Bug 160367

Summary: [ios-sim] Crash in WebCore::HTMLMediaElement::updateMediaControlsAfterPresentationModeChange()
Product: WebKit Reporter: Ryan Haddad <ryanhaddad>
Component: MediaAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: adachan, ap, cdumez, dbates, eric.carlson, jonlee, ryanhaddad, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
See Also: https://bugs.webkit.org/show_bug.cgi?id=157655
https://bugs.webkit.org/show_bug.cgi?id=161323
Attachments:
Description Flags
crash log none

Ryan Haddad
Reported 2016-07-29 17:04:09 PDT
[ios-sim] Crash in WebCore::HTMLMediaElement::updateMediaControlsAfterPresentationModeChange() Encountered on ios-simulator with test media/track/track-remove-quickly.html. However, the test attributed in the crashlog is media/track/track-remove-crash.html) https://build.webkit.org/results/Apple%20iOS%209%20Simulator%20Release%20WK2%20(Tests)/r203923%20(7772)/results.html Link to crashlog: https://build.webkit.org/results/Apple%20iOS%209%20Simulator%20Release%20WK2%20(Tests)/r203923%20(7772)/media/track/track-remove-quickly-crash-log.txt hread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x000000010ac858a2 WebCore::HTMLMediaElement::updateMediaControlsAfterPresentationModeChange() + 194 (HTMLMediaElement.cpp:6677) 1 com.apple.WebCore 0x000000010ac75167 WebCore::HTMLMediaElement::exitFullscreen() + 39 (HTMLMediaElement.cpp:5465) 2 com.apple.WebCore 0x000000010ac848fb WebCore::HTMLMediaElement::stopWithoutDestroyingMediaPlayer() + 27 (HTMLMediaElement.cpp:5091) 3 com.apple.WebCore 0x000000010ac84d36 WebCore::HTMLMediaElement::stop() + 22 (HTMLMediaElement.cpp:5131) 4 com.apple.WebCore 0x000000010b55e0c7 WebCore::ScriptExecutionContext::stopActiveDOMObjects() + 519 (ScriptExecutionContext.cpp:298) 5 com.apple.WebCore 0x000000010a9c0576 WebCore::Document::prepareForDestruction() + 406 (Document.cpp:2379) 6 com.apple.WebCore 0x000000010ab8000e WebCore::Frame::setView(WTF::RefPtr<WebCore::FrameView>&&) + 62 (Frame.cpp:251) 7 com.apple.WebCore 0x000000010ab81d84 WebCore::Frame::createView(WebCore::IntSize const&, WebCore::Color const&, bool, WebCore::IntSize const&, WebCore::IntRect const&, bool, WebCore::ScrollbarMode, bool, WebCore::ScrollbarMode, bool) + 132 (RefPtr.h:62) 8 com.apple.WebKit 0x0000000104deccce WebKit::WebFrameLoaderClient::transitionToCommittedForNewPage() + 288 (WebFrameLoaderClient.cpp:1324) 9 com.apple.WebCore 0x000000010ab97938 WebCore::FrameLoader::transitionToCommitted(WebCore::CachedPage*) + 616 (FrameLoader.cpp:1995) 10 com.apple.WebCore 0x000000010ab96c07 WebCore::FrameLoader::commitProvisionalLoad() + 439 (FrameLoader.cpp:1799) 11 com.apple.WebCore 0x000000010a9eb8d6 WebCore::DocumentLoader::finishedLoading(double) + 182 (DocumentLoader.cpp:152) 12 com.apple.WebCore 0x000000010a9f0320 WebCore::DocumentLoader::maybeLoadEmpty() + 784 (DocumentLoader.cpp:1464) 13 com.apple.WebCore 0x000000010a9f05e9 WebCore::DocumentLoader::startLoadingMainResource() + 617 (DocumentLoader.cpp:1474) 14 com.apple.WebCore 0x000000010ab94a29 WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool, WebCore::AllowNavigationToInvalidURL) + 1097 (FrameLoader.cpp:3097) 15 com.apple.WebCore 0x000000010ab9d495 std::__1::__function::__func<WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::PassRefPtr<WebCore::FormState>, WebCore::AllowNavigationToInvalidURL)::$_4, std::__1::allocator<WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::PassRefPtr<WebCore::FormState>, WebCore::AllowNavigationToInvalidURL)::$_4>, void (WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool)>::operator()(WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>&&, bool&&) + 53 (functional:1407) 16 com.apple.WebCore 0x000000010b31d920 WebCore::PolicyCallback::call(bool) + 80 (PolicyCallback.cpp:95) 17 com.apple.WebCore 0x000000010b31fe5a 0x10a719000 + 12611162 18 com.apple.WebKit 0x0000000104deac23 WebKit::WebFrameLoaderClient::dispatchDecidePolicyForNavigationAction(WebCore::NavigationAction const&, WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, std::__1::function<void (WebCore::PolicyAction)>) + 303 (WebFrameLoaderClient.cpp:761) 19 com.apple.WebCore 0x000000010b31f3c8 WebCore::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest const&, bool, WebCore::DocumentLoader*, WTF::PassRefPtr<WebCore::FormState>, std::__1::function<void (WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool)>) + 3672 (PolicyChecker.cpp:144) 20 com.apple.WebCore 0x000000010ab940a8 WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::PassRefPtr<WebCore::FormState>, WebCore::AllowNavigationToInvalidURL) + 3128 (FrameLoader.cpp:1467) 21 com.apple.WebCore 0x000000010ab9094c WebCore::FrameLoader::load(WebCore::DocumentLoader*) + 300 (PassRefPtr.h:56) 22 com.apple.WebCore 0x000000010ab9341a WebCore::FrameLoader::load(WebCore::FrameLoadRequest const&) + 1514 (FrameLoader.cpp:1312) 23 com.apple.WebKit 0x0000000104e16794 WebKit::WebPage::loadRequest(WebKit::LoadParameters const&) + 414 (WebPage.cpp:1173) 24 com.apple.WebKit 0x0000000104e41023 void IPC::handleMessage<Messages::WebPage::LoadRequest, WebKit::WebPage, void (WebKit::WebPage::*)(WebKit::LoadParameters const&)>(IPC::MessageDecoder&, WebKit::WebPage*, void (WebKit::WebPage::*)(WebKit::LoadParameters const&)) + 223 (HandleMessage.h:16) 25 com.apple.WebKit 0x0000000104d30a33 IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::MessageDecoder&) + 113 (MessageReceiverMap.cpp:123) 26 com.apple.WebKit 0x0000000104e9569e WebKit::WebProcess::didReceiveMessage(IPC::Connection&, IPC::MessageDecoder&) + 28 (WebProcess.cpp:641) 27 com.apple.WebKit 0x0000000104cfc0a3 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::MessageDecoder, std::__1::default_delete<IPC::MessageDecoder> >) + 119 (Connection.cpp:929) 28 com.apple.WebKit 0x0000000104cfe312 IPC::Connection::dispatchOneMessage() + 126 (Connection.cpp:958) 29 JavaScriptCore 0x000000010a0147a9 WTF::RunLoop::performWork() + 169 (RunLoop.cpp:106) 30 JavaScriptCore 0x000000010a0149c2 WTF::RunLoop::performWork(void*) + 34 (RunLoopCF.cpp:39) 31 com.apple.CoreFoundation 0x0000000105ba0301 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17 32 com.apple.CoreFoundation 0x0000000105b9622c __CFRunLoopDoSources0 + 556 33 com.apple.CoreFoundation 0x0000000105b956e3 __CFRunLoopRun + 867 34 com.apple.CoreFoundation 0x0000000105b950f8 CFRunLoopRunSpecific + 488 35 com.apple.Foundation 0x00000001048bda31 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 267 36 com.apple.Foundation 0x0000000104950fe1 -[NSRunLoop(NSRunLoop) run] + 74 37 libxpc.dylib 0x00000001070d54d4 _xpc_objc_main + 400 38 libxpc.dylib 0x00000001070d788e xpc_main + 189 39 com.apple.WebKit.WebContent.Development 0x00000001047ed730 main + 407 (XPCServiceMain.mm:120) 40 libdyld.dylib 0x0000000106e0792d start + 1
Attachments
crash log (98.80 KB, text/plain)
2016-09-15 10:54 PDT, Alexey Proskuryakov 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Alexey Proskuryakov
Comment 1 2016-07-30 00:12:54 PDT
Looks similar to bug 157655.
Ryan Haddad
Comment 2 2016-08-02 14:13:17 PDT
Seeing a similar crash with media/track/media-element-enqueue-event-crash.html https://build.webkit.org/builders/Apple%20iOS%209%20Simulator%20Release%20WK2%20(Tests)/builds/7830
Ryan Haddad
Comment 3 2016-08-02 14:16:59 PDT
Marked tests as flaky in http://trac.webkit.org/projects/webkit/changeset/204039
Alexey Proskuryakov
Comment 4 2016-09-15 10:54:34 PDT
Created attachment 288973 [details] crash log
Alexey Proskuryakov
Comment 5 2016-09-15 10:56:32 PDT
First crash on 2016-07-29 11:14.
Radar WebKit Bug Importer
Comment 6 2016-09-15 10:57:02 PDT
<rdar://problem/28322859>
Alexey Proskuryakov
Comment 7 2016-09-15 11:07:24 PDT
*** This bug has been marked as a duplicate of bug 161323 ***
Note You need to log in before you can comment on or make changes to this bug.