[Webkit-unassigned] [Bug 237544] New: [ iOS Debug ] fast/canvas/webgl/compressed-tex-image.html is a flaky crash

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Mar 7 12:00:56 PST 2022


https://bugs.webkit.org/show_bug.cgi?id=237544

            Bug ID: 237544
           Summary: [ iOS Debug ]
                    fast/canvas/webgl/compressed-tex-image.html is a flaky
                    crash
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: Matteo_flores at apple.com

fast/canvas/webgl/compressed-tex-image.html
Appears to be a flaky crash on iOS Debug queues.

HISTORY:
https://results.webkit.org/?suite=layout-tests&test=fast%2Fcanvas%2Fwebgl%2Fcompressed-tex-image.html

CRASH-LOG:
CRASHING TEST: fast/canvas/webgl/compressed-tex-image.html

Thread 0 Crashed:
0   com.apple.JavaScriptCore            0x00000007bb61d74e WTFCrash + 14 (Assertions.cpp:322)
1   com.apple.WebCore                   0x00000007e3228d39 WTF::CrashOnOverflow::crash() + 9 (CheckedArithmetic.h:109)
2   com.apple.WebCore                   0x00000007e3228d29 WTF::CrashOnOverflow::overflowed() + 9 (CheckedArithmetic.h:102)
3   com.apple.WebCore                   0x00000007e6e50048 WTF::Vector<WebCore::WebGLRenderingContextBase::TextureUnitState, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>::at(unsigned long) + 72 (Vector.h:718)
4   com.apple.WebCore                   0x00000007e6e276bd WTF::Vector<WebCore::WebGLRenderingContextBase::TextureUnitState, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>::operator[](unsigned long) + 29 (Vector.h:728)
5   com.apple.WebCore                   0x00000007e6e7f5ef WebCore::WebGLRenderingContextBase::bindTexture(unsigned int, WebCore::WebGLTexture*) + 207 (WebGLRenderingContextBase.cpp:1716)
6   com.apple.WebCore                   0x00000007e4fd6aa8 WebCore::jsWebGLRenderingContextPrototypeFunction_bindTextureBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()::operator()() const + 72 (JSWebGLRenderingContext.cpp:4550)
7   com.apple.WebCore                   0x00000007e4fd686d JSC::JSValue WebCore::toJS<WebCore::IDLUndefined, WebCore::jsWebGLRenderingContextPrototypeFunction_bindTextureBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()>(JSC::JSGlobalObject&, JSC::ThrowScope&, WebCore::jsWebGLRenderingContextPrototypeFunction_bindTextureBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()&&) + 29 (JSDOMConvertBase.h:165)
8   com.apple.WebCore                   0x00000007e4fd677f WebCore::jsWebGLRenderingContextPrototypeFunction_bindTextureBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*) + 1423 (JSWebGLRenderingContext.cpp:4550)
9   com.apple.WebCore                   0x00000007e4fd61bd long long WebCore::IDLOperation<WebCore::JSWebGLRenderingContext>::call<&(WebCore::jsWebGLRenderingContextPrototypeFunction_bindTextureBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)), (WebCore::CastedThisErrorBehavior)0>(JSC::JSGlobalObject&, JSC::CallFrame&, char const*) + 685 (JSDOMOperation.h:63)
10  com.apple.WebCore                   0x00000007e4fd00f4 WebCore::jsWebGLRenderingContextPrototypeFunction_bindTexture(JSC::JSGlobalObject*, JSC::CallFrame*) + 36 (JSWebGLRenderingContext.cpp:4555)
11  ???                                 0x00003133daa0c038 0 + 54098781061176
12  com.apple.JavaScriptCore            0x00000007bbcfdc37 llint_entry + 147839
13  com.apple.JavaScriptCore            0x00000007bbcd97be vmEntryToJavaScript + 289
14  com.apple.JavaScriptCore            0x00000007bcccb7e5 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 229 (JITCodeInlines.h:42)
15  com.apple.JavaScriptCore            0x00000007bcccae89 JSC::Interpreter::executeProgram(JSC::SourceCode const&, JSC::JSGlobalObject*, JSC::JSObject*) + 9481 (Interpreter.cpp:977)
16  com.apple.JavaScriptCore            0x00000007bd123555 JSC::evaluate(JSC::JSGlobalObject*, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 565 (Completion.cpp:137)
17  com.apple.JavaScriptCore            0x00000007bd12369c JSC::profiledEvaluate(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 76 (Completion.cpp:152)
18  com.apple.WebCore                   0x00000007e6029568 WebCore::JSExecState::profiledEvaluate(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 216 (JSExecState.h:104)
19  com.apple.WebCore                   0x00000007e6028fde WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld&) + 510 (ScriptController.cpp:152)
20  com.apple.WebCore                   0x00000007e6028d99 WebCore::ScriptController::evaluateInWorldIgnoringException(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld&) + 41 (ScriptController.cpp:119)
21  com.apple.WebCore                   0x00000007e60297e5 WebCore::ScriptController::evaluateIgnoringException(WebCore::ScriptSourceCode const&) + 53 (ScriptController.cpp:171)
22  com.apple.WebCore                   0x00000007e693f2f0 WebCore::ScriptElement::executeClassicScript(WebCore::ScriptSourceCode const&) + 1616 (ScriptElement.cpp:400)
23  com.apple.WebCore                   0x00000007e693d354 WebCore::ScriptElement::prepareScript(WTF::TextPosition const&, WebCore::ScriptElement::LegacyTypeSupport) + 2676 (ScriptElement.cpp:283)
24  com.apple.WebCore                   0x00000007e6efa1ae WebCore::HTMLScriptRunner::runScript(WebCore::ScriptElement&, WTF::TextPosition const&) + 382 (HTMLScriptRunner.cpp:250)
25  com.apple.WebCore                   0x00000007e6ef9fb4 WebCore::HTMLScriptRunner::execute(WTF::Ref<WebCore::ScriptElement, WTF::RawPtrTraits<WebCore::ScriptElement> >&&, WTF::TextPosition const&) + 68 (HTMLScriptRunner.cpp:140)
26  com.apple.WebCore                   0x00000007e6ed9e43 WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder() + 867 (HTMLDocumentParser.cpp:241)
27  com.apple.WebCore                   0x00000007e6eda2d1 WebCore::HTMLDocumentParser::pumpTokenizerLoop(WebCore::HTMLDocumentParser::SynchronousMode, bool, WebCore::PumpSession&) + 161 (HTMLDocumentParser.cpp:261)
28  com.apple.WebCore                   0x00000007e6ed96b8 WebCore::HTMLDocumentParser::pumpTokenizer(WebCore::HTMLDocumentParser::SynchronousMode) + 424 (HTMLDocumentParser.cpp:306)
29  com.apple.WebCore                   0x00000007e6ed8ed0 WebCore::HTMLDocumentParser::pumpTokenizerIfPossible(WebCore::HTMLDocumentParser::SynchronousMode) + 192 (HTMLDocumentParser.cpp:193)
30  com.apple.WebCore                   0x00000007e6edae6c WebCore::HTMLDocumentParser::append(WTF::RefPtr<WTF::StringImpl, WTF::RawPtrTraits<WTF::StringImpl>, WTF::DefaultRefDerefTraits<WTF::StringImpl> >&&, WebCore::HTMLDocumentParser::SynchronousMode) + 524 (HTMLDocumentParser.cpp:431)
31  com.apple.WebCore                   0x00000007e6edac4f WebCore::HTMLDocumentParser::append(WTF::RefPtr<WTF::StringImpl, WTF::RawPtrTraits<WTF::StringImpl>, WTF::DefaultRefDerefTraits<WTF::StringImpl> >&&) + 47 (HTMLDocumentParser.cpp:391)
32  com.apple.WebCore                   0x00000007e66fe543 WebCore::DecodedDataDocumentParser::appendBytes(WebCore::DocumentWriter&, unsigned char const*, unsigned long) + 147 (DecodedDataDocumentParser.cpp:50)
33  com.apple.WebCore                   0x00000007e734f23d WebCore::DocumentWriter::addData(WebCore::SharedBuffer const&) + 365 (DocumentWriter.cpp:276)
34  com.apple.WebCore                   0x00000007e7347766 WebCore::DocumentLoader::commitData(WebCore::SharedBuffer const&) + 3078 (DocumentLoader.cpp:1314)
35  com.apple.WebKit                    0x00000007a0143872 WebKit::WebFrameLoaderClient::committedLoad(WebCore::DocumentLoader*, WebCore::SharedBuffer const&) + 66 (WebFrameLoaderClient.cpp:1163)
36  com.apple.WebCore                   0x00000007e734dc76 WebCore::DocumentLoader::commitLoad(WebCore::SharedBuffer const&) + 182 (DocumentLoader.cpp:1178)
37  com.apple.WebCore                   0x00000007e734f533 WebCore::DocumentLoader::dataReceived(WebCore::SharedBuffer const&) + 579 (DocumentLoader.cpp:1346)
38  com.apple.WebCore                   0x00000007e734f2dd WebCore::DocumentLoader::dataReceived(WebCore::CachedResource&, WebCore::SharedBuffer const&) + 141 (DocumentLoader.cpp:1320)
39  com.apple.WebCore                   0x00000007e750471e WebCore::CachedRawResource::notifyClientsDataWasReceived(WebCore::SharedBuffer const&) + 126 (CachedRawResource.cpp:145)
40  com.apple.WebCore                   0x00000007e75044e7 WebCore::CachedRawResource::updateBuffer(WebCore::FragmentedSharedBuffer const&) + 343 (CachedRawResource.cpp:81)
41  com.apple.WebCore                   0x00000007e747ec94 WebCore::SubresourceLoader::didReceiveBuffer(WebCore::FragmentedSharedBuffer const&, long long, WebCore::DataPayloadType) + 708 (SubresourceLoader.cpp:545)
42  com.apple.WebCore                   0x00000007e745bbbf WebCore::ResourceLoader::didReceiveData(WebCore::SharedBuffer const&, long long, WebCore::DataPayloadType) + 47 (ResourceLoader.cpp:559)
43  com.apple.WebKit                    0x000000079ffef4fa WebKit::WebResourceLoader::didReceiveData(IPC::SharedBufferCopy const&, long long) + 858 (WebResourceLoader.cpp:238)
44  com.apple.WebKit                    0x00000007a08c2523 void IPC::callMemberFunctionImpl<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(IPC::SharedBufferCopy const&, long long), std::__1::tuple<IPC::SharedBufferCopy, long long>, 0ul, 1ul>(WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(IPC::SharedBufferCopy const&, long long), std::__1::tuple<IPC::SharedBufferCopy, long long>&&, std::__1::integer_sequence<unsigned long, 0ul, 1ul>) + 179 (HandleMessage.h:125)
45  com.apple.WebKit                    0x00000007a08c241d void IPC::callMemberFunction<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(IPC::SharedBufferCopy const&, long long), std::__1::tuple<IPC::SharedBufferCopy, long long>, std::__1::integer_sequence<unsigned long, 0ul, 1ul> >(std::__1::tuple<IPC::SharedBufferCopy, long long>&&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(IPC::SharedBufferCopy const&, long long)) + 109 (HandleMessage.h:131)
46  com.apple.WebKit                    0x00000007a08bc53a void IPC::handleMessage<Messages::WebResourceLoader::DidReceiveData, WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(IPC::SharedBufferCopy const&, long long)>(IPC::Connection&, IPC::Decoder&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(IPC::SharedBufferCopy const&, long long)) + 202 (HandleMessage.h:196)
47  com.apple.WebKit                    0x00000007a08bbd6b WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::Decoder&) + 427 (WebResourceLoaderMessageReceiver.cpp:74)
48  com.apple.WebKit                    0x000000079ffe131f WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 159 (NetworkProcessConnection.cpp:102)
49  com.apple.WebKit                    0x000000079f207ac4 IPC::Connection::dispatchMessage(IPC::Decoder&) + 532 (Connection.cpp:1092)
50  com.apple.WebKit                    0x000000079f208182 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 610 (Connection.cpp:1137)
51  com.apple.WebKit                    0x000000079f20877d IPC::Connection::dispatchOneIncomingMessage() + 189 (Connection.cpp:1206)
52  com.apple.WebKit                    0x000000079f226f55 IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_15::operator()() + 85 (Connection.cpp:1056)
53  com.apple.WebKit                    0x000000079f226e69 WTF::Detail::CallableWrapper<IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_15, void>::call() + 25 (Function.h:53)
54  com.apple.JavaScriptCore            0x00000007bb64a7e2 WTF::Function<void ()>::operator()() const + 130 (Function.h:82)
55  com.apple.JavaScriptCore            0x00000007bb6dcfde WTF::RunLoop::performWork() + 318 (RunLoop.cpp:133)
56  com.apple.JavaScriptCore            0x00000007bb6e180e WTF::RunLoop::performWork(void*) + 30 (RunLoopCF.cpp:46)
57  com.apple.CoreFoundation            0x0000000788533e25 0x7884b3000 + 527909
58  com.apple.CoreFoundation            0x0000000788533d1d 0x7884b3000 + 527645
59  com.apple.CoreFoundation            0x00000007885331f2 0x7884b3000 + 524786
60  com.apple.CoreFoundation            0x000000078852d951 0x7884b3000 + 502097
61  com.apple.CoreFoundation            0x000000078852d103 0x7884b3000 + 499971
62  com.apple.Foundation                0x0000000788e7541c 0x788d53000 + 1188892
63  com.apple.Foundation                0x0000000788e75638 0x788d53000 + 1189432
64  libxpc.dylib                        0x000000078997405f 0x789961000 + 77919
65  libxpc.dylib                        0x0000000789976050 0x789961000 + 86096
66  com.apple.WebKit                    0x000000079eaa863a WebKit::XPCServiceMain(int, char const**) + 218 (XPCServiceMain.mm:223)
67  com.apple.WebKit                    0x00000007a0a501bb WKXPCServiceMain + 27 (WKMain.mm:35)
68  com.apple.WebKit.WebContent         0x0000000106c2ad12 main + 34 (AuxiliaryProcessMain.cpp:30)
69  dyld_sim                            0x0000000788001e1e 0x788000000 + 7710
70  ???                                 0x0000000000000001 0 + 1
71  ???                                 0x0000000000000001 0 + 1

CRASH-LOG-URL:
https://build.webkit.org/results/Apple-iOS-15-Simulator-Debug-WK2-Tests/r290885%20(1859)/fast/canvas/webgl/compressed-tex-image-crash-log.txt

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220307/7ccc5b55/attachment-0001.htm>


More information about the webkit-unassigned mailing list