[Webkit-unassigned] [Bug 216777] REGRESSION(r267010) [GLIB] compositing/video/video-update-rendering.html is a flaky crash

Thu Sep 24 21:56:16 PDT 2020

https://bugs.webkit.org/show_bug.cgi?id=216777

--- Comment #5 from Lauro Moura <lmoura at igalia.com> ---
Created attachment 409654

  --> https://bugs.webkit.org/attachment.cgi?id=409654&action=review

Reproducible crash log for replaced-element-003.tentative.html

The smallest test case I managed to reproduce reliably:

./Tools/Scripts/run-webkit-tests --verbose --debug-rwt-logging --no-retry-failures --no-new-test-results --no-build --no-show-results --clobber-old-results --display-server=xvfb --results-directory layout-test-results --release --gtk imported/w3c/web-platform-tests/css/css-sizing/aspect-ratio/replaced-element-003.tentative.html --iterations=2

Trace snippet:

Thread 1 (Thread 0x7efe00ff9700 (LWP 192)):
#0  __GI_raise (sig=sig at entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1  0x00007efec696e855 in __GI_abort () at abort.c:79
#2  0x00007efec696e729 in __assert_fail_base (fmt=0x7efec6adc0e8 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=0x7efe5f695c10 "c != _SIMPLE_MTX_INVALID_VALUE", file=0x7efe5f695caf "../src/util/s
imple_mtx.h", line=89, function=<optimized out>) at assert.c:92
#3  0x00007efec697ddb6 in __GI___assert_fail (assertion=assertion at entry=0x7efe5f695c10 "c != _SIMPLE_MTX_INVALID_VALUE", file=file at entry=0x7efe5f695caf "../src/util/simple_mtx.h", line=line at entry=89, fun
ction=function at entry=0x7efe5f6a2e90 <__PRETTY_FUNCTION__.11> "simple_mtx_lock") at assert.c:101
#4  0x00007efe5e874a35 in simple_mtx_lock (mtx=0x7efdc807ab00) at ../src/util/simple_mtx.h:83
#5  0x00007efe5e8752fe in simple_mtx_lock (mtx=0x7efdc807ab00) at ../src/util/simple_mtx.h:94
#6  st_save_zombie_sampler_view (st=0x7efdc8079290, view=<optimized out>) at ../src/mesa/state_tracker/st_context.c:315
#7  0x00007efe5e8670bd in st_texture_release_all_sampler_views (st=st at entry=0x7efdd0083bf0, stObj=stObj at entry=0x7efdc8222760) at ../src/mesa/state_tracker/st_sampler_view.c:233
#8  0x00007efe5e8677bf in st_texture_release_all_sampler_views (stObj=0x7efdc8222760, st=0x7efdd0083bf0) at ../src/mesa/state_tracker/st_sampler_view.c:221
#9  st_delete_texture_sampler_views (st=st at entry=0x7efdd0083bf0, stObj=stObj at entry=0x7efdc8222760) at ../src/mesa/state_tracker/st_sampler_view.c:253
#10 0x00007efe5e8566be in st_DeleteTextureObject (ctx=0x7efdd01efc10, texObj=0x7efdc8222760) at ../src/mesa/state_tracker/st_cb_texture.c:193
#11 0x00007efe5ea1d670 in _mesa_reference_texobj_ (ptr=ptr at entry=0x7efdd02032d8, tex=tex at entry=0x7efdd022f910) at ../src/mesa/main/texobj.c:607
#12 0x00007efe5ea1d9f8 in _mesa_reference_texobj (tex=0x7efdd022f910, ptr=0x7efdd02032d8) at ../src/mesa/main/texobj.h:100
#13 bind_texture_object (ctx=0x7efdd01efc10, unit=2, texObj=0x7efdd022f910) at ../src/mesa/main/texobj.c:1691
#14 0x00007efed0f44754 in WebCore::BitmapTextureGL::updateContents(void const*, WebCore::IntRect const&, WebCore::IntPoint const&, int) () at /app/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#15 0x00007efecf1f749f in WebCore::CoordinatedBackingStoreTile::swapBuffers(WebCore::TextureMapper&) () at /app/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#16 0x00007efecf1f818b in WebCore::CoordinatedBackingStore::commitTileOperations(WebCore::TextureMapper&) () at /app/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#17 0x00007efecec99235 in WebKit::CoordinatedGraphicsScene::updateSceneState() () at /app/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#18 0x00007efecec9b0e5 in WebKit::CoordinatedGraphicsScene::paintToCurrentGLContext(WebCore::TransformationMatrix const&, WebCore::FloatRect const&, unsigned int) () at /app/webkit/WebKitBuild/Release/li
b/libwebkit2gtk-4.0.so.37
#19 0x00007efecec9b5ef in WebKit::ThreadedCompositor::renderLayerTree() () at /app/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#20 0x00007efecc4fdff5 in WTF::RunLoop::TimerBase::TimerBase(WTF::RunLoop&)::{lambda(void*)#1}::_FUN(void*) () at /app/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#21 0x00007efecc4fe26f in WTF::RunLoop::{lambda(_GSource*, int (*)(void*), void*)#1}::_FUN(_GSource*, int (*)(void*), void*) () at /app/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#22 0x00007efec7dde04f in g_main_dispatch (context=0x7efdd0000b60) at ../glib/gmain.c:3325
#23 g_main_context_dispatch (context=0x7efdd0000b60) at ../glib/gmain.c:4016
#24 0x00007efec7dde3f8 in g_main_context_iterate (context=0x7efdd0000b60, block=block at entry=1, dispatch=dispatch at entry=1, self=<optimized out>) at ../glib/gmain.c:4092
#25 0x00007efec7dde713 in g_main_loop_run (loop=0x7efdd0001480) at ../glib/gmain.c:4290
#26 0x00007efecc4fe3b8 in WTF::RunLoop::run() () at /app/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#27 0x00007efecc49ce99 in WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*) () at /app/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#28 0x00007efecc5004c9 in WTF::wtfThreadEntryPoint(void*) () at /app/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#29 0x00007efec8ed24d2 in start_thread (arg=<optimized out>) at pthread_create.c:477
#30 0x00007efec6a4a4d3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200925/68fa7a73/attachment-0001.htm>