Bug 223920

Summary: Crash in webgl/1.0.x/conformance/textures/misc/texture-with-flip-y-and-premultiply-alpha.html
Product: WebKit Reporter: Kimmo Kinnunen <kkinnunen>
Component: WebGLAssignee: Kimmo Kinnunen <kkinnunen>
Status: RESOLVED FIXED    
Severity: Normal CC: cdumez, changseok, dino, esprehn+autocc, ews-watchlist, gyuyoung.kim, kbr, kkinnunen, kondapallykalyan, kpiddington, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Local Build   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 222812    
Attachments:
Description Flags
Patch
none
Patch none

Kimmo Kinnunen
Reported 2021-03-30 04:34:02 PDT
Crash in webgl/1.0.x/conformance/textures/misc/texture-with-flip-y-and-premultiply-alpha.html ANGLE+METAL
Attachments
Patch (16.90 KB, patch)
2021-06-29 03:35 PDT, Kimmo Kinnunen 		no flags
DetailsFormatted DiffDiff
Patch (16.98 KB, patch)
2021-06-29 03:37 PDT, Kimmo Kinnunen 		no flags
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Kimmo Kinnunen
Comment 1 2021-03-30 04:36:21 PDT
With skip changed from 2.0.y -> 2.0.0, 1.0.x -> 1.0.3 ../Internal/Tools/Scripts/run-webkit-tests --debug --no-build --order=random fast/canvas webgl --timeout=300000 Process: com.apple.WebKit.WebContent.Development [15487] Path: /Users/USER/*/com.apple.WebKit.WebContent.Development Identifier: com.apple.WebKit.WebContent Version: 612+ (612.1.9+) Code Type: X86-64 (Native) Parent Process: ??? [1] Responsible: WebKitTestRunner [15484] User ID: 501 PlugIn Path: /Users/USER/*/libANGLE-shared.dylib PlugIn Identifier: libANGLE-shared.dylib PlugIn Version: ??? (0) Date/Time: 2021-03-30 14:30:12.603 +0300 OS Version: macOS 11.3 (20E201) Report Version: 12 Bridge OS Version: 5.3 (18P4544) Anonymous UUID: ADEB2724-109F-6379-8A4B-657A6A37BBA8 Sleep/Wake UUID: D48EB9D4-6C73-426F-AF12-26DC79BB8DC1 Time Awake Since Boot: 110000 seconds Time Since Wake: 5900 seconds System Integrity Protection: enabled Crashed Thread: 0 Dispatch queue: com.apple.main-thread Exception Type: EXC_BAD_INSTRUCTION (SIGILL) Exception Codes: 0x0000000000000001, 0x0000000000000000 Exception Note: EXC_CORPSE_NOTIFY Termination Signal: Illegal instruction: 4 Termination Reason: Namespace SIGNAL, Code 0x4 Terminating Process: exc handler [15487] Application Specific Information: CRASHING TEST: webgl/1.0.x/conformance/ogles/GL/build/build_009_to_016.html Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 libANGLE-shared.dylib 0x00000007f5b411de gl::LogMessage::~LogMessage() + 238 (debug.cpp:199) 1 libANGLE-shared.dylib 0x00000007f5b40ab5 gl::LogMessage::~LogMessage() + 21 (debug.cpp:175) 2 libANGLE-shared.dylib 0x00000007f611ce4c (anonymous namespace)::Separator::visitDeclarationPost(sh::TIntermDeclaration&) + 668 (SeparateCompoundExpressions.cpp:334) 3 libANGLE-shared.dylib 0x00000007f5e1cb2b sh::TIntermRebuild::traversePost(sh::NodeType, sh::TIntermNode const&, sh::TIntermNode&, sh::TIntermRebuild::VisitBits) + 1755 (IntermRebuild.cpp:511) 4 libANGLE-shared.dylib 0x00000007f5e1b1b9 sh::TIntermRebuild::traverseAny(sh::TIntermNode&) + 585 (IntermRebuild.cpp:328) 5 libANGLE-shared.dylib 0x00000007f5e1b4d9 sh::TIntermRebuild::traverseAggregateBaseChildren(sh::TIntermAggregateBase&) + 761 (IntermRebuild.cpp:266) 6 libANGLE-shared.dylib 0x00000007f5e1e5c6 sh::TIntermRebuild::traverseBlockChildren(sh::TIntermBlock&) + 38 (IntermRebuild.cpp:532) 7 libANGLE-shared.dylib 0x00000007f5e1c305 sh::TIntermRebuild::traverseChildren(sh::NodeType, sh::TIntermNode const&, sh::TIntermNode&, sh::TIntermRebuild::VisitBits) + 1093 (IntermRebuild.cpp:438) 8 libANGLE-shared.dylib 0x00000007f5e1b15e sh::TIntermRebuild::traverseAny(sh::TIntermNode&) + 494 (IntermRebuild.cpp:322) 9 libANGLE-shared.dylib 0x00000007f5e1f151 sh::TIntermBlock* sh::TIntermRebuild::traverseAnyAs<sh::TIntermBlock>(sh::TIntermNode&) + 33 (IntermRebuild.cpp:233) 10 libANGLE-shared.dylib 0x00000007f5e1e47c sh::TIntermRebuild::traverseFunctionDefinitionChildren(sh::TIntermFunctionDefinition&) + 796 (IntermRebuild.cpp:736) 11 libANGLE-shared.dylib 0x00000007f5e1c2a7 sh::TIntermRebuild::traverseChildren(sh::NodeType, sh::TIntermNode const&, sh::TIntermNode&, sh::TIntermRebuild::VisitBits) + 999 (IntermRebuild.cpp:434) 12 libANGLE-shared.dylib 0x00000007f5e1b15e sh::TIntermRebuild::traverseAny(sh::TIntermNode&) + 494 (IntermRebuild.cpp:322) 13 libANGLE-shared.dylib 0x00000007f5e1b4d9 sh::TIntermRebuild::traverseAggregateBaseChildren(sh::TIntermAggregateBase&) + 761 (IntermRebuild.cpp:266) 14 libANGLE-shared.dylib 0x00000007f5e1e5c6 sh::TIntermRebuild::traverseBlockChildren(sh::TIntermBlock&) + 38 (IntermRebuild.cpp:532) 15 libANGLE-shared.dylib 0x00000007f5e1c305 sh::TIntermRebuild::traverseChildren(sh::NodeType, sh::TIntermNode const&, sh::TIntermNode&, sh::TIntermRebuild::VisitBits) + 1093 (IntermRebuild.cpp:438) 16 libANGLE-shared.dylib 0x00000007f5e1b15e sh::TIntermRebuild::traverseAny(sh::TIntermNode&) + 494 (IntermRebuild.cpp:322) 17 libANGLE-shared.dylib 0x00000007f5e1f151 sh::TIntermBlock* sh::TIntermRebuild::traverseAnyAs<sh::TIntermBlock>(sh::TIntermNode&) + 33 (IntermRebuild.cpp:233) 18 libANGLE-shared.dylib 0x00000007f5e1ae00 bool sh::TIntermRebuild::rebuildInPlaceImpl<sh::TIntermBlock>(sh::TIntermBlock&) + 32 (IntermRebuild.cpp:209) 19 libANGLE-shared.dylib 0x00000007f5e1ad0d sh::TIntermRebuild::rebuildInPlace(sh::TIntermBlock&) + 29 (IntermRebuild.cpp:198) 20 libANGLE-shared.dylib 0x00000007f5e1acb4 sh::TIntermRebuild::rebuildRoot(sh::TIntermBlock&) + 36 (IntermRebuild.cpp:184) 21 libANGLE-shared.dylib 0x00000007f6118df4 sh::SeparateCompoundExpressions(sh::TCompiler&, sh::SymbolEnv&, sh::IdGen&, sh::TIntermBlock&) + 260 (SeparateCompoundExpressions.cpp:649) 22 libANGLE-shared.dylib 0x00000007f622fe85 sh::TranslatorMetalDirect::translateImpl(sh::TIntermBlock&, unsigned long long) + 6149 (TranslatorMetalDirect.cpp:1475) 23 libANGLE-shared.dylib 0x00000007f6232c0c sh::TranslatorMetalDirect::translate(sh::TIntermBlock*, unsigned long long, sh::PerformanceDiagnostics*) + 316 (TranslatorMetalDirect.cpp:1552) 24 libANGLE-shared.dylib 0x00000007f5a70efe sh::TCompiler::compile(char const* const*, unsigned long, unsigned long long) + 286 (Compiler.cpp:981) 25 libANGLE-shared.dylib 0x00000007f61492a4 sh::Compile(void*, char const* const*, unsigned long, unsigned long long) + 340 (ShaderLang.cpp:336) 26 libANGLE-shared.dylib 0x00000007f614716a rx::TranslateTask::operator()() + 266 (ShaderImpl.cpp:52) 27 libANGLE-shared.dylib 0x00000007f62f4f3f angle::SingleThreadedWorkerPool::postWorkerTask(std::__1::shared_ptr<angle::Closure>) + 47 (WorkerThread.cpp:68) 28 libANGLE-shared.dylib 0x00000007f62f62a4 angle::WorkerThreadPool::PostWorkerTask(std::__1::shared_ptr<angle::WorkerThreadPool>, std::__1::shared_ptr<angle::Closure>) + 84 (WorkerThread.cpp:348) 29 libANGLE-shared.dylib 0x00000007f614c5c7 rx::ShaderMtl::compileImplMtl(gl::Context const*, gl::ShCompilerInstance*, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, unsigned long long) + 263 (ShaderMtl.mm:97) 30 libANGLE-shared.dylib 0x00000007f614ca70 rx::ShaderMtl::compile(gl::Context const*, gl::ShCompilerInstance*, unsigned long long) + 464 (ShaderMtl.mm:140) 31 libANGLE-shared.dylib 0x00000007f612ea3f gl::Shader::compile(gl::Context const*) + 1663 (Shader.cpp:367) 32 libANGLE-shared.dylib 0x00000007f5aaec19 gl::Context::compileShader(gl::ShaderProgramID) + 73 (Context.cpp:6183) 33 libANGLE-shared.dylib 0x00000007f5c03a96 gl::CompileShader(unsigned int) + 134 (entry_points_gles_2_0_autogen.cpp:541) 34 com.apple.WebCore 0x00000007d0d64794 WebCore::GraphicsContextGLOpenGL::compileShader(unsigned int) + 148 (GraphicsContextGLANGLE.cpp:917) 35 com.apple.WebCore 0x00000007d40682de WebCore::WebGLRenderingContextBase::compileShader(WebCore::WebGLShader&) + 126 (WebGLRenderingContextBase.cpp:1752) 36 com.apple.WebCore 0x00000007d22555c2 WebCore::jsWebGLRenderingContextPrototypeFunction_compileShaderBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()::operator()() const + 34 (JSWebGLRenderingContext.cpp:5015) 37 com.apple.WebCore 0x00000007d225542d JSC::JSValue WebCore::toJS<WebCore::IDLUndefined, WebCore::jsWebGLRenderingContextPrototypeFunction_compileShaderBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()>(JSC::JSGlobalObject&, JSC::ThrowScope&, WebCore::jsWebGLRenderingContextPrototypeFunction_compileShaderBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()&&) + 29 (JSDOMConvertBase.h:165) 38 com.apple.WebCore 0x00000007d225534c WebCore::jsWebGLRenderingContextPrototypeFunction_compileShaderBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*) + 812 (JSWebGLRenderingContext.cpp:5015) 39 com.apple.WebCore 0x00000007d2254fec long long WebCore::IDLOperation<WebCore::JSWebGLRenderingContext>::call<&(WebCore::jsWebGLRenderingContextPrototypeFunction_compileShaderBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)), (WebCore::CastedThisErrorBehavior)0>(JSC::JSGlobalObject&, JSC::CallFrame&, char const*) + 700 (JSDOMOperation.h:55) 40 com.apple.WebCore 0x00000007d22478c4 WebCore::jsWebGLRenderingContextPrototypeFunction_compileShader(JSC::JSGlobalObject*, JSC::CallFrame*) + 36 (JSWebGLRenderingContext.cpp:5020) 41 ??? 0x0000438e90a011d8 0 + 74279590826456 42 com.apple.JavaScriptCore 0x00000007ee777a45 llint_entry + 138563 (LowLevelInterpreter.asm:1093) 43 com.apple.JavaScriptCore 0x00000007ee777a45 llint_entry + 138563 (LowLevelInterpreter.asm:1093) 44 com.apple.JavaScriptCore 0x00000007ee777a45 llint_entry + 138563 (LowLevelInterpreter.asm:1093) 45 com.apple.JavaScriptCore 0x00000007ee755a10 vmEntryToJavaScript + 289 (LowLevelInterpreter64.asm:316) 46 com.apple.JavaScriptCore 0x00000007ef618e3b JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 235 (JITCodeInlines.h:42) 47 com.apple.JavaScriptCore 0x00000007ef6195f7 JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 1815 (Interpreter.cpp:907) 48 com.apple.JavaScriptCore 0x00000007ef9878ad JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 221 (CallData.cpp:57) 49 com.apple.JavaScriptCore 0x00000007ef98798f JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 207 (CallData.cpp:64) 50 com.apple.JavaScriptCore 0x00000007ef987c72 JSC::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 130 (CallData.cpp:85) 51 com.apple.WebCore 0x00000007d3335cae WebCore::JSExecState::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 110 (JSExecState.h:73) 52 com.apple.WebCore 0x00000007d3353c2b WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext&, WebCore::Event&) + 2171 (JSEventListener.cpp:186) 53 com.apple.WebCore 0x00000007d3a79147 WebCore::EventTarget::innerInvokeEventListeners(WebCore::Event&, WTF::Vector<WTF::RefPtr<WebCore::RegisteredEventListener, WTF::RawPtrTraits<WebCore::RegisteredEventListener>, WTF::DefaultRefDerefTraits<WebCore::RegisteredEventListener> >, 1ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>, WebCore::EventTarget::EventInvokePhase) + 1063 (EventTarget.cpp:344) 54 com.apple.WebCore 0x00000007d3a78ba4 WebCore::EventTarget::fireEventListeners(WebCore::Event&, WebCore::EventTarget::EventInvokePhase) + 356 (EventTarget.cpp:276) 55 com.apple.WebCore 0x00000007d3a78a25 WebCore::EventTarget::dispatchEvent(WebCore::Event&) + 357 (EventTarget.cpp:234) 56 com.apple.WebCore 0x00000007d59d896b WebCore::XMLHttpRequest::dispatchEvent(WebCore::Event&) + 347 (XMLHttpRequest.cpp:1079) 57 com.apple.WebCore 0x00000007d59d9312 WebCore::XMLHttpRequestProgressEventThrottle::dispatchEventWhenPossible(WebCore::Event&) + 114 (XMLHttpRequestProgressEventThrottle.cpp:86) 58 com.apple.WebCore 0x00000007d59d2c1b WebCore::XMLHttpRequestProgressEventThrottle::dispatchReadyStateChangeEvent(WebCore::Event&, WebCore::ProgressEventAction) + 59 (XMLHttpRequestProgressEventThrottle.cpp:78) 59 com.apple.WebCore 0x00000007d59d2b5c WebCore::XMLHttpRequest::callReadyStateChangeListener() + 284 (XMLHttpRequest.cpp:313) 60 com.apple.WebCore 0x00000007d59d2906 WebCore::XMLHttpRequest::changeState(WebCore::XMLHttpRequest::State) + 246 (XMLHttpRequest.cpp:300) 61 com.apple.WebCore 0x00000007d59d79cf WebCore::XMLHttpRequest::didFinishLoading(unsigned long) + 287 (XMLHttpRequest.cpp:928) 62 com.apple.WebCore 0x00000007d44ff463 WebCore::DocumentThreadableLoader::didFinishLoading(unsigned long) + 1043 (DocumentThreadableLoader.cpp:496) 63 com.apple.WebCore 0x00000007d44fee5f WebCore::DocumentThreadableLoader::notifyFinished(WebCore::CachedResource&, WebCore::NetworkLoadMetrics const&) + 383 (DocumentThreadableLoader.cpp:468) 64 com.apple.WebCore 0x00000007d46377ba WebCore::CachedResource::checkNotify(WebCore::NetworkLoadMetrics const&) + 138 (CachedResource.cpp:379) 65 com.apple.WebCore 0x00000007d46332ac WebCore::CachedResource::finishLoading(WebCore::SharedBuffer*, WebCore::NetworkLoadMetrics const&) + 60 (CachedResource.cpp:395) 66 com.apple.WebCore 0x00000007d463482c WebCore::CachedRawResource::finishLoading(WebCore::SharedBuffer*, WebCore::NetworkLoadMetrics const&) + 332 (CachedRawResource.cpp:123) 67 com.apple.WebCore 0x00000007d45badb4 WebCore::SubresourceLoader::didFinishLoading(WebCore::NetworkLoadMetrics const&) + 1684 (SubresourceLoader.cpp:736) 68 com.apple.WebKit 0x00000007c1d7d64a WebKit::WebResourceLoader::didFinishResourceLoad(WebCore::NetworkLoadMetrics const&) + 778 (WebResourceLoader.cpp:227) 69 com.apple.WebKit 0x00000007c2378e30 void IPC::callMemberFunctionImpl<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&), std::__1::tuple<WebCore::NetworkLoadMetrics>, 0ul>(WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&), std::__1::tuple<WebCore::NetworkLoadMetrics>&&, std::__1::integer_sequence<unsigned long, 0ul>) + 160 (HandleMessage.h:43) 70 com.apple.WebKit 0x00000007c2378d80 void IPC::callMemberFunction<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&), std::__1::tuple<WebCore::NetworkLoadMetrics>, std::__1::integer_sequence<unsigned long, 0ul> >(std::__1::tuple<WebCore::NetworkLoadMetrics>&&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&)) + 112 (HandleMessage.h:49) 71 com.apple.WebKit 0x00000007c2376b2e void IPC::handleMessage<Messages::WebResourceLoader::DidFinishResourceLoad, WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&)>(IPC::Decoder&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&)) + 190 (HandleMessage.h:121) 72 com.apple.WebKit 0x00000007c237649e WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::Decoder&) + 494 (WebResourceLoaderMessageReceiver.cpp:56) 73 com.apple.WebKit 0x00000007c1d3e930 WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 144 (NetworkProcessConnection.cpp:94) 74 com.apple.WebKit 0x00000007c0084024 IPC::Connection::dispatchMessage(IPC::Decoder&) + 516 (Connection.cpp:1020) 75 com.apple.WebKit 0x00000007c00847ec IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 636 (Connection.cpp:1065) 76 com.apple.WebKit 0x00000007c0084e10 IPC::Connection::dispatchOneIncomingMessage() + 208 (Connection.cpp:1134) 77 com.apple.WebKit 0x00000007c00a3368 IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_9::operator()() + 88 (Connection.cpp:989) 78 com.apple.WebKit 0x00000007c00a325e WTF::Detail::CallableWrapper<IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_9, void>::call() + 30 (Function.h:52) 79 com.apple.JavaScriptCore 0x00000007ee1aec62 WTF::Function<void ()>::operator()() const + 130 (Function.h:83) 80 com.apple.JavaScriptCore 0x00000007ee226de5 WTF::RunLoop::performWork() + 341 (RunLoop.cpp:133) 81 com.apple.JavaScriptCore 0x00000007ee22a761 WTF::RunLoop::performWork(void*) + 33 (RunLoopCF.cpp:46) 82 com.apple.CoreFoundation 0x00007fff2045be2c __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17 83 com.apple.CoreFoundation 0x00007fff2045bd94 __CFRunLoopDoSource0 + 180 84 com.apple.CoreFoundation 0x00007fff2045bb14 __CFRunLoopDoSources0 + 242 85 com.apple.CoreFoundation 0x00007fff2045a53c __CFRunLoopRun + 893 86 com.apple.CoreFoundation 0x00007fff20459afc CFRunLoopRunSpecific + 563 87 com.apple.Foundation 0x00007fff211e3bb7 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 212 88 com.apple.Foundation 0x00007fff21271a81 -[NSRunLoop(NSRunLoop) run] + 76 89 libxpc.dylib 0x00007fff200b138d _xpc_objc_main + 825 90 libxpc.dylib 0x00007fff200b0cd3 xpc_main + 116 91 com.apple.WebKit 0x00000007c0d628e1 WebKit::XPCServiceMain(int, char const**) + 1025 (XPCServiceMain.mm:209) 92 com.apple.WebKit 0x00000007c2404c6b WKXPCServiceMain + 27 (WKMain.mm:33) 93 com.apple.WebKit.WebContent 0x0000000104b6aea2 main + 34 (AuxiliaryProcessMain.cpp:30) 94 libdyld.dylib 0x00007fff2037df3d start + 1
Kimmo Kinnunen
Comment 2 2021-03-30 04:48:15 PDT
Skip the previous comment, it was of wrong crash. This one is: Process: com.apple.WebKit.WebContent.Development [86645] Path: /Users/USER/*/com.apple.WebKit.WebContent.Development Identifier: com.apple.WebKit.WebContent Version: 612+ (612.1.9+) Code Type: X86-64 (Native) Parent Process: ??? [1] User ID: 501 Date/Time: 2021-03-30 14:21:48.603 +0300 OS Version: macOS 11.3 (20E201) Report Version: 12 Bridge OS Version: 5.3 (18P4544) Anonymous UUID: ADEB2724-109F-6379-8A4B-657A6A37BBA8 Sleep/Wake UUID: D48EB9D4-6C73-426F-AF12-26DC79BB8DC1 Time Awake Since Boot: 110000 seconds Time Since Wake: 5400 seconds System Integrity Protection: enabled Crashed Thread: 0 Dispatch queue: com.apple.main-thread Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x00000000bbadbeef Exception Note: EXC_CORPSE_NOTIFY Termination Signal: Segmentation fault: 11 Termination Reason: Namespace SIGNAL, Code 0xb Terminating Process: exc handler [86645] VM Regions Near 0xbbadbeef: --> __TEXT 108c0e000-108c12000 [ 16K] r-x/r-x SM=COW /Users/*/*.Development Application Specific Information: CRASHING TEST: webgl/1.0.x/conformance/textures/misc/texture-with-flip-y-and-premultiply-alpha.html Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.JavaScriptCore 0x00000001420346ae WTFCrash + 14 (Assertions.cpp:295) 1 com.apple.WebCore 0x0000000125013e4b WTFCrashWithInfo(int, char const*, char const*, int) + 27 (Assertions.h:671) 2 com.apple.WebCore 0x000000012900f464 WebCore::getDataFormat(unsigned int, unsigned int) + 1364 (GraphicsContextGL.cpp:136) 3 com.apple.WebCore 0x000000012900ecbd WebCore::GraphicsContextGL::extractTextureData(unsigned int, unsigned int, unsigned int, unsigned int, WebCore::GraphicsContextGL::PixelStoreParams const&, bool, bool, void const*, WTF::Vector<unsigned char, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&) + 77 (GraphicsContextGL.cpp:791) 4 com.apple.WebCore 0x000000012857f5d9 WebCore::WebGLRenderingContextBase::texImageArrayBufferViewHelper(WebCore::WebGLRenderingContextBase::TexImageFunctionID, unsigned int, int, int, int, int, int, int, unsigned int, unsigned int, int, int, int, WTF::RefPtr<JSC::ArrayBufferView, WTF::RawPtrTraits<JSC::ArrayBufferView>, WTF::DefaultRefDerefTraits<JSC::ArrayBufferView> >&&, WebCore::WebGLRenderingContextBase::NullDisposition, unsigned int) + 1529 (WebGLRenderingContextBase.cpp:4981) 5 com.apple.WebCore 0x00000001285816fc WebCore::WebGLRenderingContextBase::texImage2D(unsigned int, int, unsigned int, int, int, int, unsigned int, unsigned int, WTF::RefPtr<JSC::ArrayBufferView, WTF::RawPtrTraits<JSC::ArrayBufferView>, WTF::DefaultRefDerefTraits<JSC::ArrayBufferView> >&&) + 268 (WebGLRenderingContextBase.cpp:5226) 6 com.apple.WebCore 0x00000001267614e1 WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2D1Body(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()::operator()() const + 241 (JSWebGLRenderingContext.cpp:5062) 7 com.apple.WebCore 0x000000012676110d JSC::JSValue WebCore::toJS<WebCore::IDLUndefined, WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2D1Body(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()>(JSC::JSGlobalObject&, JSC::ThrowScope&, WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2D1Body(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()&&) + 29 (JSDOMConvertBase.h:165) 8 com.apple.WebCore 0x0000000126760dcd WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2D1Body(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*) + 2733 (JSWebGLRenderingContext.cpp:5062) 9 com.apple.WebCore 0x000000012675f9eb WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2DOverloadDispatcher(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*) + 299 (JSWebGLRenderingContext.cpp:5116) 10 com.apple.WebCore 0x000000012675f88c long long WebCore::IDLOperation<WebCore::JSWebGLRenderingContext>::call<&(WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2DOverloadDispatcher(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)), (WebCore::CastedThisErrorBehavior)0>(JSC::JSGlobalObject&, JSC::CallFrame&, char const*) + 700 (JSDOMOperation.h:55) 11 com.apple.WebCore 0x00000001267518f4 WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2D(JSC::JSGlobalObject*, JSC::CallFrame*) + 36 (JSWebGLRenderingContext.cpp:5124) 12 ??? 0x000054c3eb0011d8 0 + 93200438006232 13 com.apple.JavaScriptCore 0x000000014262599d llint_entry + 138395 (LowLevelInterpreter.asm:1093) 14 com.apple.JavaScriptCore 0x0000000142625a45 llint_entry + 138563 (LowLevelInterpreter.asm:1093) 15 com.apple.JavaScriptCore 0x0000000142603a10 vmEntryToJavaScript + 289 (LowLevelInterpreter64.asm:316) 16 com.apple.JavaScriptCore 0x00000001434c6e3b JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 235 (JITCodeInlines.h:42) 17 com.apple.JavaScriptCore 0x00000001434c6398 JSC::Interpreter::executeProgram(JSC::SourceCode const&, JSC::JSGlobalObject*, JSC::JSObject*) + 6600 (Interpreter.cpp:839) 18 com.apple.JavaScriptCore 0x00000001438a4b17 JSC::evaluate(JSC::JSGlobalObject*, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 567 (Completion.cpp:137) 19 com.apple.JavaScriptCore 0x00000001438a4c6a JSC::profiledEvaluate(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 74 (Completion.cpp:152) 20 com.apple.WebCore 0x00000001278efebc WebCore::JSExecState::profiledEvaluate(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 76 (JSExecState.h:79) 21 com.apple.WebCore 0x00000001278efa9e WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld&) + 398 (ScriptController.cpp:148) 22 com.apple.WebCore 0x00000001278ef8c9 WebCore::ScriptController::evaluateInWorldIgnoringException(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld&) + 41 (ScriptController.cpp:121) 23 com.apple.WebCore 0x00000001278f01c5 WebCore::ScriptController::evaluateIgnoringException(WebCore::ScriptSourceCode const&) + 53 (ScriptController.cpp:167) 24 com.apple.WebCore 0x000000012804cb76 WebCore::ScriptElement::executeClassicScript(WebCore::ScriptSourceCode const&) + 1478 (ScriptElement.cpp:405) 25 com.apple.WebCore 0x000000012804ab8b WebCore::ScriptElement::prepareScript(WTF::TextPosition const&, WebCore::ScriptElement::LegacyTypeSupport) + 2699 (ScriptElement.cpp:271) 26 com.apple.WebCore 0x00000001285dfc76 WebCore::HTMLScriptRunner::runScript(WebCore::ScriptElement&, WTF::TextPosition const&) + 390 (HTMLScriptRunner.cpp:250) 27 com.apple.WebCore 0x00000001285dfa77 WebCore::HTMLScriptRunner::execute(WTF::Ref<WebCore::ScriptElement, WTF::RawPtrTraits<WebCore::ScriptElement> >&&, WTF::TextPosition const&) + 71 (HTMLScriptRunner.cpp:140) 28 com.apple.WebCore 0x00000001285be181 WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder() + 897 (HTMLDocumentParser.cpp:244) 29 com.apple.WebCore 0x00000001285be605 WebCore::HTMLDocumentParser::pumpTokenizerLoop(WebCore::HTMLDocumentParser::SynchronousMode, bool, WebCore::PumpSession&) + 133 (HTMLDocumentParser.cpp:263) 30 com.apple.WebCore 0x00000001285bd97f WebCore::HTMLDocumentParser::pumpTokenizer(WebCore::HTMLDocumentParser::SynchronousMode) + 495 (HTMLDocumentParser.cpp:322) 31 com.apple.WebCore 0x00000001285bd116 WebCore::HTMLDocumentParser::pumpTokenizerIfPossible(WebCore::HTMLDocumentParser::SynchronousMode) + 198 (HTMLDocumentParser.cpp:196) 32 com.apple.WebCore 0x00000001285bf3b4 WebCore::HTMLDocumentParser::append(WTF::RefPtr<WTF::StringImpl, WTF::RawPtrTraits<WTF::StringImpl>, WTF::DefaultRefDerefTraits<WTF::StringImpl> >&&) + 548 (HTMLDocumentParser.cpp:437) 33 com.apple.WebCore 0x0000000127e4e9e6 WebCore::DecodedDataDocumentParser::appendBytes(WebCore::DocumentWriter&, char const*, unsigned long) + 150 (DecodedDataDocumentParser.cpp:50) 34 com.apple.WebCore 0x0000000128a0b14d WebCore::DocumentWriter::addData(char const*, unsigned long) + 365 (DocumentWriter.cpp:263) 35 com.apple.WebCore 0x00000001289bd7ae WebCore::DocumentLoader::commitData(char const*, unsigned long) + 2414 (DocumentLoader.cpp:1235) 36 com.apple.WebKit 0x000000011750a0c2 WebKit::WebFrameLoaderClient::committedLoad(WebCore::DocumentLoader*, char const*, int) + 82 (WebFrameLoaderClient.cpp:1147) 37 com.apple.WebCore 0x00000001289c3ca1 WebCore::DocumentLoader::commitLoad(char const*, int) + 209 (DocumentLoader.cpp:1117) 38 com.apple.WebCore 0x00000001289c3bc8 WebCore::DocumentLoader::dataReceived(char const*, int) + 568 (DocumentLoader.cpp:1268) 39 com.apple.WebCore 0x00000001289c4578 WebCore::DocumentLoader::dataReceived(WebCore::CachedResource&, char const*, int) + 152 (DocumentLoader.cpp:1241) 40 com.apple.WebCore 0x0000000128b3e59e WebCore::CachedRawResource::notifyClientsDataWasReceived(char const*, unsigned int) + 142 (CachedRawResource.cpp:139) 41 com.apple.WebCore 0x0000000128b3e3a5 WebCore::CachedRawResource::updateBuffer(WebCore::SharedBuffer&) + 357 (CachedRawResource.cpp:76) 42 com.apple.WebCore 0x0000000128ac86ff WebCore::SubresourceLoader::didReceiveDataOrBuffer(char const*, int, WTF::RefPtr<WebCore::SharedBuffer, WTF::RawPtrTraits<WebCore::SharedBuffer>, WTF::DefaultRefDerefTraits<WebCore::SharedBuffer> >&&, long long, WebCore::DataPayloadType) + 671 (SubresourceLoader.cpp:537) 43 com.apple.WebCore 0x0000000128ac8451 WebCore::SubresourceLoader::didReceiveData(char const*, unsigned int, long long, WebCore::DataPayloadType) + 97 (SubresourceLoader.cpp:505) 44 com.apple.WebKit 0x000000011740f2ba WebKit::WebResourceLoader::didReceiveData(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long) + 1018 (WebResourceLoader.cpp:210) 45 com.apple.WebKit 0x0000000117a0ad09 void IPC::callMemberFunctionImpl<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long), std::__1::tuple<IPC::ArrayReference<unsigned char, 18446744073709551615ul>, long long>, 0ul, 1ul>(WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long), std::__1::tuple<IPC::ArrayReference<unsigned char, 18446744073709551615ul>, long long>&&, std::__1::integer_sequence<unsigned long, 0ul, 1ul>) + 185 (HandleMessage.h:43) 46 com.apple.WebKit 0x0000000117a0ac40 void IPC::callMemberFunction<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long), std::__1::tuple<IPC::ArrayReference<unsigned char, 18446744073709551615ul>, long long>, std::__1::integer_sequence<unsigned long, 0ul, 1ul> >(std::__1::tuple<IPC::ArrayReference<unsigned char, 18446744073709551615ul>, long long>&&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long)) + 112 (HandleMessage.h:49) 47 com.apple.WebKit 0x0000000117a08a66 void IPC::handleMessage<Messages::WebResourceLoader::DidReceiveData, WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long)>(IPC::Decoder&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long)) + 150 (HandleMessage.h:121) 48 com.apple.WebKit 0x0000000117a08442 WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::Decoder&) + 402 (WebResourceLoaderMessageReceiver.cpp:54) 49 com.apple.WebKit 0x00000001173d0930 WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 144 (NetworkProcessConnection.cpp:94) 50 com.apple.WebKit 0x0000000115716024 IPC::Connection::dispatchMessage(IPC::Decoder&) + 516 (Connection.cpp:1020) 51 com.apple.WebKit 0x00000001157167ec IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 636 (Connection.cpp:1065) 52 com.apple.WebKit 0x0000000115716e10 IPC::Connection::dispatchOneIncomingMessage() + 208 (Connection.cpp:1134) 53 com.apple.WebKit 0x0000000115735368 IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_9::operator()() + 88 (Connection.cpp:989) 54 com.apple.WebKit 0x000000011573525e WTF::Detail::CallableWrapper<IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_9, void>::call() + 30 (Function.h:52) 55 com.apple.JavaScriptCore 0x000000014205cc62 WTF::Function<void ()>::operator()() const + 130 (Function.h:83) 56 com.apple.JavaScriptCore 0x00000001420d4de5 WTF::RunLoop::performWork() + 341 (RunLoop.cpp:133) 57 com.apple.JavaScriptCore 0x00000001420d8761 WTF::RunLoop::performWork(void*) + 33 (RunLoopCF.cpp:46) 58 com.apple.CoreFoundation 0x00007fff2045be2c __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17 59 com.apple.CoreFoundation 0x00007fff2045bd94 __CFRunLoopDoSource0 + 180 60 com.apple.CoreFoundation 0x00007fff2045bb14 __CFRunLoopDoSources0 + 242 61 com.apple.CoreFoundation 0x00007fff2045a53c __CFRunLoopRun + 893 62 com.apple.CoreFoundation 0x00007fff20459afc CFRunLoopRunSpecific + 563 63 com.apple.Foundation 0x00007fff211e3bb7 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 212 64 com.apple.Foundation 0x00007fff21271a81 -[NSRunLoop(NSRunLoop) run] + 76 65 libxpc.dylib 0x00007fff200b138d _xpc_objc_main + 825 66 libxpc.dylib 0x00007fff200b0cd3 xpc_main + 116 67 com.apple.WebKit 0x00000001163f48e1 WebKit::XPCServiceMain(int, char const**) + 1025 (XPCServiceMain.mm:209) 68 com.apple.WebKit 0x0000000117a96c6b WKXPCServiceMain + 27 (WKMain.mm:33) 69 com.apple.WebKit.WebContent 0x0000000108c11ea2 main + 34 (AuxiliaryProcessMain.cpp:30) 70 libdyld.dylib 0x00007fff2037df3d start + 1
Kimmo Kinnunen
Comment 3 2021-03-30 05:21:01 PDT
The switch is asserting with at least RGBA 0x1908 case. So perhaps the validation is missing this
Radar WebKit Bug Importer
Comment 4 2021-04-06 04:34:38 PDT
<rdar://problem/76261913>
Kimmo Kinnunen
Comment 5 2021-06-29 03:29:13 PDT
*** Bug 223329 has been marked as a duplicate of this bug. ***
Kimmo Kinnunen
Comment 6 2021-06-29 03:35:40 PDT
Created attachment 432467 [details] Patch
Kimmo Kinnunen
Comment 7 2021-06-29 03:37:51 PDT
Created attachment 432468 [details] Patch
Kenneth Russell
Comment 8 2021-06-30 11:07:58 PDT
Comment on attachment 432468 [details] Patch Looks good! r+
EWS
Comment 9 2021-08-03 01:35:12 PDT
Committed r280587 (240209@main): <https://commits.webkit.org/240209@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 432468 [details].
Note You need to log in before you can comment on or make changes to this bug.