[Webkit-unassigned] [Bug 202229] [GTK] CSS dark mode tests show spurious numbers

Thu Oct 22 22:55:49 PDT 2020

https://bugs.webkit.org/show_bug.cgi?id=202229

Diego Pino <dpino at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dpino at igalia.com

--- Comment #2 from Diego Pino <dpino at igalia.com> ---
(In reply to Carlos Alberto Lopez Perez from comment #1)
> This test is crashing sometimes randomly. On the last 4000 runs it has
> crashed 26 times. The crash log points to something related with the
> graphics drivers.
> 
> Thread 1 (Thread 0x7fa7459ff700 (LWP 1814)):
> #0  __GI_raise (sig=sig at entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
> #1  0x00007fa7a09c4855 in __GI_abort () at abort.c:79
> #2  0x00007fa7a09c4729 in __assert_fail_base (fmt=0x7fa7a0b320e8 "%s%s%s:%u:
> %s%sAssertion `%s' failed.\n%n", assertion=0x7fa737695c10 "c !=
> _SIMPLE_MTX_INVALID_VALUE", file=0x7fa737695caf "../src/util/simple_mtx.h",
> line=89, function=<optimized out>) at assert.c:92
> #3  0x00007fa7a09d3db6 in __GI___assert_fail
> (assertion=assertion at entry=0x7fa737695c10 "c != _SIMPLE_MTX_INVALID_VALUE",
> file=file at entry=0x7fa737695caf "../src/util/simple_mtx.h",
> line=line at entry=89, function=function at entry=0x7fa7376a2e90
> <__PRETTY_FUNCTION__.11> "simple_mtx_lock") at assert.c:101
> #4  0x00007fa736874a35 in simple_mtx_lock (mtx=0x7fa6840eb910) at
> ../src/util/simple_mtx.h:83
> #5  0x00007fa7368752fe in simple_mtx_lock (mtx=0x7fa6840eb910) at
> ../src/util/simple_mtx.h:94
> #6  st_save_zombie_sampler_view (st=0x7fa6840ea0a0, view=<optimized out>) at
> ../src/mesa/state_tracker/st_context.c:315
> #7  0x00007fa7368670bd in st_texture_release_all_sampler_views
> (st=st at entry=0x7fa730349c40, stObj=stObj at entry=0x7fa68433dd40) at
> ../src/mesa/state_tracker/st_sampler_view.c:233
> #8  0x00007fa7368677bf in st_texture_release_all_sampler_views
> (stObj=0x7fa68433dd40, st=0x7fa730349c40) at
> ../src/mesa/state_tracker/st_sampler_view.c:221
> #9  st_delete_texture_sampler_views (st=st at entry=0x7fa730349c40,
> stObj=stObj at entry=0x7fa68433dd40) at
> ../src/mesa/state_tracker/st_sampler_view.c:253
> #10 0x00007fa7368566be in st_DeleteTextureObject (ctx=0x7fa7304b5560,
> texObj=0x7fa68433dd40) at ../src/mesa/state_tracker/st_cb_texture.c:193
> #11 0x00007fa736a1d670 in _mesa_reference_texobj_
> (ptr=ptr at entry=0x7fa7304c8c28, tex=tex at entry=0x7fa730ade450) at
> ../src/mesa/main/texobj.c:607
> #12 0x00007fa736a1d9f8 in _mesa_reference_texobj (tex=0x7fa730ade450,
> ptr=0x7fa7304c8c28) at ../src/mesa/main/texobj.h:100
> #13 bind_texture_object (ctx=0x7fa7304b5560, unit=2, texObj=0x7fa730ade450)
> at ../src/mesa/main/texobj.c:1691
> #14 0x00007fa7aad160e6 in WebCore::BitmapTextureGL::updateContents(void
> const*, WebCore::IntRect const&, WebCore::IntPoint const&, int) () at
> /app/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #15 0x00007fa7a93b67bc in
> WebCore::CoordinatedBackingStoreTile::swapBuffers(WebCore::TextureMapper&)
> () at /app/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #16 0x00007fa7a93b7875 in
> WebCore::CoordinatedBackingStore::commitTileOperations(WebCore::
> TextureMapper&) () at
> /app/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #17 0x00007fa7a8ebaea6 in
> WebKit::CoordinatedGraphicsScene::updateSceneState() () at
> /app/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #18 0x00007fa7a8eb9662 in
> WebKit::CoordinatedGraphicsScene::paintToCurrentGLContext(WebCore::
> TransformationMatrix const&, WebCore::FloatRect const&, unsigned int) () at
> /app/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #19 0x00007fa7a8ebd32b in WebKit::ThreadedCompositor::renderLayerTree() ()
> at /app/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #20 0x00007fa7a6459dac in
> WTF::RunLoop::TimerBase::TimerBase(WTF::RunLoop&)::$_3::__invoke(void*) ()
> at /app/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
> #21 0x00007fa7a645920a in WTF::RunLoop::$_0::__invoke(_GSource*, int
> (*)(void*), void*) () at
> /app/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
> #22 0x00007fa7a1e6704f in g_main_dispatch (context=0x7fa730000b60) at
> ../glib/gmain.c:3325
> #23 g_main_context_dispatch (context=0x7fa730000b60) at ../glib/gmain.c:4016
> #24 0x00007fa7a1e673f8 in g_main_context_iterate (context=0x7fa730000b60,
> block=block at entry=1, dispatch=dispatch at entry=1, self=<optimized out>) at
> ../glib/gmain.c:4092
> #25 0x00007fa7a1e67713 in g_main_loop_run (loop=0x7fa730001480) at
> ../glib/gmain.c:4290
> #26 0x00007fa7a64597ab in WTF::RunLoop::run() () at
> /app/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
> #27 0x00007fa7a64009a0 in
> WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*) () at
> /app/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
> #28 0x00007fa7a645bf46 in WTF::wtfThreadEntryPoint(void*) () at
> /app/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
> #29 0x00007fa7a2f5b4d2 in start_thread (arg=<optimized out>) at
> pthread_create.c:477
> #30 0x00007fa7a0aa04d3 in clone () at
> ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
> 
> https://build.webkit.org/results/GTK-Linux-64-bit-Release-Tests/
> r268900%20(16593)/css-dark-mode/older-syntax/supported-color-schemes-css-
> crash-log.txt

Crashes with a stacktrace like this started happening after the Flatpak SDK 0.3 upgrade. We're tracking down crashes with this error ("c != _SIMPLE_MTX_INVALID_VALUE") under bug https://bugs.webkit.org/show_bug.cgi?id=216777.

The error seems to be due to a regression in Mesa (https://gitlab.freedesktop.org/mesa/mesa/blob/master/docs/relnotes/20.1.8.rst). The current Flatpak SDK uses Mesa 20.1.5 (https://github.com/WebKit/webkit/blob/master/Tools/buildstream/elements/sdk/mesa.bst), although it cherry-picks the patch that in theory fixes this regression (https://github.com/WebKit/webkit/blob/master/Tools/buildstream/patches/mesa/0003-mesa-st-release-debug_output-after-destroying-the-co.patch). However, the issue is still happening.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20201023/e4f32cf7/attachment-0001.htm>