Bug 149914 – Crash in RenderLayerBacking::notifyAnimationStarted()

• Component: Layout and Rendering
• Status: NEW

[Daniel Bates]

Created attachment 262673 [details]
Crash Report

When I looked at <https://build.webkit.org/results/Apple%20iOS%209%20Simulator%20Release%20WK2%20(Tests)/r190705%20(180)/results.html>, I noticed that the test compositing/reflections/nested-reflection.html crashed the iOS WebContent process with the following backtrace:

[[
Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x0000000000000358
...
Application Specific Information:
CoreSimulator 179 - Device: iPhone 5s WebKit Tester - Runtime: iOS 9.0 (13A340) - DeviceType: iPhone 5s
CRASHING TEST: compositing/reflections/nested-reflection-transition.html
...

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore             	0x0000000114e9e67f WebCore::RenderLayerBacking::notifyAnimationStarted(WebCore::GraphicsLayer const*, WTF::String const&, double) + 31
1   com.apple.WebKit              	0x0000000110cc35bc void IPC::handleMessage<Messages::DrawingArea::AcceleratedAnimationDidStart, WebKit::DrawingArea, void (WebKit::DrawingArea::*)(unsigned long long, WTF::String const&, double)>(IPC::MessageDecoder&, WebKit::DrawingArea*, void (WebKit::DrawingArea::*)(unsigned long long, WTF::String const&, double)) + 88
2   com.apple.WebKit              	0x0000000110ce0dd9 IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::MessageDecoder&) + 113
3   com.apple.WebKit              	0x0000000110e4bdde WebKit::WebProcess::didReceiveMessage(IPC::Connection&, IPC::MessageDecoder&) + 28
4   com.apple.WebKit              	0x0000000110ca18a5 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::MessageDecoder, std::__1::default_delete<IPC::MessageDecoder> >) + 127
5   com.apple.WebKit              	0x0000000110ca3f3e IPC::Connection::dispatchOneMessage() + 126
6   JavaScriptCore                	0x0000000113c46fa5 WTF::RunLoop::performWork() + 437
7   JavaScriptCore                	0x0000000113c47352 WTF::RunLoop::performWork(void*) + 34
8   com.apple.CoreFoundation      	0x000000010e3ad0a1 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
9   com.apple.CoreFoundation      	0x000000010e3a2fcc __CFRunLoopDoSources0 + 556
10  com.apple.CoreFoundation      	0x000000010e3a2483 __CFRunLoopRun + 867
11  com.apple.CoreFoundation      	0x000000010e3a1e98 CFRunLoopRunSpecific + 488
12  com.apple.Foundation          	0x000000010da3d891 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 267
13  com.apple.Foundation          	0x000000010dad0221 -[NSRunLoop(NSRunLoop) run] + 74
14  libxpc.dylib                  	0x000000010f8b1534 _xpc_objc_main + 400
15  libxpc.dylib                  	0x000000010f8b38ee xpc_main + 189
16  com.apple.WebKit.WebContent.Development	0x000000010d96d432 main + 375
17  libdyld.dylib                 	0x000000010f5d992d start + 1
]]
<https://build.webkit.org/results/Apple%20iOS%209%20Simulator%20Release%20WK2%20(Tests)/r190705%20(180)/compositing/reflections/nested-reflection-crash-log.txt>

[Radar WebKit Bug Importer]

<rdar://problem/23024491>