[Webkit-unassigned] [Bug 238280] New: REGRESSION? (248052 at main): ASSERTION FAILED: didContain in WebCore::removeActiveContext(WebCore::WebGLRenderingContextBase &)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=238280

            Bug ID: 238280
           Summary: REGRESSION? (248052 at main): ASSERTION FAILED:
                    didContain in
                    WebCore::removeActiveContext(WebCore::WebGLRenderingCo
                    ntextBase &)
           Product: WebKit
           Version: Safari 13
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebGL
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ryanhaddad at apple.com
                CC: dino at apple.com, kbr at google.com, kkinnunen at apple.com,
                    webkit-bot-watchers-bugzilla at group.apple.com,
                    webkit-bug-importer at group.apple.com

The following API test is consistently asserting on iOS debug bots, it looks to have started with https://commits.webkit.org/248052@main which added the assertion.

TestWebKitAPI.WebKitLegacy.WebGLNoCrashOnOtherThreadAccess
        2022-03-23 11:30:50.720 TestWebKitAPI[59178:71510078] Writing analzed variants.
        Shader compiler output: Metal
        ASSERTION FAILED: didContain
        ./html/canvas/WebGLRenderingContextBase.cpp(826) : void WebCore::removeActiveContext(WebCore::WebGLRenderingContextBase &)
        1   0x112f460e9 WTFCrash
        2   0x164a44f7b WTFCrashWithInfo(int, char const*, char const*, int)
        3   0x16872698a WebCore::removeActiveContext(WebCore::WebGLRenderingContextBase&)
        4   0x1687262ec WebCore::WebGLRenderingContextBase::destroyGraphicsContextGL()
        5   0x168724a8c WebCore::WebGLRenderingContextBase::~WebGLRenderingContextBase()
        6   0x16875e455 WebCore::WebGLRenderingContext::~WebGLRenderingContext()
        7   0x1687410a5 WebCore::WebGLRenderingContext::~WebGLRenderingContext()
        8   0x1687410c9 WebCore::WebGLRenderingContext::~WebGLRenderingContext()
        9   0x1684caf5c std::__1::default_delete<WebCore::CanvasRenderingContext>::operator()(WebCore::CanvasRenderingContext*) const
        10  0x1684caedc std::__1::unique_ptr<WebCore::CanvasRenderingContext, std::__1::default_delete<WebCore::CanvasRenderingContext> >::reset(WebCore::CanvasRenderingContext*)
        11  0x1684b75b4 std::__1::unique_ptr<WebCore::CanvasRenderingContext, std::__1::default_delete<WebCore::CanvasRenderingContext> >::operator=(std::nullptr_t)
        12  0x1684b74f8 WebCore::HTMLCanvasElement::~HTMLCanvasElement()
        13  0x1684b75f5 WebCore::HTMLCanvasElement::~HTMLCanvasElement()
        14  0x1684b7659 WebCore::HTMLCanvasElement::~HTMLCanvasElement()
        15  0x16818868c WebCore::Node::removedLastRef()
        16  0x164abd16c WebCore::Node::deref() const
        17  0x16817f8c5 WebCore::Node::derefEventTarget()
        18  0x165011a89 WebCore::EventTarget::deref()
        19  0x165011a39 WTF::Ref<WebCore::EventTarget, WTF::RawPtrTraits<WebCore::EventTarget> >::~Ref()
        20  0x165011995 WTF::Ref<WebCore::EventTarget, WTF::RawPtrTraits<WebCore::EventTarget> >::~Ref()
        21  0x165699d49 WebCore::JSDOMWrapper<WebCore::EventTarget, WTF::RawPtrTraits<WebCore::EventTarget> >::~JSDOMWrapper()
        22  0x165699d25 WebCore::JSEventTarget::~JSEventTarget()
        23  0x16562e4c5 WebCore::JSEventTarget::~JSEventTarget()
        24  0x1655eb24d WebCore::JSEventTarget::destroy(JSC::JSCell*)
        25  0x114bc0207 JSC::JSDestructibleObjectDestroyFunc::operator()(JSC::VM&, JSC::JSCell*) const
        26  0x114bc01d5 JSC::JSDestructibleObjectHeapCellType::destroy(JSC::VM&, JSC::JSCell*) const
        27  0x11447fdca JSC::Subspace::destroy(JSC::VM&, JSC::JSCell*)
        28  0x114473311 JSC::PreciseAllocation::sweep()
        29  0x114459723 JSC::MarkedSpace::sweepPreciseAllocations()
        30  0x1143af2c0 JSC::Heap::sweepInFinalize()
        31  0x1143af00a JSC::Heap::finalize()


https://results.webkit.org/?suite=api-tests&test=TestWebKitAPI.AppPrivacyReport.AppInitiatedRequestWithNavigation

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220323/d02680eb/attachment-0001.htm>