[Webkit-unassigned] [Bug 222763] New: [GStreamer] Crashes deep in under gst_element_add_pad

Thu Mar 4 15:20:59 PST 2021

https://bugs.webkit.org/show_bug.cgi?id=222763

            Bug ID: 222763
           Summary: [GStreamer] Crashes deep in under gst_element_add_pad
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Media
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at gnome.org

All pages on vox.com have become very crashy. I can look at my coredumpctl history to see when I take my lunch break. :P

Thu 2021-03-04 13:28:13 CST  165981  1000  1000   6 present   /usr/libexec/webkit2gtk-4.0/WebKitWebProcess
Thu 2021-03-04 13:28:41 CST  166244  1000  1000   6 present   /usr/libexec/webkit2gtk-4.0/WebKitWebProcess
Thu 2021-03-04 13:29:15 CST  166901  1000  1000   6 present   /usr/libexec/webkit2gtk-4.0/WebKitWebProcess
Thu 2021-03-04 13:30:21 CST  168105  1000  1000   6 present   /usr/libexec/webkit2gtk-4.0/WebKitWebProcess
Thu 2021-03-04 17:11:34 CST  255740  1000  1000   6 present   /usr/libexec/webkit2gtk-4.0/WebKitWebProcess

I think this started happening with 2.31.90, but not certain:

#0  __GI_raise (sig=sig at entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1  0x00007ff1de354855 in __GI_abort () at abort.c:79
#2  0x00007ff1deb5e6eb in  () at /usr/lib/x86_64-linux-gnu/libwebkit2gtk-4.0.so.37
#3  0x00007ff1d9f3df75 in ffi_call_unix64 () at ../src/x86/unix64.S:101
#4  0x00007ff1d9f3d369 in ffi_call_int
    (cif=<optimized out>, fn=<optimized out>, rvalue=<optimized out>, avalue=<optimized out>, closure=<optimized out>) at ../src/x86/ffi64.c:669
#9  0x00007ff1de0119c3 in <emit signal ??? on instance 0x7fefa000c020 [GstDecodebin3]>
    (instance=instance at entry=0x7fefa000c020, signal_id=<optimized out>, detail=detail at entry=0)
    at ../gobject/gsignal.c:3553
    #5  0x00007ff1ddff8a0c in g_cclosure_marshal_generic
    (closure=closure at entry=0x7fefa0010db0, return_gvalue=return_gvalue at entry=0x0, n_param_values=n_param_values at entry=2, param_values=param_values at entry=0x7ff00d7f93f0, invocation_hint=invocation_hint at entry=0x7ff00d7f9370, marshal_data=marshal_data at entry=0x0) at ../gobject/gclosure.c:1510
    #6  0x00007ff1ddff7f3f in g_closure_invoke
    (closure=0x7fefa0010db0, return_value=return_value at entry=0x0, n_param_values=2, param_values=param_values at entry=0x7ff00d7f93f0, invocation_hint=invocation_hint at entry=0x7ff00d7f9370) at ../gobject/gclosure.c:810
    #7  0x00007ff1de00ad4b in signal_emit_unlocked_R
    (node=node at entry=0x560ea74f5600, detail=detail at entry=0, instance=instance at entry=0x7fefa000c020, emission_return=emission_return at entry=0x0, instance_and_params=instance_and_params at entry=0x7ff00d7f93f0) at ../gobject/gsignal.c:3741
    #8  0x00007ff1de011861 in g_signal_emit_valist
    (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args at entry=0x7ff00d7f9590) at ../gobject/gsignal.c:3497
#10 0x00007ff1db3405a0 in gst_element_add_pad
    (element=element at entry=0x7fefa000c020 [GstDecodebin3], pad=0x7fefa000f610 [GstGhostPad])
    at ../gst/gstelement.c:714
#11 0x00007ff154189433 in reconfigure_output_stream (output=0x7fef9c0024d0, slot=0x7fef9801edc0)
    at ../gst/playback/gstdecodebin3.c:2254
#12 0x00007ff154189b4f in multiqueue_src_probe
    (pad=pad at entry=0x7fef980111c0 [GstPad], info=info at entry=0x7ff00d7f9950, slot=0x7fef9801edc0)
    at ../gst/playback/gstdecodebin3.c:1791
#13 0x00007ff1db35c2ee in probe_hook_marshal (hook=0x7fef980122c0, data=0x7ff00d7f9820) at ../gst/gstpad.c:3565
#14 0x00007ff1ddef0466 in g_hook_list_marshal
    (hook_list=hook_list at entry=0x7fef98011258, may_recurse=may_recurse at entry=1, marshaller=marshaller at entry=0x7ff1db35bee0 <probe_hook_marshal>, data=data at entry=0x7ff00d7f9820) at ../glib/ghook.c:672
#15 0x00007ff1db35b9d9 in do_probe_callbacks
    (pad=pad at entry=0x7fef980111c0 [GstPad], info=<optimized out>, defaultval=defaultval at entry=GST_FLOW_OK)
    at ../gst/gstpad.c:3728
#16 0x00007ff1db35f1c5 in gst_pad_push_event_unchecked
    (pad=pad at entry=0x7fef980111c0 [GstPad], event=0x7fef9801f6c0 [GstEvent], type=type at entry=GST_PAD_PROBE_TYPE_EVENT_DOWNSTREAM) at ../gst/gstpad.c:5376
#17 0x00007ff1db35f758 in push_sticky
    (pad=pad at entry=0x7fef980111c0 [GstPad], ev=ev at entry=0x7ff00d7f9a30, user_data=user_data at entry=0x7ff00d7f9aa0)
    at ../gst/gstevent.h:438
#18 0x00007ff1db35d0b0 in events_foreach
    (pad=pad at entry=0x7fef980111c0 [GstPad], func=func at entry=0x7ff1db35f700 <push_sticky>, user_data=user_data at entry=0x7ff00d7f9aa0) at ../gst/gstpad.c:608
#19 0x00007ff1db368400 in check_sticky (event=0x7fef9801f6c0 [GstEvent], pad=0x7fef980111c0 [GstPad])
    at ../gst/gstpad.c:3986
#20 gst_pad_push_event (pad=0x7fef980111c0 [GstPad], event=event at entry=0x7fef9801f6c0 [GstEvent])
    at ../gst/gstpad.c:5542
#21 0x00007ff15c258474 in gst_single_queue_push_one
    (allow_drop=<synthetic pointer>, object=0x7fef9801f6c0 [GstEvent], sq=0x7fef98020ff0, mq=0x560ea79906f0 [GstMultiQueue]) at ../plugins/elements/gstmultiqueue.c:1688
#22 gst_multi_queue_loop (pad=<optimized out>) at ../plugins/elements/gstmultiqueue.c:1959
#23 0x00007ff1db396017 in gst_task_func (task=0x7fefa4029dd0 [GstTask]) at ../gst/gsttask.c:328
#24 0x00007ff1ddf2bea4 in g_thread_pool_thread_proxy (data=<optimized out>) at ../glib/gthreadpool.c:354
#25 0x00007ff1ddf2b5a1 in g_thread_proxy (data=0x7fef98003460) at ../glib/gthread.c:826
#26 0x00007ff1da68b4d2 in start_thread (arg=<optimized out>) at pthread_create.c:477
#27 0x00007ff1de430323 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Will attach a 'bt full' and a 'thread apply all bt full'.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210304/a8561785/attachment.htm>