210528 2020-04-14 19:48:30 -0700 [GStreamer] media/media-source/media-source-seek-back.html is flaky crashing with 3 kinds of traces 2021-06-17 06:06:00 -0700 1 1 1 Unclassified WebKit Media WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=210498 InRadar P2 Normal --- 1 lmoura calvaris bugs-noreply calvaris dpino pnormand webkit-bug-importer oldest_to_newest 1641653 0 lmoura 2020-04-14 19:48:30 -0700 List of crashes since r259713 (outside this, only 4 times before r253000) * r259713 - GTK Release X11 build 13249 * #0 0x00007f5da1d6d243 in gst_gl_upload_transform_caps () at ../../Source/gst-plugins-base-1.16.1/gst-libs/gst/gl/gstglupload.c:1810 1810 upload_methods[i]->transform_caps (upload->priv->upload_impl[i], * r259775 - GTK Release X11 build 13257 * #0 gst_gl_insert_debug_marker () at ../../Source/gst-plugins-base-1.16.1/gst-libs/gst/gl/gstgldebug.c:387 387 const GstGLFuncs *gl = context->gl_vtable; * r259819 - GTK Wayland build 11876 * #0 0x00007f68565ff253 in gst_gl_upload_transform_caps () at ../../Source/gst-plugins-base-1.16.1/gst-libs/gst/gl/gstglupload.c:1810 1810 upload_methods[i]->transform_caps (upload->priv->upload_impl[i], * r259928 - GTK Release X11 build 13294 * #0 gst_gl_insert_debug_marker () at ../../Source/gst-plugins-base-1.16.1/gst-libs/gst/gl/gstgldebug.c:387 387 const GstGLFuncs *gl = context->gl_vtable; * r259930 - GTK Release X11 build 13295 * #0 gst_gl_insert_debug_marker () at ../../Source/gst-plugins-base-1.16.1/gst-libs/gst/gl/gstgldebug.c:387 387 const GstGLFuncs *gl = context->gl_vtable; * r259933 - GTK Release X11 build 13297 * g_object_ref() assertion ref_count < 0 in gst_gl_upload_new() * r259990 - GTK Wayland build 11914 * g_object_ref() assertion ref_count < 0 in gst_gl_upload_new() * r260035 - GTK Wayland build 11925 * #0 0x00007f78389fa253 in gst_gl_upload_transform_caps () at ../../Source/gst-plugins-base-1.16.1/gst-libs/gst/gl/gstglupload.c:1810 1810 upload_methods[i]->transform_caps (upload->priv->upload_impl[i], * r260099 - GTK Release X11 build 13335 * g_object_ref() assertion ref_count < 0 in gst_gl_upload_new() This seems similar to other GST-related flaky crashes. 1662955 1 dpino 2020-06-15 20:32:30 -0700 This bug is also happening in WPE (random crashes). For instance: Crash-log: https://build.webkit.org/results/WPE%20Linux%2064-bit%20Release%20(Tests)/r262962%20(18567)/media/media-source/media-source-seek-back-crash-log.txt Crash-log: https://build.webkit.org/results/WPE%20Linux%2064-bit%20Release%20(Tests)/r263055%20(18616)/media/media-source/media-source-seek-back-crash-log.txt In both cases the type of crash was: STDERR: STDERR: (WPEWebProcess:15969): GLib-GObject-CRITICAL **: 14:25:45.861: g_object_ref: assertion 'old_val > 0' failed Thread 1 (Thread 0x7fa24b553700 (LWP 16302)): #0 0x00007fa30532cee5 in _g_log_abort (breakpoint=1) at ../glib/gmessages.c:554 #1 0x00007fa30532e1c9 in g_logv (log_domain=0x7fa305b192f7 "GLib-GObject", log_level=G_LOG_LEVEL_CRITICAL, format=<optimized out>, args=args@entry=0x7fa24b54e140) at ../glib/gmessages.c:1373 #2 0x00007fa30532e393 in g_log (log_domain=log_domain@entry=0x7fa305b192f7 "GLib-GObject", log_level=log_level@entry=G_LOG_LEVEL_CRITICAL, format=format@entry=0x7fa30537f77f "%s: assertion '%s' failed") at ../glib/gmessages.c:1415 #3 0x00007fa30532eb8d in g_return_if_fail_warning (log_domain=log_domain@entry=0x7fa305b192f7 "GLib-GObject", pretty_function=pretty_function@entry=0x7fa305b1c978 <__func__.15604> "g_object_ref", expression=expression@entry=0x7fa305b1b715 "old_val > 0") at ../glib/gmessages.c:2771 #4 0x00007fa305aec9fa in g_object_ref (_object=0x7fa23c00f460) at ../gobject/gobject.c:3368 #5 0x00007fa305aec9fa in g_object_ref (_object=0x7fa23c00f460) at ../gobject/gobject.c:3360 #6 0x00007fa305aecb08 in g_value_object_collect_value (value=0x7fa24b54e258, n_collect_values=<optimized out>, collect_values=<optimized out>, collect_flags=<optimized out>) at ../gobject/gobject.c:4007 #7 0x00007fa305233a46 in gst_structure_set_valist_internal (structure=0x7fa23c017160, fieldname=<optimized out>, varargs=varargs@entry=0x7fa24b54e300) at ../gst/gststructure.c:631 #8 0x00007fa305234dc6 in gst_structure_set (structure=structure@entry=0x7fa23c017160, field=field@entry=0x7fa305f9fa19 "context") at ../gst/gststructure.c:663 #9 0x00007fa305f8a8e5 in gst_gl_handle_context_query (element=element@entry=0x55d4d8e60130 [GstGLUploadElement], query=query@entry=0x7fa2402412d0 [GstQuery], display=<optimized out>, gl_context=0x7fa23c00f460 [GstGLContextEGL], other_context=<optimized out>) at ../gst-libs/gst/gl/gstglutils.c:550 #10 0x00007fa305f67b1b in gst_gl_base_filter_query (trans=0x55d4d8e60130 [GstGLUploadElement], direction=GST_PAD_SRC, query=0x7fa2402412d0 [GstQuery]) at ../gst-libs/gst/gl/gstglbasefilter.c:224 #11 0x00007fa305211238 in gst_pad_query (pad=pad@entry=0x7fa23c139630 [GstPad], query=query@entry=0x7fa2402412d0 [GstQuery]) at ../gst/gstpad.c:4072 #12 0x00007fa30521199b in gst_pad_peer_query (pad=pad@entry=0x7fa23c138f40 [GstPad], query=query@entry=0x7fa2402412d0 [GstQuery]) at ../gst/gstpad.c:4204 #13 0x00007fa305f899b6 in pad_query (item=<optimized out>, value=0x7fa24b54e640, user_data=0x7fa2402412d0) at ../gst-libs/gst/gl/gstglutils.c:108 #14 0x00007fa3051ff13c in gst_iterator_fold (it=it@entry=0x7fa258007b20, func=func@entry=0x7fa305f89990 <pad_query>, ret=ret@entry=0x7fa24b54e640, user_data=user_data@entry=0x7fa2402412d0) at ../gst/gstiterator.c:617 #15 0x00007fa305f89b26 in gst_gl_run_query (element=<optimized out>, query=query@entry=0x7fa2402412d0 [GstQuery], direction=direction@entry=GST_PAD_SINK) at ../gst-libs/gst/gl/gstglutils.c:136 #16 0x00007fa305f8aabd in gst_gl_query_local_gl_context (element=0x55d4d8e604a0 [GstGLColorConvertElement], direction=direction@entry=GST_PAD_SINK, context_ptr=context_ptr@entry=0x55d4d8e606e8) at ../gst-libs/gst/gl/gstglutils.c:591 #17 0x00007fa305f6764e in _find_local_gl_context (filter=0x55d4d8e604a0 [GstGLColorConvertElement]) at ../gst-libs/gst/gl/gstglbasefilter.c:197 #18 0x00007fa305f67df5 in gst_gl_base_filter_find_gl_context (filter=0x55d4d8e604a0 [GstGLColorConvertElement]) at ../gst-libs/gst/gl/gstglbasefilter.c:432 #19 0x00007fa2887b24b1 in gst_gl_color_convert_element_transform_caps (bt=0x55d4d8e604a0 [GstGLColorConvertElement], direction=GST_PAD_SRC, caps=0x7fa258065cf0 [GstCaps], filter=0x0) at ../ext/gl/gstglcolorconvertelement.c:145 #20 0x00007fa3061bae71 in gst_base_transform_transform_caps (trans=trans@entry=0x55d4d8e604a0 [GstGLColorConvertElement], direction=GST_PAD_SRC, caps=caps@entry=0x7fa258065cf0 [GstCaps], filter=filter@entry=0x0) at ../libs/gst/base/gstbasetransform.c:474 ... 1663794 2 dpino 2020-06-17 22:14:17 -0700 `gst_gl_insert_debug_marker` happening on media/video-src-blob-replay.html. Crash-log: https://build.webkit.org/results/GTK%20Linux%2064-bit%20Release%20(Tests)/r263193%20(14128)/media/video-src-blob-replay-crash-log.txt Thread 1 (Thread 0x7fdf3edff700 (LWP 6706)): #0 0x00007fdfa3499652 in gst_gl_insert_debug_marker (context=0x0 [GstGLContext], format=format@entry=0x7fdfa34c0e82 "starting element %s") at ../gst-libs/gst/gl/gstgldebug.c:387 #1 0x00007fdfa348dcfa in gst_gl_base_filter_gl_start (context=<optimized out>, data=<optimized out>) at ../gst-libs/gst/gl/gstglbasefilter.c:283 #2 0x00007fdfa34b61a7 in _run_message_sync (message=0x7fde767f8f70) at ../gst-libs/gst/gl/gstglwindow.c:573 #3 0x00007fdfa34b6146 in _run_message_async (message=0x55f5324ed720) at ../gst-libs/gst/gl/gstglwindow.c:640 #4 0x00007fdfa2e01c3e in g_main_dispatch (context=0x7fde70093cd0) at ../glib/gmain.c:3309 #5 0x00007fdfa2e01c3e in g_main_context_dispatch (context=context@entry=0x7fde70093cd0) at ../glib/gmain.c:3974 #6 0x00007fdfa2e01ff0 in g_main_context_iterate (context=0x7fde70093cd0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4047 #7 0x00007fdfa2e022e3 in g_main_loop_run (loop=0x7fde70085770) at ../glib/gmain.c:4241 #8 0x00007fdfa34b6239 in gst_gl_window_default_run (window=0x55f53299c100 [GstGLWindowX11|glwindowx11-7]) at ../gst-libs/gst/gl/gstglwindow.c:499 #9 0x00007fdfa34989ef in gst_gl_context_create_thread (context=0x7fde8c02d930 [GstGLContextGLX|glcontextglx7]) at ../gst-libs/gst/gl/gstglcontext.c:1305 #10 0x00007fdfa2e2b761 in g_thread_proxy (data=0x7fde28016b60) at ../glib/gthread.c:807 #11 0x00007fdfa3e7e5e2 in start_thread (arg=<optimized out>) at pthread_create.c:479 #12 0x00007fdfa1b0f473 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95 STDERR: Traceback (most recent call last): STDERR: File "<string>", line 3, in <module> STDERR: ModuleNotFoundError: No module named 'webkit' STDERR: /home/slave/.gdbinit:7: Error in sourced command file: STDERR: Error while executing Python code. STDERR: STDERR: warning: core file may not match specified executable file. STDERR: <empty> 1664169 3 dpino 2020-06-18 23:28:26 -0700 `gst_gl_insert_debug_marker` happening on fast/mediastream/mediastreamtrack-video-frameRate-clone-decreasing.html. Crash-log: https://build.webkit.org/results/GTK%20Linux%2064-bit%20Release%20(Tests)/r263254%20(14151)/fast/mediastream/mediastreamtrack-video-frameRate-clone-decreasing-crash-log.txt 1747877 4 calvaris 2021-04-07 07:43:12 -0700 This seems to work now and bots seem happy. 1749216 5 425747 calvaris 2021-04-12 07:53:08 -0700 Created attachment 425747 [fast-cq] Patch 1749542 6 ews-feeder 2021-04-12 22:58:41 -0700 Committed r275863 (236428@main): <https://commits.webkit.org/236428@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 425747. 1749543 7 webkit-bug-importer 2021-04-12 22:59:13 -0700 <rdar://problem/76576033> 1770600 8 pnormand 2021-06-17 06:04:03 -0700 There is this in TestExpectations: webkit.org/b/210528 fast/mediastream/MediaStream-MediaElement-setObject-null.html [ Crash Pass ] But that test is 1) consistently passing 2) not linked with this bug. I will unflag it. 1770601 9 pnormand 2021-06-17 06:06:00 -0700 r278984 425747 2021-04-12 07:53:08 -0700 2021-04-12 22:58:42 -0700 [fast-cq] Patch bug-210528-20210412165306.patch text/plain 1557 calvaris U3VidmVyc2lvbiBSZXZpc2lvbjogMjc1ODA2CmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9DaGFu Z2VMb2cgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKaW5kZXggNzlmOGQ3ZjVkN2M3OTFhMTllNDI5 YWEyOTljMmFkYmQyY2M4MmZiZi4uZWYwODU5ZWRjOTBlMDA4M2NlNjQ5ZjhhYjIyYzlkZmY4MWY3 NWU0MSAxMDA2NDQKLS0tIGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCisrKyBiL0xheW91dFRlc3Rz L0NoYW5nZUxvZwpAQCAtMSwzICsxLDEyIEBACisyMDIxLTA0LTEyICBYYWJpZXIgUm9kcmlndWV6 IENhbHZhciAgPGNhbHZhcmlzQGlnYWxpYS5jb20+CisKKyAgICAgICAgW0dTdHJlYW1lcl0gbWVk aWEvbWVkaWEtc291cmNlL21lZGlhLXNvdXJjZS1zZWVrLWJhY2suaHRtbCBpcyBmbGFreSBjcmFz aGluZyB3aXRoIDMga2luZHMgb2YgdHJhY2VzCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQu b3JnL3Nob3dfYnVnLmNnaT9pZD0yMTA1MjgKKworICAgICAgICBVbnJldmlld2VkLgorCisgICAg ICAgICogcGxhdGZvcm0vZ2xpYi9UZXN0RXhwZWN0YXRpb25zOiBVbmZsYWdnZWQgdGVzdC4KKwog MjAyMS0wNC0xMCAgQ2hyaXMgRHVtZXogIDxjZHVtZXpAYXBwbGUuY29tPgogCiAgICAgICAgIFJl Z3Jlc3Npb24ocjI3NTY2OCkgUG90ZW50aWFsIG51bGwgcG9pbnRlciBkZXJlZiBpbiBBdWRpb1Bh cmFtOjpleHBvbmVudGlhbFJhbXBUb1ZhbHVlQXRUaW1lKGZsb2F0LCBkb3VibGUpCmRpZmYgLS1n aXQgYS9MYXlvdXRUZXN0cy9wbGF0Zm9ybS9nbGliL1Rlc3RFeHBlY3RhdGlvbnMgYi9MYXlvdXRU ZXN0cy9wbGF0Zm9ybS9nbGliL1Rlc3RFeHBlY3RhdGlvbnMKaW5kZXggNjViYzFkNjljODcxYmFl NmNiYmEyZTRhZGFiNmY3ZDM2ZDIxYmI0ZC4uYzc2MGZlZGEyYjVhNjJkMjk3Nzg3ZGMzODBiNzVh ZDVmODI5MjhkZSAxMDA2NDQKLS0tIGEvTGF5b3V0VGVzdHMvcGxhdGZvcm0vZ2xpYi9UZXN0RXhw ZWN0YXRpb25zCisrKyBiL0xheW91dFRlc3RzL3BsYXRmb3JtL2dsaWIvVGVzdEV4cGVjdGF0aW9u cwpAQCAtNTM1LDcgKzUzNSw2IEBAIHdlYmtpdC5vcmcvYi8yMTA1MjggZmFzdC9tZWRpYXN0cmVh bS9tZWRpYXN0cmVhbXRyYWNrLXZpZGVvLWZyYW1lUmF0ZS1jbG9uZS1kZWNyCiB3ZWJraXQub3Jn L2IvMjEzMDExIGZhc3QvbWVkaWFzdHJlYW0vbWVkaWEtc3RyZWFtLXRyYWNrLWludGVycnVwdGVk Lmh0bWwgWyBGYWlsdXJlIF0KIAogd2Via2l0Lm9yZy9iLzIwMzA3OCBtZWRpYS9tZWRpYS1zb3Vy Y2UvbWVkaWEtc291cmNlLXJlbW92ZS11bmxvYWQtY3Jhc2guaHRtbCBbIENyYXNoIFRpbWVvdXQg UGFzcyBdCi13ZWJraXQub3JnL2IvMjEwNTI4IG1lZGlhL21lZGlhLXNvdXJjZS9tZWRpYS1zb3Vy Y2Utc2Vlay1iYWNrLmh0bWwgWyBDcmFzaCBQYXNzIF0KIHdlYmtpdC5vcmcvYi8yMTgzMTcgbWVk aWEvbWVkaWEtc291cmNlL21lZGlhLXNvdXJjZS10cmFja2lkLWNoYW5nZS5odG1sIFsgRmFpbHVy ZSBdCiAKIHdlYmtpdC5vcmcvYi8yMTA1MjggbWVkaWEvdmlkZW8tc3JjLWJsb2ItcmVwbGF5Lmh0 bWwgWyBDcmFzaCBQYXNzIF0K