Bug 173456 – [GTK] Layout Test imported/w3c/web-platform-tests/webrtc/RTCPeerConnection-createOffer.html crashes

• Component: WebKitGTK
• Status: UNCONFIRMED

[Fujii Hironori]

imported/w3c/web-platform-tests/webrtc/RTCPeerConnection-createOffer.html

Release build:

> Thread 1 (Thread 0x7f9962c14f00 (LWP 12905)):
> #0  0x00007f9970500eac in WTFCrash () from /home/slave/webkitgtk/gtk-linux-64-release/build/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
> #1  0x00007f997593b345 in _ZN7WebCore27MediaEndpointPeerConnection15createOfferTaskERKNS_15RTCOfferOptionsE ()
> #2  0x00007f99759386b3 in _ZN7WebCore27MediaEndpointPeerConnection17startRunningTasksEv ()
> #3  0x00007f9976328994 in _ZN3WTF8FunctionIFvvEE15CallableWrapperIZN7WebCore17MockMediaEndpoint16generateDtlsInfoEvEUlvE_E4callEv ()
> #4  0x00007f9970508a95 in _ZN3WTF31dispatchFunctionsFromMainThreadEv () from /home/slave/webkitgtk/gtk-linux-64-release/build/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
> #5  0x00007f997054a29a in _ZZN3WTF7RunLoop9TimerBaseC4ERS0_ENUlPvE_4_FUNES3_ () from /home/slave/webkitgtk/gtk-linux-64-release/build/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
> #6  0x00007f996e27f5ca in g_main_dispatch () at /home/slave/webkitgtk/gtk-linux-64-release-tests/build/WebKitBuild/DependenciesGTK/Source/glib-2.52.1/glib/gmain.c:3212
> #7  g_main_context_dispatch () at /home/slave/webkitgtk/gtk-linux-64-release-tests/build/WebKitBuild/DependenciesGTK/Source/glib-2.52.1/glib/gmain.c:3865
> #8  0x00007f996e27f948 in g_main_context_iterate () at /home/slave/webkitgtk/gtk-linux-64-release-tests/build/WebKitBuild/DependenciesGTK/Source/glib-2.52.1/glib/gmain.c:3938
> #9  0x00007f996e27fc62 in g_main_loop_run () at /home/slave/webkitgtk/gtk-linux-64-release-tests/build/WebKitBuild/DependenciesGTK/Source/glib-2.52.1/glib/gmain.c:4134
> #10 0x00007f997054a690 in _ZN3WTF7RunLoop3runEv () from /home/slave/webkitgtk/gtk-linux-64-release/build/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
> #11 0x00007f9972977a42 in _ZN6WebKit16ChildProcessMainINS_10WebProcessENS_14WebProcessMainEEEiiPPc () from /home/slave/webkitgtk/gtk-linux-64-release/build/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #12 0x00007f9969bb22b1 in __libc_start_main (main=0x7f997584ab10 <main>, argc=2, argv=0x7ffc6ca274e8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffc6ca274d8) at ../csu/libc-start.c:291
> #13 0x00007f997584b02a in _start ()

Debug build:

> Thread 1 (Thread 0x7f2dadba3f00 (LWP 2079)):
> #0  0x00007f2dbccaf9e8 in WTFCrash () at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WTF/wtf/Assertions.cpp:293
> #1  0x00007f2dce9535c9 in WTF::CrashOnOverflow::crash () at ../../Source/WTF/wtf/CheckedArithmetic.h:85
> #2  0x00007f2dce9535c0 in WTF::CrashOnOverflow::overflowed () at ../../Source/WTF/wtf/CheckedArithmetic.h:78
> #3  0x00007f2dce9ba31f in WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul>::at (this=0x7f2d440fc3d8, i=0) at ../../Source/WTF/wtf/Vector.h:660
> #4  0x00007f2dce9ba14d in WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul>::operator[] (this=0x7f2d440fc3d8, i=0) at ../../Source/WTF/wtf/Vector.h:675
> #5  0x00007f2dceb6385a in (anonymous namespace)::MediaEndpointPeerConnection::createOfferTask (this=0x7f2dd344add0) at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WebCore/Modules/mediastream/MediaEndpointPeerConnection.cpp:196
> #6  0x00007f2dceb63490 in (anonymous namespace)::MediaEndpointPeerConnection::<lambda()>::operator()(void) (__closure=0x7f2d46e1d1e8) at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WebCore/Modules/mediastream/MediaEndpointPeerConnection.cpp:150
> #7  0x00007f2dceb6ab6c in WTF::Function<void()>::CallableWrapper<WebCore::MediaEndpointPeerConnection::doCreateOffer(WebCore::RTCOfferOptions&&)::<lambda()> >::call(void) (this=0x7f2d46e1d1e0) at ../../Source/WTF/wtf/Function.h:89
> #8  0x00007f2dce978961 in WTF::Function<void()>::operator()(void) const (this=0x7f2dd344ae40) at ../../Source/WTF/wtf/Function.h:50
> #9  0x00007f2dceb6344f in (anonymous namespace)::MediaEndpointPeerConnection::startRunningTasks (this=0x7f2dd344add0) at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WebCore/Modules/mediastream/MediaEndpointPeerConnection.cpp:143
> #10 0x00007f2dceb66c7e in (anonymous namespace)::MediaEndpointPeerConnection::gotDtlsFingerprint (this=0x7f2dd344add0, fingerprint="8B:87:09:8A:5D:C2:F3:33:EF:C5:B1:F6:84:3A:3D:D6:A3:E2:9C:17:4C:E7:46:3B:1B:CE:84:98:DD:8E:AF:7B", fingerprintFunction="sha-256") at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WebCore/Modules/mediastream/MediaEndpointPeerConnection.cpp:762
> #11 0x00007f2dcfa21004 in (anonymous namespace)::MockMediaEndpoint::<lambda()>::operator()(void) const (__closure=0x7f2d0cc78308) at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WebCore/platform/mock/MockMediaEndpoint.cpp:80
> #12 0x00007f2dcfa22e6c in WTF::Function<void()>::CallableWrapper<WebCore::MockMediaEndpoint::generateDtlsInfo()::<lambda()> >::call(void) (this=0x7f2d0cc78300) at ../../Source/WTF/wtf/Function.h:89
> #13 0x00007f2dce978961 in WTF::Function<void()>::operator()(void) const (this=0x7ffd8dd09c48) at ../../Source/WTF/wtf/Function.h:50
> #14 0x00007f2dbccbb01f in WTF::dispatchFunctionsFromMainThread () at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WTF/wtf/MainThread.cpp:128
> #15 0x00007f2dbcd129a3 in WTF::MainThreadDispatcher::fired (this=0x7f2dbdebc280 <_ZZN3WTF37scheduleDispatchFunctionsOnMainThreadEvE10dispatcher>) at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WTF/wtf/generic/MainThreadGeneric.cpp:60
> #16 0x00007f2dbcd12af0 in WTF::RunLoop::Timer<WTF::MainThreadDispatcher>::fired (this=0x7f2dbdebc280 <_ZZN3WTF37scheduleDispatchFunctionsOnMainThreadEvE10dispatcher>) at ../../Source/WTF/wtf/RunLoop.h:152
> #17 0x00007f2dbcd14f5b in WTF::RunLoop::TimerBase::<lambda(gpointer)>::operator()(gpointer) const (__closure=0x0, userData=0x7f2dbdebc280 <_ZZN3WTF37scheduleDispatchFunctionsOnMainThreadEvE10dispatcher>) at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WTF/wtf/glib/RunLoopGLib.cpp:166
> #18 0x00007f2dbcd14f97 in WTF::RunLoop::TimerBase::<lambda(gpointer)>::_FUN(gpointer) () at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WTF/wtf/glib/RunLoopGLib.cpp:170
> #19 0x00007f2dbcd146d6 in WTF::<lambda(GSource*, GSourceFunc, gpointer)>::operator()(GSource *, GSourceFunc, gpointer) const (__closure=0x0, source=0x7f2dd26d5140, callback=0x7f2dbcd14f7a <WTF::RunLoop::TimerBase::<lambda(gpointer)>::_FUN(gpointer)>, userData=0x7f2dbdebc280 <_ZZN3WTF37scheduleDispatchFunctionsOnMainThreadEvE10dispatcher>) at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WTF/wtf/glib/RunLoopGLib.cpp:45
> #20 0x00007f2dbcd14705 in WTF::<lambda(GSource*, GSourceFunc, gpointer)>::_FUN(GSource *, GSourceFunc, gpointer) () at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WTF/wtf/glib/RunLoopGLib.cpp:46
> #21 0x00007f2db920e5ca in g_main_dispatch () at /home/slave/webkitgtk/gtk-linux-64-debug-tests/build/WebKitBuild/DependenciesGTK/Source/glib-2.52.1/glib/gmain.c:3212
> #22 g_main_context_dispatch () at /home/slave/webkitgtk/gtk-linux-64-debug-tests/build/WebKitBuild/DependenciesGTK/Source/glib-2.52.1/glib/gmain.c:3865
> #23 0x00007f2db920e948 in g_main_context_iterate () at /home/slave/webkitgtk/gtk-linux-64-debug-tests/build/WebKitBuild/DependenciesGTK/Source/glib-2.52.1/glib/gmain.c:3938
> #24 0x00007f2db920ec62 in g_main_loop_run () at /home/slave/webkitgtk/gtk-linux-64-debug-tests/build/WebKitBuild/DependenciesGTK/Source/glib-2.52.1/glib/gmain.c:4134
> #25 0x00007f2dbcd14c23 in WTF::RunLoop::run () at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WTF/wtf/glib/RunLoopGLib.cpp:96
> #26 0x00007f2dc4bbb5b7 in (anonymous namespace)::ChildProcessMain<WebKit::WebProcess, WebKit::WebProcessMain> (argc=2, argv=0x7ffd8dd0a068) at ../../Source/WebKit2/Shared/unix/ChildProcessMain.h:61
> #27 0x00007f2dc4bbb46a in (anonymous namespace)::WebProcessMainUnix (argc=2, argv=0x7ffd8dd0a068) at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WebKit2/WebProcess/gtk/WebProcessMainGtk.cpp:69
> #28 0x00007f2dce94dde8 in main (argc=2, argv=0x7ffd8dd0a068) at /home/slave/webkitgtk/gtk-linux-64-debug/build/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp:44

[Fujii Hironori]

Created attachment 313054 [details]
gardening patch

[Carlos Garcia Campos]

Comment on attachment 313054 [details]
gardening patch

View in context: https://bugs.webkit.org/attachment.cgi?id=313054&action=review

> LayoutTests/platform/gtk/TestExpectations:1377
> +webkit.org/b/173456 imported/w3c/web-platform-tests/webrtc/RTCPeerConnection-createOffer.html [ Crash ]

I think we have a "section" specific for WebRTC issues, could you move this to that part of the file, please?

[Fujii Hironori]

Created attachment 313063 [details]
gardening patch

Moved. Is this the right place?

[WebKit Commit Bot]

Comment on attachment 313063 [details]
gardening patch

Rejecting attachment 313063 [details] from commit-queue.

Failed to run "['/Volumes/Data/EWS/WebKit/Tools/Scripts/webkit-patch', '--status-host=webkit-queues.webkit.org', '--bot-id=webkit-cq-02', 'apply-attachment', '--no-update', '--non-interactive', 313063, '--port=mac']" exit_code: 2 cwd: /Volumes/Data/EWS/WebKit

Last 500 characters of output:
/EWS/WebKit/Tools/Scripts/svn-apply', '--force']" exit_code: 1 cwd: /Volumes/Data/EWS/WebKit

Parsed 2 diffs from patch file(s).
patching file LayoutTests/ChangeLog
Hunk #1 succeeded at 1 with fuzz 3.
patching file LayoutTests/platform/gtk/TestExpectations
Hunk #1 FAILED at 660.
1 out of 1 hunk FAILED -- saving rejects to file LayoutTests/platform/gtk/TestExpectations.rej

Failed to run "[u'/Volumes/Data/EWS/WebKit/Tools/Scripts/svn-apply', '--force']" exit_code: 1 cwd: /Volumes/Data/EWS/WebKit

Full output: http://webkit-queues.webkit.org/results/3940532

[Fujii Hironori]

webrtc/createOfferAnswer.html [ Crash ]

crashes with the same call stack.

[Fujii Hironori]

(In reply to Fujii Hironori from comment #5)
> webrtc/createOfferAnswer.html [ Crash ]
> 
> crashes with the same call stack.

And, this too.

  webrtc/video-addTransceiver.html [ Crash ]

[Fujii Hironori]

Created attachment 313266 [details]
gardening patch

[WebKit Commit Bot]

Comment on attachment 313266 [details]
gardening patch

Clearing flags on attachment: 313266

Committed r218483: <http://trac.webkit.org/changeset/218483>

[WebKit Commit Bot]

All reviewed patches have been landed.  Closing bug.

[Fujii Hironori]

Reopened.