<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>139545</bug_id>
          
          <creation_ts>2014-12-11 10:27:06 -0800</creation_ts>
          <short_desc>[Web Audio] Decoding specific .m4a file crashes tab</short_desc>
          <delta_ts>2016-07-24 11:31:32 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Web Audio</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>iPhone / iPad</rep_platform>
          <op_sys>iOS 8.1</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>160146</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Ashley Gullen">ashley</reporter>
          <assigned_to name="Jer Noble">jer.noble</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>crogers</cc>
    
    <cc>jer.noble</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1054542</commentid>
    <comment_count>0</comment_count>
    <who name="Ashley Gullen">ashley</who>
    <bug_when>2014-12-11 10:27:06 -0800</bug_when>
    <thetext>Visit this URL in Safari on iOS 8.1.2: http://www.scirra.com/labs/bugs/audiodecodecrash/

It attempts to download a file called step1.m4a and decode it with a Web Audio context.

It immediately crashes the tab. It should call either the decode success or failure callbacks, alerting either &quot;Audio decode OK&quot; or &quot;Audio decode error&quot;.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1055535</commentid>
    <comment_count>1</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2014-12-14 18:48:41 -0800</bug_when>
    <thetext>I can reproduce on OS X, too.

Thread 13 Crashed:: Audio Decoder
0   com.apple.JavaScriptCore      	0x000000011095bf6e WTFCrash + 62
1   com.apple.WebCore             	0x0000000111165799 WTF::CrashOnOverflow::overflowed() + 9
2   com.apple.WebCore             	0x00000001111a0320 WTF::Checked&lt;unsigned long, WTF::CrashOnOverflow&gt;::Checked(WTF::ResultOverflowedTag) + 16
3   com.apple.WebCore             	0x00000001111a0309 WTF::Checked&lt;unsigned long, WTF::CrashOnOverflow&gt;::Checked(WTF::ResultOverflowedTag) + 9
4   com.apple.WebCore             	0x00000001111a02f9 WebCore::AudioArray&lt;float&gt;::allocate(WTF::Checked&lt;unsigned long, WTF::CrashOnOverflow&gt;) + 217
5   com.apple.WebCore             	0x000000011119e104 WebCore::AudioBus::AudioBus(unsigned int, unsigned long, bool) + 260
6   com.apple.WebCore             	0x000000011119dfe5 WebCore::AudioBus::create(unsigned int, unsigned long, bool) + 69

rdar://problem/18921312</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1074587</commentid>
    <comment_count>2</comment_count>
      <attachid>247970</attachid>
    <who name="Jer Noble">jer.noble</who>
    <bug_when>2015-03-05 11:05:45 -0800</bug_when>
    <thetext>Created attachment 247970
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1075031</commentid>
    <comment_count>3</comment_count>
      <attachid>247970</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2015-03-06 11:31:42 -0800</bug_when>
    <thetext>Comment on attachment 247970
Patch

Clearing flags on attachment: 247970

Committed r181174: &lt;http://trac.webkit.org/changeset/181174&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1075032</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2015-03-06 11:31:46 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1214071</commentid>
    <comment_count>5</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2016-07-24 11:31:32 -0700</bug_when>
    <thetext>This still reproduces on iOS, filed bug 160146.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>247970</attachid>
            <date>2015-03-05 11:05:45 -0800</date>
            <delta_ts>2015-03-06 11:31:42 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-139545-20150305110525.patch</filename>
            <type>text/plain</type>
            <size>5150</size>
            <attacher name="Jer Noble">jer.noble</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTgwODM3CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>