217140 2020-09-30 12:22:59 -0700 [GPU Process] Canvas layout tests occasionally crash the web process under PutImageData::apply 2020-09-30 13:55:18 -0700 1 1 1 Unclassified WebKit Canvas WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 wenson_hsieh wenson_hsieh dino thorton webkit-bug-importer oldest_to_newest 1693482 0 wenson_hsieh 2020-09-30 12:22:59 -0700 Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.JavaScriptCore 0x000000039c08576e WTFCrash + 14 (Assertions.cpp:295) 1 com.apple.WebCore 0x000000037deeb05b WTFCrashWithInfo(int, char const*, char const*, int) + 27 (Assertions.h:671) 2 com.apple.WebCore 0x0000000381e13be5 WebCore::DisplayList::PutImageData::apply(WebCore::GraphicsContext&) const + 101 (DisplayListItems.cpp:1209) 3 com.apple.WebCore 0x0000000381e374b7 WebCore::DisplayList::Replayer::replay(WebCore::FloatRect const&, bool) + 1207 (DisplayListReplayer.cpp:69) 4 com.apple.WebCore 0x0000000381e0ea34 WebCore::DisplayList::DrawingContext::replayDisplayList(WebCore::GraphicsContext&) + 212 (DisplayListDrawingContext.cpp:65) 5 com.apple.WebKit 0x000000037154f3f2 WebCore::DisplayList::ImageBuffer<WebKit::ImageBufferShareableIOSurfaceBackend>::flushDrawingContext() + 114 (DisplayListImageBuffer.h:79) 6 com.apple.WebKit 0x000000037154f609 WebCore::DisplayList::ImageBuffer<WebKit::ImageBufferShareableIOSurfaceBackend>::~ImageBuffer() + 105 (DisplayListImageBuffer.h:66) 7 com.apple.WebKit 0x000000037154f972 WebKit::RemoteImageBuffer<WebKit::ImageBufferShareableIOSurfaceBackend>::~RemoteImageBuffer() + 50 (RemoteImageBuffer.h:40) 8 com.apple.WebKit 0x000000037154ebf5 WebKit::RemoteImageBuffer<WebKit::ImageBufferShareableIOSurfaceBackend>::~RemoteImageBuffer() + 21 (RemoteImageBuffer.h:40) 9 com.apple.WebKit 0x000000037154ec1c WebKit::RemoteImageBuffer<WebKit::ImageBufferShareableIOSurfaceBackend>::~RemoteImageBuffer() + 28 (RemoteImageBuffer.h:40) 10 com.apple.WebCore 0x000000037ede644f std::__1::default_delete<WebCore::ImageBuffer>::operator()(WebCore::ImageBuffer*) const + 47 (memory:2368) 11 com.apple.WebCore 0x000000037ede63cf std::__1::unique_ptr<WebCore::ImageBuffer, std::__1::default_delete<WebCore::ImageBuffer> >::reset(WebCore::ImageBuffer*) + 95 (memory:2623) 12 com.apple.WebCore 0x000000037ede6369 std::__1::unique_ptr<WebCore::ImageBuffer, std::__1::default_delete<WebCore::ImageBuffer> >::~unique_ptr() + 25 (memory:2577) 13 com.apple.WebCore 0x000000037ede6345 std::__1::unique_ptr<WebCore::ImageBuffer, std::__1::default_delete<WebCore::ImageBuffer> >::~unique_ptr() + 21 (memory:2577) 14 com.apple.WebCore 0x0000000380ffe553 WebCore::HTMLCanvasElement::~HTMLCanvasElement() + 195 (HTMLCanvasElement.cpp:157) 15 com.apple.WebCore 0x0000000380ffe5e5 WebCore::HTMLCanvasElement::~HTMLCanvasElement() + 21 (HTMLCanvasElement.cpp:149) 16 com.apple.WebCore 0x0000000380ffe64c WebCore::HTMLCanvasElement::~HTMLCanvasElement() + 28 (HTMLCanvasElement.cpp:149) 1693495 1 410148 wenson_hsieh 2020-09-30 12:55:29 -0700 Created attachment 410148 Patch 1693520 2 ews-feeder 2020-09-30 13:54:50 -0700 Committed r267806: <https://trac.webkit.org/changeset/267806> All reviewed patches have been landed. Closing bug and clearing flags on attachment 410148. 1693521 3 webkit-bug-importer 2020-09-30 13:55:18 -0700 <rdar://problem/69807031> 410148 2020-09-30 12:55:29 -0700 2020-09-30 13:54:50 -0700 Patch bug-217140-20200930125528.patch text/plain 2717 wenson_hsieh U3VidmVyc2lvbiBSZXZpc2lvbjogMjY3NzcyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IGU3ZjJjZDc1MGYxMmFlNzEx ODdiYmEyYjZiNWIzMTE3NTkwOGRkODUuLmVlNThmMDRiODJiOTMyZTI5ZmY5NWI4OTUzYmFjODUz ZmE0YzhmMjUgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMjQgQEAKKzIwMjAtMDktMzAgIFdlbnNvbiBI c2llaCAgPHdlbnNvbl9oc2llaEBhcHBsZS5jb20+CisKKyAgICAgICAgW0dQVSBQcm9jZXNzXSBD YW52YXMgbGF5b3V0IHRlc3RzIG9jY2FzaW9uYWxseSBjcmFzaCB0aGUgd2ViIHByb2Nlc3MgdW5k ZXIgUHV0SW1hZ2VEYXRhOjphcHBseQorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9z aG93X2J1Zy5jZ2k/aWQ9MjE3MTQwCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BT ISkuCisKKyAgICAgICAgV2hlbiBkZXN0cm95aW5nIGEgYFJlbW90ZUltYWdlQnVmZmVyYCwgbG9n aWMgZXhpc3RzIGluIHRoZSBzdXBlcmNsYXNzIChgRGlzcGxheUxpc3Q6OkltYWdlQnVmZmVyYCkg dGhhdCBhdHRlbXB0cworICAgICAgICB0byBmbHVzaCBhbnkgcmVtYWluaW5nIGRpc3BsYXkgbGlz dCBpdGVtcy4gSG93ZXZlciwgdGhpcyBjdXJyZW50bHkgZG9lc24ndCB3b3JrIGFzIGludGVuZGVk LCBzaW5jZSB3ZSd2ZSBhbHJlYWR5CisgICAgICAgIGZpbmlzaGVkIGRlc3Ryb3lpbmcgdGhlIHN1 YmNsYXNzLCBzbyB0aGUgc3VwZXJjbGFzcycgY2FsbCB0byBgZmx1c2hEcmF3aW5nQ29udGV4dCgp YCBjYWxscyBgRGlzcGxheUxpc3Q6OgorICAgICAgICBJbWFnZUJ1ZmZlcjo6Zmx1c2hEcmF3aW5n Q29udGV4dCgpYCByYXRoZXIgdGhhbiBgUmVtb3RlSW1hZ2VCdWZmZXI6OmZsdXNoRHJhd2luZ0Nv bnRleHQoKWAuIFJhdGhlciB0aGFuIGZsdXNoaW5nCisgICAgICAgIGRpc3BsYXkgbGlzdCBpdGVt cyB0byB0aGUgR1BVIHByb2Nlc3MsIHRoaXMgaGFzIHRoZSBlZmZlY3Qgb2YgYXR0ZW1wdGluZyB0 byByZXBsYXkgdGhlc2UgZGlzcGxheSBsaXN0IGl0ZW1zIHRvCisgICAgICAgIHRoZSBkcmF3aW5n IGNvbnRleHQgKHdoaWNoIGlzIGJhY2tlZCBieSBhIGBEaXNwbGF5TGlzdGAgYW55d2F5cyksIHNv IHRoaXMgZW5kcyB1cCBoYXZpbmcgbm8gdGFuZ2libGUgZWZmZWN0LgorCisgICAgICAgIEhvd2V2 ZXIsIGlmIG9uZSBvZiB0aGVzZSBkaXNwbGF5IGxpc3QgaXRlbXMgaGFwcGVucyB0byBiZSBgUHV0 SW1hZ2VEYXRhYCwgd2UnbGwgZW5kIHVwIGhpdHRpbmcgYW4gYXNzZXJ0aW9uIGR1ZQorICAgICAg ICB0byBiZWluZyB1bmFibGUgdG8gYXBwbHkgaXQgd2l0aG91dCBhIGBEZWxlZ2F0ZWAuIFRvIGZp eCB0aGlzLCBob2lzdCB0aGUgY2FsbCB0byBgZmx1c2hEcmF3aW5nQ29udGV4dCgpYCBvdXQgdG8K KyAgICAgICAgYH5SZW1vdGVJbWFnZUJ1ZmZlcigpYCwgcmF0aGVyIHRoYW4gYH5EaXNwbGF5TGlz dDo6SW1hZ2VCdWZmZXIoKWAuCisKKyAgICAgICAgKiBXZWJQcm9jZXNzL0dQVS9ncmFwaGljcy9S ZW1vdGVJbWFnZUJ1ZmZlci5oOgorICAgICAgICAoV2ViS2l0OjpSZW1vdGVJbWFnZUJ1ZmZlcjo6 flJlbW90ZUltYWdlQnVmZmVyKToKKwogMjAyMC0wOS0yOSAgV2Vuc29uIEhzaWVoICA8d2Vuc29u X2hzaWVoQGFwcGxlLmNvbT4KIAogICAgICAgICBbR1BVIFByb2Nlc3NdIFJlbW90ZUltYWdlQnVm ZmVyUHJveHkgc2hvdWxkIGVuc3VyZSB0aGUgc3RhdGUgc3RhY2sgb2YgdGhlIGNvbnRleHQgaXMg Y2xlYXJlZCBiZWZvcmUgZGVzdHJ1Y3Rpb24KZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJLaXQvV2Vi UHJvY2Vzcy9HUFUvZ3JhcGhpY3MvUmVtb3RlSW1hZ2VCdWZmZXIuaCBiL1NvdXJjZS9XZWJLaXQv V2ViUHJvY2Vzcy9HUFUvZ3JhcGhpY3MvUmVtb3RlSW1hZ2VCdWZmZXIuaAppbmRleCBjMzBhMTcw N2Y3Y2I2MWJmZTQxZGViYWFjNDM5MjIyYmJjNDJjODhkLi5lODQ5MTY2NDUxNDU5NjI4N2VmMmM3 OGY5MDc2ZTFkNDM4MjE5MWYyIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViS2l0L1dlYlByb2Nlc3Mv R1BVL2dyYXBoaWNzL1JlbW90ZUltYWdlQnVmZmVyLmgKKysrIGIvU291cmNlL1dlYktpdC9XZWJQ cm9jZXNzL0dQVS9ncmFwaGljcy9SZW1vdGVJbWFnZUJ1ZmZlci5oCkBAIC01MSw2ICs1MSwxMSBA QCBwdWJsaWM6CiAgICAgICAgIHJldHVybiBzdGQ6OnVuaXF1ZV9wdHI8UmVtb3RlSW1hZ2VCdWZm ZXI+KG5ldyBSZW1vdGVJbWFnZUJ1ZmZlcihzaXplLCByZW5kZXJpbmdNb2RlLCByZXNvbHV0aW9u U2NhbGUsIGNvbG9yU3BhY2UsIHJlbW90ZVJlbmRlcmluZ0JhY2tlbmQpKTsKICAgICB9CiAKKyAg ICB+UmVtb3RlSW1hZ2VCdWZmZXIoKQorICAgIHsKKyAgICAgICAgZmx1c2hEcmF3aW5nQ29udGV4 dCgpOworICAgIH0KKwogcHJvdGVjdGVkOgogICAgIFJlbW90ZUltYWdlQnVmZmVyKGNvbnN0IFdl YkNvcmU6OkZsb2F0U2l6ZSYgc2l6ZSwgV2ViQ29yZTo6UmVuZGVyaW5nTW9kZSByZW5kZXJpbmdN b2RlLCBmbG9hdCByZXNvbHV0aW9uU2NhbGUsIFdlYkNvcmU6OkNvbG9yU3BhY2UgY29sb3JTcGFj ZSwgUmVtb3RlUmVuZGVyaW5nQmFja2VuZCYgcmVtb3RlUmVuZGVyaW5nQmFja2VuZCkKICAgICAg ICAgOiBCYXNlRGlzcGxheUxpc3RJbWFnZUJ1ZmZlcihzaXplKQo=