=0x7f1cfc293840) at DerivedSources/ForwardingHeaders/wtf/Function.h:52
#53 0x00007f1d5ce82513 in WTF::Function<void ()>::operator()() const (this=0x7f1d4522cc48) at DerivedSources/ForwardingHeaders/wtf/Function.h:83
#54 0x00007f1d5da067d7 in WebKit::CompositingRunLoop::updateTimerFired() (this=0x7f1d4522cc00) at ../../Source/WebKit/Shared/CoordinatedGraphics/threadedcompositor/CompositingRunLoop.cpp:188
#55 0x00007f1d5da249d2 in WTF::RunLoop::Timer<WebKit::CompositingRunLoop>::fired() (this=0x7f1d4522cc08) at DerivedSources/ForwardingHeaders/wtf/RunLoop.h:173
#56 0x00007f1d4eb1a88b in WTF::RunLoop::TimerBase::<lambda(gpointer)>::operator()(gpointer) const (__closure=0x0, userData=0x7f1d4522cc08) at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:146
#57 0x00007f1d4eb1a8cb in WTF::RunLoop::TimerBase::<lambda(gpointer)>::_FUN(gpointer) () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:150
#58 0x00007f1d4eb1a0ba in WTF::<lambda(GSource*, GSourceFunc, gpointer)>::operator()(GSource *, GSourceFunc, gpointer) const (__closure=0x0, source=0x55ede51ca170, callback=0x7f1d4eb1a8ae <WTF::RunLoop::TimerBase::<lambda(gpointer)>::_FUN(gpointer)>, userData=0x7f1d4522cc08) at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:45
#59 0x00007f1d4eb1a0ea in WTF::<lambda(GSource*, GSourceFunc, gpointer)>::_FUN(GSource *, GSourceFunc, gpointer) () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:46
#60 0x00007f1d47e00c3e in g_main_dispatch (context=0x7f1cd4000b60) at ../glib/gmain.c:3309
#61 0x00007f1d47e00c3e in g_main_context_dispatch (context=context at entry=0x7f1cd4000b60) at ../glib/gmain.c:3974
#62 0x00007f1d47e00ff0 in g_main_context_iterate (context=0x7f1cd4000b60, block=block at entry=1, dispatch=dispatch at entry=1, self=<optimized out>) at ../glib/gmain.c:4047
#63 0x00007f1d47e012e3 in g_main_loop_run (loop=0x7f1cd4001480) at ../glib/gmain.c:4241
#64 0x00007f1d4eb1a66a in WTF::RunLoop::run() () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:96
#65 0x00007f1d5da05f17 in WebKit::<lambda()>::operator()(void) const (__closure=0x7f1cfc2872a8) at ../../Source/WebKit/Shared/CoordinatedGraphics/threadedcompositor/CompositingRunLoop.cpp:49
#66 0x00007f1d5da0eaa8 in WTF::Detail::CallableWrapper<WebKit::createRunLoop()::<lambda()>, void>::call(void) (this=0x7f1cfc2872a0) at DerivedSources/ForwardingHeaders/wtf/Function.h:52
#67 0x00007f1d5ce82513 in WTF::Function<void ()>::operator()() const (this=0x7f1cdfffec30) at DerivedSources/ForwardingHeaders/wtf/Function.h:83
#68 0x00007f1d4ea98925 in WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*) (newThreadContext=0x7f1cfc2862d0) at ../../Source/WTF/wtf/Threading.cpp:167
#69 0x00007f1d4eb21195 in WTF::wtfThreadEntryPoint(void*) (context=0x7f1cfc2862d0) at ../../Source/WTF/wtf/posix/ThreadingPOSIX.cpp:197
#70 0x00007f1d48e815e2 in start_thread (arg=<optimized out>) at pthread_create.c:479
#71 0x00007f1d46b0a473 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200727/4126d969/attachment-0001.htm>

More information about the webkit-unassigned mailing list