[Webkit-unassigned] [Bug 251553] New: REGRESSION(259108 at main): [GStreamer] imported/w3c/web-platform-tests/html/canvas/element/manual/wide-gamut-canvas/canvas-display-p3-drawImage-ImageBitmap-video.html is crashing

Wed Feb 1 14:34:40 PST 2023

https://bugs.webkit.org/show_bug.cgi?id=251553

            Bug ID: 251553
           Summary: REGRESSION(259108 at main): [GStreamer]
                    imported/w3c/web-platform-tests/html/canvas/element/ma
                    nual/wide-gamut-canvas/canvas-display-p3-drawImage-Ima
                    geBitmap-video.html is crashing
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: dpino at igalia.com

The following tests are crashing since 259108 at main:

  imported/w3c/web-platform-tests/html/canvas/element/manual/wide-gamut-canvas/canvas-display-p3-drawImage-ImageBitmap-video.html
  imported/w3c/web-platform-tests/html/canvas/element/manual/wide-gamut-canvas/canvas-display-p3-drawImage-video.html

layout-test-results/imported/w3c/web-platform-tests/html/canvas/element/manual/wide-gamut-canvas/canvas-display-p3-drawImage-ImageBitmap-video-crash-log.txt:

```
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/app/webkit/WebKitBuild/Release/bin/WPEWebProcess 533 50 --configure-jsc-for-te'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007f2c2d3cdef2 in webKitSrcIsCrossOrigin () from /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
[Current thread is 1 (Thread 0x7f2c22c779c0 (LWP 17888))]

Thread 1 (Thread 0x7f2c22c779c0 (LWP 17888)):
#0  0x00007f2c2d3cdef2 in webKitSrcIsCrossOrigin () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#1  0x00007f2c2d39554b in WebCore::MediaPlayerPrivateGStreamer::isCrossOrigin(WebCore::SecurityOrigin const&) const () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#2  0x00007f2c2f156a17 in WebCore::MediaPlayer::isCrossOrigin(WebCore::SecurityOrigin const&) const () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#3  0x00007f2c2eae7b43 in WebCore::ImageBitmap::createPromise(WebCore::ScriptExecutionContext&, WTF::RefPtr<WebCore::HTMLVideoElement, WTF::RawPtrTraits<WebCore::HTMLVideoElement>, WTF::DefaultRefDerefTraits<WebCore::HTMLVideoElement> >&, WebCore::ImageBitmapOptions&&, std::optional<WebCore::IntRect>, WebCore::DOMPromiseDeferred<
#4  0x00007f2c2eae8545 in WebCore::ImageBitmap::createPromise(WebCore::ScriptExecutionContext&, std::variant<WTF::RefPtr<WebCore::HTMLImageElement, WTF::RawPtrTraits<WebCore::HTMLImageElement>, WTF::DefaultRefDerefTraits<WebCore::HTMLImageElement> >, WTF::RefPtr<WebCore::HTMLVideoElement, WTF::RawPtrTraits<WebCore::HTMLVideoEleme
#5  0x00007f2c2ee97c7f in WebCore::DOMWindow::createImageBitmap(std::variant<WTF::RefPtr<WebCore::HTMLImageElement, WTF::RawPtrTraits<WebCore::HTMLImageElement>, WTF::DefaultRefDerefTraits<WebCore::HTMLImageElement> >, WTF::RefPtr<WebCore::HTMLVideoElement, WTF::RawPtrTraits<WebCore::HTMLVideoElement>, WTF::DefaultRefDerefTraits<
#6  0x00007f2c2d736b18 in WebCore::jsDOMWindowInstanceFunction_createImageBitmap2Body(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSDOMWindow*, WTF::Ref<WebCore::DeferredPromise, WTF::RawPtrTraits<WebCore::DeferredPromise> >&&) [clone .isra.0] () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#7  0x00007f2c2d736eb8 in WebCore::jsDOMWindowInstanceFunction_createImageBitmap(JSC::JSGlobalObject*, JSC::CallFrame*) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#8  0x00007f2bd847c038 in  ()
#9  0x00007ffc1cae5220 in  ()
#10 0x00007f2c2f9bbc14 in op_call_slow_return_location () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#11 0x0000000000000000 in  ()
```

layout-test-results/imported/w3c/web-platform-tests/html/canvas/element/manual/wide-gamut-canvas/canvas-display-p3-drawImage-video-crash-log.txt:

```
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/app/webkit/WebKitBuild/Release/bin/WPEWebProcess 12 16 --configure-jsc-for-tes'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007fb3c3514ef2 in webKitSrcIsCrossOrigin () from /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
[Current thread is 1 (Thread 0x7fb3b8dbe9c0 (LWP 3620))]

Thread 1 (Thread 0x7fb3b8dbe9c0 (LWP 3620)):
#0  0x00007fb3c3514ef2 in webKitSrcIsCrossOrigin () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#1  0x00007fb3c34dc54b in WebCore::MediaPlayerPrivateGStreamer::isCrossOrigin(WebCore::SecurityOrigin const&) const () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#2  0x00007fb3c529da17 in WebCore::MediaPlayer::isCrossOrigin(WebCore::SecurityOrigin const&) const () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#3  0x00007fb3c4c85ba3 in WebCore::CanvasRenderingContext2DBase::drawImage(WebCore::HTMLVideoElement&, WebCore::FloatRect const&, WebCore::FloatRect const&) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#4  0x00007fb3c4c863eb in WebCore::CanvasRenderingContext2DBase::drawImage(std::variant<WTF::RefPtr<WebCore::HTMLImageElement, WTF::RawPtrTraits<WebCore::HTMLImageElement>, WTF::DefaultRefDerefTraits<WebCore::HTMLImageElement> >, WTF::RefPtr<WebCore::HTMLCanvasElement, WTF::RawPtrTraits<WebCore::HTMLCanvasElement>, WTF::DefaultRe
#5  0x00007fb3c374f5bf in WebCore::jsCanvasRenderingContext2DPrototypeFunction_drawImage2Body(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSCanvasRenderingContext2D*) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#6  0x00007fb3c3750e30 in WebCore::jsCanvasRenderingContext2DPrototypeFunction_drawImage(JSC::JSGlobalObject*, JSC::CallFrame*) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#7  0x00007fb36e5c4038 in  ()
#8  0x00007ffe56023750 in  ()
#9  0x00007fb3c5b02c14 in op_call_slow_return_location () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
```

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230201/9792bb11/attachment.htm>