Bug 176213

Summary:

AT&T EPTT crashes in IIOImagePlus::~IIOImagePlus

Product:

WebKit

Reporter:

saurabh <dsaurabh>

Component:

Images

Assignee:

Nobody <webkit-unassigned>

Status:

NEW

Severity:

Critical

CC:

ap, jonlee, sabouhallawa

Priority:

Version:

Other

Hardware:

iPhone / iPad

OS:

iOS 10.3

Attachments:

Description	Flags
Crash dump File attached	none

saurabh

Reported 2017-09-01 00:36:13 PDT

Created attachment 319583 [details] Crash dump File attached Summary: Crash is observed randomly in Web thread. Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Subtype: KERN_INVALID_ADDRESS at 0x00000001ffffffff Termination Signal: Segmentation fault: 11 Termination Reason: Namespace SIGNAL, Code 0xb Terminating Process: exc handler [0] Triggered by Thread: 4 Thread 4 name: WebThread Steps to Reproduce: Issue is random Expected Results: App should not crash Actual Results: App got crashed Version/Build: 1. OS Version: iPhone OS 10.3.3 (14G60) Hardware Model: iPhone7,1 2. OS Version: iPhone OS 10.3.2 (14F89) Hardware Model: iPhone7,1 3. Hardware Model: iPhone9,4 OS Version: iPhone OS 10.3.3 (14G60) Configuration:

Attachments
Crash dump File attached (60.77 KB, application/zip) 2017-09-01 00:36 PDT, saurabh	no flags	Details
View All Add attachment proposed patch, testcase, etc.

Alexey Proskuryakov

Comment 1 2017-09-05 20:04:33 PDT

Thread 5 name: WebThread Thread 5 Crashed: 0 CoreFoundation 0x000000018ac63234 CFRelease + 12 1 ImageIO 0x000000018ca391f8 IIOImagePlus::~IIOImagePlus() + 192 2 ImageIO 0x000000018ca3922c IIOImagePlus::~IIOImagePlus() + 20 3 ImageIO 0x000000018ca38b70 _CGImagePlusFinalize(void const*) + 184 4 CoreFoundation 0x000000018ad3ac28 _CFRelease + 216 5 CoreFoundation 0x000000018ad7a9ac common_removeAllObjects + 156 6 CoreFoundation 0x000000018ac6e9f0 -[__NSArrayM dealloc] + 28 7 ImageIO 0x000000018ca122c8 IIOImageSource::~IIOImageSource() + 156 8 ImageIO 0x000000018ca12390 IIOImageSource::~IIOImageSource() + 20 9 ImageIO 0x000000018ca165c0 _CGImageSourceFinalize(void const*) + 72 10 CoreFoundation 0x000000018ad3ac28 _CFRelease + 216 11 WebCore 0x000000018ff032f4 WebCore::ImageFrameCache::setDecoder(WebCore::ImageDecoder*) + 120 12 WebCore 0x000000018ff08854 WebCore::ImageSource::clear(WebCore::SharedBuffer*) + 92 13 WebCore 0x000000018f9d30d8 WebCore::BitmapImage::destroyDecodedData(bool) + 172 14 WebCore 0x00000001904752ac WebCore::MemoryCache::pruneLiveResourcesToSize(unsigned int, bool) + 252 15 WebCore 0x000000018f906e00 WebCore::ThreadTimers::sharedTimerFiredInternal() + 172

Alexey Proskuryakov

Comment 2 2017-09-05 20:05:19 PDT

I understand that this issue is random, but is it possible to reproduce at all?

Note You need to log in before you can comment on or make changes to this bug.