[Webkit-unassigned] [Bug 231157] Safari crashes when GPU Process: Canvas Rendering is enabled

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Oct 13 00:44:24 PDT 2021


https://bugs.webkit.org/show_bug.cgi?id=231157

Brandon Liu <bdon at bdon.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |bdon at bdon.org

--- Comment #4 from Brandon Liu <bdon at bdon.org> ---
Hi,

Thanks for creating this example page. I was able to modify it to be more specific, please see these links to 8 different test cases:

https://bdon.github.io/protomaps-experiments/safari15/

JavaScript code is here: https://github.com/bdon/protomaps-experiments/tree/master/safari15

In each frame it does 2 things:
1. it strokes or fills a path with N subpaths, where N can be controlled by the URL query parameter “count”. The subpaths are each a filled circle, a stroked line with 2 vertices, a triangle or a quad. 
2. It fillRects 1000 times with random height. This # of 1000 does not seem to matter.

For each case, there is an exact value of the # of subpaths N at which the hanging/crash will reproduce immediately; below this # there is no issue.

For arc filling, it hangs at 400 arcs
For line drawing, it hangs at 2728 lines
For triangles, it hangs at 1819 triangles
For quads, it hangs at 1364 quads

It seems like exactly 5,456 vertices in a single path draw call is causing the crash. If the 2nd part, 1000 fillRects, is left out, it also works fine. 

I can reproduce this perfectly on 3 devices of varying specs: x86 MacBook, iPhone XS and iPad Air 2.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20211013/3449b5e0/attachment-0001.htm>


More information about the webkit-unassigned mailing list