217746 2020-10-14 19:34:52 -0700 [WinCairo][GraphicsLayerTextureMapper] css3/filters/backdrop/backdrop-filter-with-border-radius-and-reflection-remove.html is crashing 2020-10-15 12:56:20 -0700 1 1 1 Unclassified WebKit Platform WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 fujii fujii cmarcelo don.olmstead ews-watchlist kondapallykalyan luiz noam ross.kirsling webkit-bug-importer oldest_to_newest 1698001 0 fujii 2020-10-14 19:34:52 -0700 [WinCairo][TextureMapper] css3/filters/backdrop/backdrop-filter-with-border-radius-and-reflection-remove.html is crashing Callstack > WebKit.dll!std::swap<WTF::WeakPtrImpl<WTF::EmptyCounter> *,0>(WTF::WeakPtrImpl<WTF::EmptyCounter> * & _Left, WTF::WeakPtrImpl<WTF::EmptyCounter> * & _Right) Line 106 C++ > WebKit.dll!WTF::DumbPtrTraits<WTF::WeakPtrImpl<WTF::EmptyCounter>>::swap(WTF::WeakPtrImpl<WTF::EmptyCounter> * & a, WTF::WeakPtrImpl<WTF::EmptyCounter> * & b) Line 42 C++ > WebKit.dll!WTF::RefPtr<WTF::WeakPtrImpl<WTF::EmptyCounter>,WTF::DumbPtrTraits<WTF::WeakPtrImpl<WTF::EmptyCounter>>,WTF::DefaultRefDerefTraits<WTF::WeakPtrImpl<WTF::EmptyCounter>>>::swap<WTF::WeakPtrImpl<WTF::EmptyCounter>,WTF::DumbPtrTraits<WTF::WeakPtrImpl<WTF::EmptyCounter>>,WTF::DefaultRefDerefTraits<WTF::WeakPtrImpl<WTF::EmptyCounter>>>(WTF::RefPtr<WTF::WeakPtrImpl<WTF::EmptyCounter>,WTF::DumbPtrTraits<WTF::WeakPtrImpl<WTF::EmptyCounter>>,WTF::DefaultRefDerefTraits<WTF::WeakPtrImpl<WTF::EmptyCounter>>> & o) Line 194 C++ > WebKit.dll!WTF::RefPtr<WTF::WeakPtrImpl<WTF::EmptyCounter>,WTF::DumbPtrTraits<WTF::WeakPtrImpl<WTF::EmptyCounter>>,WTF::DefaultRefDerefTraits<WTF::WeakPtrImpl<WTF::EmptyCounter>>>::operator=(WTF::RefPtr<WTF::WeakPtrImpl<WTF::EmptyCounter>,WTF::DumbPtrTraits<WTF::WeakPtrImpl<WTF::EmptyCounter>>,WTF::DefaultRefDerefTraits<WTF::WeakPtrImpl<WTF::EmptyCounter>>> && o) Line 168 C++ > WebKit.dll!WTF::WeakPtr<WebCore::TextureMapperLayer,WTF::EmptyCounter>::operator=(WTF::WeakPtr<WebCore::TextureMapperLayer,WTF::EmptyCounter> && __that) C++ > WebKit.dll!WebCore::TextureMapperLayer::setReplicaLayer(WebCore::TextureMapperLayer * replicaLayer) Line 581 C++ > WebKit.dll!WebCore::GraphicsLayerTextureMapper::commitLayerChanges() Line 419 C++ > WebKit.dll!WebCore::GraphicsLayerTextureMapper::flushCompositingStateForThisLayerOnly() Line 360 C++ > WebKit.dll!WebCore::GraphicsLayerTextureMapper::flushCompositingState(const WebCore::FloatRect & rect) Line 511 C++ > WebKit.dll!WebCore::GraphicsLayerTextureMapper::flushCompositingState(const WebCore::FloatRect & rect) Line 522 C++ > WebKit.dll!WebCore::GraphicsLayerTextureMapper::flushCompositingState(const WebCore::FloatRect & rect) Line 522 C++ > WebKit.dll!WebCore::GraphicsLayerTextureMapper::flushCompositingState(const WebCore::FloatRect & rect) Line 522 C++ > WebKit.dll!WebCore::GraphicsLayerTextureMapper::flushCompositingState(const WebCore::FloatRect & rect) Line 522 C++ > WebKit.dll!WebCore::GraphicsLayerTextureMapper::flushCompositingState(const WebCore::FloatRect & rect) Line 522 C++ > WebKit.dll!WebCore::RenderLayerCompositor::flushPendingLayerChanges(bool isFlushRoot) Line 575 C++ > WebKit.dll!WebCore::FrameView::flushCompositingStateForThisFrame(const WebCore::Frame & rootFrameForFlush) Line 975 C++ > WebKit.dll!WebCore::FrameView::flushCompositingStateIncludingSubframes() Line 1139 C++ > WebKit.dll!AcceleratedCompositingContext::flushPendingLayerChanges() Line 282 C++ > WebKit.dll!AcceleratedCompositingContext::flushAndRenderLayers() Line 308 C++ > WebKit.dll!AcceleratedCompositingContext::layerFlushTimerFired() Line 319 C++ > WebKit.dll!AcceleratedCompositingContext::LayerFlushTimer::fired() Line 89 C++ > WebKit.dll!WebCore::ThreadTimers::sharedTimerFiredInternal() Line 130 C++ > WebKit.dll!WebCore::ThreadTimers::setSharedTimer::__l8::<lambda>() Line 67 C++ > WebKit.dll!WTF::Detail::CallableWrapper<void <lambda>(void),void>::call() Line 52 C++ > WebKit.dll!WTF::Function<void __cdecl(void)>::operator()() Line 84 C++ > WebKit.dll!WebCore::MainThreadSharedTimer::fired() Line 84 C++ > WebKit.dll!WebCore::TimerWindowWndProc(HWND__ * hWnd, unsigned int message, unsigned __int64 wParam, __int64 lParam) Line 89 C++ > user32.dll!00007ff9bf655c1d() Unknown > user32.dll!00007ff9bf655612() Unknown > MiniBrowserLib.dll!wWinMain(HINSTANCE__ * hInstance, HINSTANCE__ * hPrevInstance, wchar_t * lpstrCmdLine, int nCmdShow) Line 120 C++ > MiniBrowserLib.dll!dllLauncherEntryPoint(HINSTANCE__ * hInstance, HINSTANCE__ * hPrevInstance, wchar_t * lpstrCmdLine, int nCmdShow) Line 140 C++ > MiniBrowser.exe!wWinMain(HINSTANCE__ * hInstance, HINSTANCE__ * hPrevInstance, wchar_t * lpstrCmdLine, int nCmdShow) Line 224 C++ > [Inline Frame] MiniBrowser.exe!invoke_main() Line 118 C++ > MiniBrowser.exe!__scrt_common_main_seh() Line 288 C++ > kernel32.dll!00007ff9bfe07c24() Unknown > ntdll.dll!00007ff9c144cea1() Unknown In GraphicsLayerTextureMapper::commitLayerChanges, replicaLayer() was nullptr. 1698008 1 411399 fujii 2020-10-14 19:57:32 -0700 Created attachment 411399 Patch 1698234 2 fujii 2020-10-15 12:55:15 -0700 Committed r268548: <https://trac.webkit.org/changeset/268548> 1698235 3 webkit-bug-importer 2020-10-15 12:56:20 -0700 <rdar://problem/70348434> 411399 2020-10-14 19:57:32 -0700 2020-10-15 07:12:24 -0700 Patch bug-217746-20201015115731.patch text/plain 2342 fujii U3VidmVyc2lvbiBSZXZpc2lvbjogMjY4MzI0CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggNGQ4NDkyMzBkMmJjNzJk OGFkNGY5NzkxNGViNWZhY2M3MTc3YTYyYy4uY2FlZjRiYjZiZGViODI3NDA2NTNjMjI1NDc4ZTE2 M2Y0Zjk5OTc5NyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE2IEBACisyMDIwLTEwLTE0ICBGdWpp aSBIaXJvbm9yaSAgPEhpcm9ub3JpLkZ1amlpQHNvbnkuY29tPgorCisgICAgICAgIFtXaW5DYWly b11bVGV4dHVyZU1hcHBlcl0gY3NzMy9maWx0ZXJzL2JhY2tkcm9wL2JhY2tkcm9wLWZpbHRlci13 aXRoLWJvcmRlci1yYWRpdXMtYW5kLXJlZmxlY3Rpb24tcmVtb3ZlLmh0bWwgaXMgY3Jhc2hpbmcK KyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIxNzc0Ngor CisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIElmIHJlcGxp Y2EgbGF5ZXJzIGlzIHJlbW92ZWQsIHJlcGxpY2FMYXllcigpIGFuZCBjYW4gYmUgbnVsbCBpbgor ICAgICAgICBjb21taXRMYXllckNoYW5nZXMoKS4gTnVsbCBjaGVja2luZyBpcyBuZWVkZWQuCisK KyAgICAgICAgKiBwbGF0Zm9ybS9ncmFwaGljcy90ZXhtYXAvR3JhcGhpY3NMYXllclRleHR1cmVN YXBwZXIuY3BwOgorICAgICAgICAoV2ViQ29yZTo6R3JhcGhpY3NMYXllclRleHR1cmVNYXBwZXI6 OmNvbW1pdExheWVyQ2hhbmdlcyk6IEFkZGVkIG51bGwgY2hlY2tpbmcgZm9yIG1hc2tMYXllcigp IGFuZCByZXBsaWNhTGF5ZXIoKS4KKwogMjAyMC0xMC0xMSAgUm9iIEJ1aXMgIDxyYnVpc0BpZ2Fs aWEuY29tPgogCiAgICAgICAgIFZhcmlvdXMgdGVzdC1jYXNlcyBmcm9tIEdlY2tvIGFzc2VydCB3 aXRoIEFTU0VSVElPTiBGQUlMRUQ6IHRhZ05hbWUgPT0gbW11bHRpc2NyaXB0c1RhZyBvciBBU1NF UlRJT04gRkFJTEVEOiB0YWdOYW1lID09IG1yb290VGFnCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2Vi Q29yZS9wbGF0Zm9ybS9ncmFwaGljcy90ZXhtYXAvR3JhcGhpY3NMYXllclRleHR1cmVNYXBwZXIu Y3BwIGIvU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vZ3JhcGhpY3MvdGV4bWFwL0dyYXBoaWNzTGF5 ZXJUZXh0dXJlTWFwcGVyLmNwcAppbmRleCAzNDFlMzM4Nzg3NjNjOTk2YjBjY2QwNWZmNWMwYTk4 YWY4YzVlOWY0Li5kNzhmZjQ5YTg0MTkxNjMwZDA3YjgyZGMyYjJiZDFjOTI5ODZmNTgzIDEwMDY0 NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS9ncmFwaGljcy90ZXhtYXAvR3JhcGhpY3NM YXllclRleHR1cmVNYXBwZXIuY3BwCisrKyBiL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2dyYXBo aWNzL3RleG1hcC9HcmFwaGljc0xheWVyVGV4dHVyZU1hcHBlci5jcHAKQEAgLTQxMCwxMSArNDEw LDE1IEBAIHZvaWQgR3JhcGhpY3NMYXllclRleHR1cmVNYXBwZXI6OmNvbW1pdExheWVyQ2hhbmdl cygpCiAgICAgICAgIG1fbGF5ZXIuc2V0Q2hpbGRyZW4ocmF3Q2hpbGRyZW4pOwogICAgIH0KIAot ICAgIGlmIChtX2NoYW5nZU1hc2sgJiBNYXNrTGF5ZXJDaGFuZ2UpCi0gICAgICAgIG1fbGF5ZXIu c2V0TWFza0xheWVyKCZkb3duY2FzdDxHcmFwaGljc0xheWVyVGV4dHVyZU1hcHBlcj4obWFza0xh eWVyKCkpLT5sYXllcigpKTsKKyAgICBpZiAobV9jaGFuZ2VNYXNrICYgTWFza0xheWVyQ2hhbmdl KSB7CisgICAgICAgIGF1dG8qIGxheWVyID0gZG93bmNhc3Q8R3JhcGhpY3NMYXllclRleHR1cmVN YXBwZXI+KG1hc2tMYXllcigpKTsKKyAgICAgICAgbV9sYXllci5zZXRNYXNrTGF5ZXIobGF5ZXIg PyAmbGF5ZXItPmxheWVyKCkgOiBudWxscHRyKTsKKyAgICB9CiAKLSAgICBpZiAobV9jaGFuZ2VN YXNrICYgUmVwbGljYUxheWVyQ2hhbmdlKQotICAgICAgICBtX2xheWVyLnNldFJlcGxpY2FMYXll cigmZG93bmNhc3Q8R3JhcGhpY3NMYXllclRleHR1cmVNYXBwZXI+KHJlcGxpY2FMYXllcigpKS0+ bGF5ZXIoKSk7CisgICAgaWYgKG1fY2hhbmdlTWFzayAmIFJlcGxpY2FMYXllckNoYW5nZSkgewor ICAgICAgICBhdXRvKiBsYXllciA9IGRvd25jYXN0PEdyYXBoaWNzTGF5ZXJUZXh0dXJlTWFwcGVy PihyZXBsaWNhTGF5ZXIoKSk7CisgICAgICAgIG1fbGF5ZXIuc2V0UmVwbGljYUxheWVyKGxheWVy ID8gJmxheWVyLT5sYXllcigpIDogbnVsbHB0cik7CisgICAgfQogCiAgICAgaWYgKG1fY2hhbmdl TWFzayAmIEJhY2tkcm9wTGF5ZXJDaGFuZ2UpIHsKICAgICAgICAgaWYgKG5lZWRzQmFja2Ryb3Ao KSkgewo=