233174 2021-11-15 22:57:36 -0800 Safari 15.1 regression: RTCRtpSender.replaceTrack with a disabled track crashes safari 2021-11-16 07:02:54 -0800 1 1 1 Unclassified WebKit WebRTC Safari 15 Unspecified Unspecified RESOLVED CONFIGURATION CHANGED P2 Major --- 1 avade webkit-unassigned youennf oldest_to_newest 1815366 0 avade 2021-11-15 22:57:36 -0800 Steps to reproduce: 1.Visit https://webrtc.github.io/samples/src/content/peerconnection/pc1/ 2. Click on Start and Call buttons. Note that this app/demo exposes `pc1` on console which is a RTCPeerConnection object 3. Invoke the following code from the dev tools console: black = ({ width = 640, height = 480 } = {}) => { const canvas = Object.assign(document.createElement('canvas'), { width, height }); canvas.getContext('2d').fillRect(0, 0, width, height); const stream = canvas.captureStream(); return Object.assign(stream.getVideoTracks()[0], { enabled: false }); // Note: changing enabled to true doesn't crash safari }; dummyTrack = black(); pc1.getSenders()[0].replaceTrack(dummyTrack) 4. Notice that safari crashes. Happens only on Safari 15.1, earlier versions were fine, so this is a regression. Happens both on BigSur and Monterey 1815456 1 youennf 2021-11-16 07:02:54 -0800 Thanks for the report Arjun. This should be fixed in latest iOS 15.2 beta.