158164 2016-05-27 14:04:04 -0700 REGRESSION(r201385) ASSERT in WebCore::HTMLMediaElement::updateActiveTextTrackCues + 5688 2016-06-01 15:47:53 -0700 1 1 1 Unclassified WebKit Media WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 ryanhaddad eric.carlson commit-queue eric.carlson jer.noble ryanhaddad webkit-bug-importer oldest_to_newest 1197207 0 ryanhaddad 2016-05-27 14:04:04 -0700 LayoutTest media/track/track-remove-track.html is a flaky crash <https://build.webkit.org/results/Apple%20Yosemite%20Debug%20WK2%20(Tests)/r201458%20(12432)/results.html> <http://webkit-test-results.webkit.org/dashboards/flakiness_dashboard.html#showAllRuns=true&tests=media%2Ftrack%2Ftrack-remove-track.html> Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.JavaScriptCore 0x00000001124e0867 WTFCrash + 39 1 com.apple.WebCore 0x0000000115458dc8 WebCore::HTMLMediaElement::updateActiveTextTrackCues(WTF::MediaTime const&) + 5688 (HTMLMediaElement.cpp:1691) 2 com.apple.WebCore 0x000000011545cbc0 WebCore::HTMLMediaElement::endIgnoringTrackDisplayUpdateRequests() + 176 (HTMLMediaElement.cpp:1810) 3 com.apple.WebCore 0x000000011548fcfa WebCore::TrackDisplayUpdateScope::~TrackDisplayUpdateScope() + 90 (HTMLMediaElement.cpp:294) 4 com.apple.WebCore 0x00000001154728c5 WebCore::TrackDisplayUpdateScope::~TrackDisplayUpdateScope() + 21 (HTMLMediaElement.cpp:294) 5 com.apple.WebCore 0x000000011546547d WebCore::HTMLMediaElement::removeTextTrack(WebCore::TextTrack&, bool) + 205 (HTMLMediaElement.cpp:3653) 6 com.apple.WebCore 0x000000011568a2b2 WebCore::InbandTextTrack::willRemove(WebCore::TrackPrivateBase*) + 162 (InbandTextTrack.cpp:193) 7 com.apple.WebCore 0x000000011568a2ef non-virtual thunk to WebCore::InbandTextTrack::willRemove(WebCore::TrackPrivateBase*) + 47 (InbandTextTrack.cpp:193) 8 com.apple.WebCore 0x0000000115473cbd WebCore::TrackPrivateBase::willBeRemoved() + 61 (TrackPrivateBase.h:71) 9 com.apple.WebCore 0x000000011546509c WebCore::HTMLMediaElement::mediaPlayerDidRemoveTextTrack(WTF::PassRefPtr<WebCore::InbandTextTrackPrivate>) + 28 (HTMLMediaElement.cpp:3600) 10 com.apple.WebCore 0x00000001154650cc non-virtual thunk to WebCore::HTMLMediaElement::mediaPlayerDidRemoveTextTrack(WTF::PassRefPtr<WebCore::InbandTextTrackPrivate>) + 28 (HTMLMediaElement.cpp:3600) 11 com.apple.WebCore 0x0000000116044790 WebCore::MediaPlayer::removeTextTrack(WTF::PassRefPtr<WebCore::InbandTextTrackPrivate>) + 64 (MediaPlayer.cpp:1280) 12 com.apple.WebCore 0x000000011604ea3e WebCore::MediaPlayerPrivateAVFoundation::clearTextTracks() + 142 (MediaPlayerPrivateAVFoundation.cpp:973) 13 com.apple.WebCore 0x000000011605b5dc WebCore::MediaPlayerPrivateAVFoundationObjC::cancelLoad() + 348 (MediaPlayerPrivateAVFoundationObjC.mm:594) 14 com.apple.WebCore 0x000000011605a7f3 WebCore::MediaPlayerPrivateAVFoundationObjC::~MediaPlayerPrivateAVFoundationObjC() + 851 (MediaPlayerPrivateAVFoundationObjC.mm:573) 15 com.apple.WebCore 0x000000011605b3e5 WebCore::MediaPlayerPrivateAVFoundationObjC::~MediaPlayerPrivateAVFoundationObjC() + 21 (MediaPlayerPrivateAVFoundationObjC.mm:574) 16 com.apple.WebCore 0x000000011605b439 WebCore::MediaPlayerPrivateAVFoundationObjC::~MediaPlayerPrivateAVFoundationObjC() + 25 (MediaPlayerPrivateAVFoundationObjC.mm:555) 17 com.apple.WebCore 0x00000001160402e4 WebCore::MediaPlayer::~MediaPlayer() + 388 (MediaPlayer.cpp:332) 18 com.apple.WebCore 0x0000000116040325 WebCore::MediaPlayer::~MediaPlayer() + 21 (MediaPlayer.cpp:332) 19 com.apple.WebCore 0x0000000116040349 WebCore::MediaPlayer::~MediaPlayer() + 25 (MediaPlayer.cpp:330) 20 com.apple.WebCore 0x0000000115451cb3 WebCore::HTMLMediaElement::~HTMLMediaElement() + 1539 (HTMLMediaElement.cpp:567) 21 com.apple.WebCore 0x0000000115511636 WebCore::HTMLVideoElement::~HTMLVideoElement() + 438 (HTMLVideoElement.h:37) 22 com.apple.WebCore 0x0000000115510e65 WebCore::HTMLVideoElement::~HTMLVideoElement() + 21 (HTMLVideoElement.h:37) 23 com.apple.WebCore 0x0000000115510e89 WebCore::HTMLVideoElement::~HTMLVideoElement() + 25 (HTMLVideoElement.h:37) 24 com.apple.WebCore 0x00000001162142dd WebCore::Node::removedLastRef() + 93 (Node.cpp:2328) 25 com.apple.WebCore 0x000000011478417e WebCore::Node::deref() + 382 (Node.h:738) 26 com.apple.WebCore 0x000000011620cec5 WebCore::Node::derefEventTarget() + 21 (Node.cpp:725) 27 com.apple.WebCore 0x0000000114ea4c36 WebCore::EventTarget::deref() + 22 (EventTarget.h:115) 28 com.apple.WebCore 0x0000000114fc71bd WTF::Ref<WebCore::EventTarget>::~Ref() + 45 (Ref.h:60) 29 com.apple.WebCore 0x0000000114fc59f5 WTF::Ref<WebCore::EventTarget>::~Ref() + 21 (Ref.h:60) 30 com.apple.WebCore 0x0000000115a5886c WebCore::JSDOMWrapper<WebCore::EventTarget>::~JSDOMWrapper() + 28 (JSDOMWrapper.h:52) 31 com.apple.WebCore 0x0000000115a58845 WebCore::JSEventTarget::~JSEventTarget() + 21 (JSEventTarget.h:29) 32 com.apple.WebCore 0x0000000115a579a5 WebCore::JSEventTarget::~JSEventTarget() + 21 (JSEventTarget.h:29) 33 com.apple.WebCore 0x0000000115a5738d WebCore::JSEventTarget::destroy(JSC::JSCell*) + 29 (JSEventTarget.cpp:130) 34 com.apple.JavaScriptCore 0x0000000112117ed8 JSC::MarkedBlock::callDestructor(JSC::JSCell*) + 232 35 com.apple.JavaScriptCore 0x0000000112117d7b JSC::MarkedBlock::FreeList JSC::MarkedBlock::specializedSweep<(JSC::MarkedBlock::BlockState)3, (JSC::MarkedBlock::SweepMode)0, true>() + 267 36 com.apple.JavaScriptCore 0x0000000112116874 JSC::MarkedBlock::FreeList JSC::MarkedBlock::sweepHelper<true>(JSC::MarkedBlock::SweepMode) + 308 37 com.apple.JavaScriptCore 0x0000000112115ec1 JSC::MarkedBlock::sweep(JSC::MarkedBlock::SweepMode) + 113 38 com.apple.JavaScriptCore 0x0000000111dda95d JSC::IncrementalSweeper::sweepNextBlock() + 125 39 com.apple.JavaScriptCore 0x0000000111dda882 JSC::IncrementalSweeper::doSweep(double) + 34 40 com.apple.JavaScriptCore 0x0000000111dda852 JSC::IncrementalSweeper::doWork() + 34 41 com.apple.JavaScriptCore 0x0000000111dd6aae JSC::HeapTimer::timerDidFire(__CFRunLoopTimer*, void*) + 494 42 com.apple.CoreFoundation 0x00007fff8d6b12e4 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20 43 com.apple.CoreFoundation 0x00007fff8d6b0f73 __CFRunLoopDoTimer + 1059 44 com.apple.CoreFoundation 0x00007fff8d72453d __CFRunLoopDoTimers + 301 45 com.apple.CoreFoundation 0x00007fff8d66c608 __CFRunLoopRun + 2024 46 com.apple.CoreFoundation 0x00007fff8d66bbd8 CFRunLoopRunSpecific + 296 47 com.apple.HIToolbox 0x00007fff97f4756f RunCurrentEventLoopInMode + 235 48 com.apple.HIToolbox 0x00007fff97f472ea ReceiveNextEventCommon + 431 49 com.apple.HIToolbox 0x00007fff97f4712b _BlockUntilNextEventMatchingListInModeWithFilter + 71 50 com.apple.AppKit 0x00007fff986158ab _DPSNextEvent + 978 51 com.apple.AppKit 0x00007fff98614e58 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 346 52 com.apple.AppKit 0x00007fff9860aaf3 -[NSApplication run] + 594 53 com.apple.AppKit 0x00007fff98587244 NSApplicationMain + 1832 54 libxpc.dylib 0x00007fff96cd0928 _xpc_objc_main + 793 55 libxpc.dylib 0x00007fff96cd2030 xpc_main + 490 56 com.apple.WebKit.WebContent.Development 0x000000010dee7110 main + 800 57 libdyld.dylib 0x00007fff9825f5c9 start + 1 1198245 1 280259 eric.carlson 2016-06-01 13:09:10 -0700 Created attachment 280259 Proposed patch 1198315 2 280259 commit-queue 2016-06-01 15:47:48 -0700 Comment on attachment 280259 Proposed patch Clearing flags on attachment: 280259 Committed r201574: <http://trac.webkit.org/changeset/201574> 1198316 3 commit-queue 2016-06-01 15:47:53 -0700 All reviewed patches have been landed. Closing bug. 280259 2016-06-01 13:09:10 -0700 2016-06-01 15:47:48 -0700 Proposed patch patch_1.txt text/plain 1426 eric.carlson SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDIwMTU1OCkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3IEBACisyMDE2LTA2LTAxICBFcmljIENh cmxzb24gIDxlcmljLmNhcmxzb25AYXBwbGUuY29tPgorCisgICAgICAgIFJFR1JFU1NJT04ocjIw MTM4NSkgQVNTRVJUIGluIFdlYkNvcmU6OkhUTUxNZWRpYUVsZW1lbnQ6OnVwZGF0ZUFjdGl2ZVRl eHRUcmFja0N1ZXMgKyA1Njg4CisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3df YnVnLmNnaT9pZD0xNTgxNjQKKyAgICAgICAgPHJkYXI6Ly9wcm9ibGVtLzI2NDk4NjM0PgorCisg ICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIE5vIG5ldyB0ZXN0 cywgdGhpcyBwcmV2ZW50cyBhbiBhc3NlcnQgaW4gZXhpc3RpbmcgdGVzdHMuCisKKyAgICAgICAg KiBodG1sL0hUTUxNZWRpYUVsZW1lbnQuY3BwOgorICAgICAgICAoV2ViQ29yZTo6SFRNTE1lZGlh RWxlbWVudDo6fkhUTUxNZWRpYUVsZW1lbnQpOiBDYWxsIGJlZ2luSWdub3JpbmdUcmFja0Rpc3Bs YXlVcGRhdGVSZXF1ZXN0cworICAgICAgICAgIHNvIHdlIGF2b2lkIGRvaW5nIHVubmVjZXNzYXJ5 IHdvcmsgdHJpZ2dlcmVkIGJ5IGRlc3RydWN0aW9uLgorCiAyMDE2LTA2LTAxICBOYWVsIE91ZWRy YW9nbyAgPG5hZWwub3VlZHJhb2dvQGNyZi5jYW5vbi5mcj4KIAogICAgICAgICBQT1NUIHJlcXVl c3Qgb24gYSBibG9iIHJlc291cmNlIHNob3VsZCByZXR1cm4gYSAibmV0d29yayBlcnJvciIgaW5z dGVhZCBvZiBIVFRQIDUwMCByZXNwb25zZQpJbmRleDogU291cmNlL1dlYkNvcmUvaHRtbC9IVE1M TWVkaWFFbGVtZW50LmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViQ29yZS9odG1sL0hUTUxN ZWRpYUVsZW1lbnQuY3BwCShyZXZpc2lvbiAyMDE0MjIpCisrKyBTb3VyY2UvV2ViQ29yZS9odG1s L0hUTUxNZWRpYUVsZW1lbnQuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC00OTMsNiArNDkzLDcgQEAg SFRNTE1lZGlhRWxlbWVudDo6fkhUTUxNZWRpYUVsZW1lbnQoKQogewogICAgIExPRyhNZWRpYSwg IkhUTUxNZWRpYUVsZW1lbnQ6On5IVE1MTWVkaWFFbGVtZW50KCVwKSIsIHRoaXMpOwogCisgICAg YmVnaW5JZ25vcmluZ1RyYWNrRGlzcGxheVVwZGF0ZVJlcXVlc3RzKCk7CiAgICAgYWxsTWVkaWFF bGVtZW50cygpLnJlbW92ZSh0aGlzKTsKIAogICAgIG1fYXN5bmNFdmVudFF1ZXVlLmNsb3NlKCk7 Cg==