Bug 237295

Summary:

[ iOS GPUP ] fast/mediastream/video-rotation-gpu-process-crash.html is a flaky crash

Product:

WebKit

Reporter:

Dawn Morningstar <Morningstar>

Component:

New Bugs

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED DUPLICATE

Severity:

Normal

CC:

jenner, jer.noble, jonlee, kkinnunen, sabouhallawa, simon.fraser, webkit-bot-watchers-bugzilla, webkit-bug-importer, youennf

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

See Also:

https://bugs.webkit.org/show_bug.cgi?id=237164

Attachments:

Description	Flags
expectations	ews-feeder: commit-queue-

Dawn Morningstar

Reported 2022-02-28 17:22:02 PST

fast/mediastream/video-rotation-gpu-process-crash.html

Attachments
expectations (1.49 KB, patch) 2022-02-28 18:28 PST, Dawn Morningstar	ews-feeder: commit-queue-	Details Formatted Diff Diff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.

Dawn Morningstar

Comment 1 2022-02-28 17:23:13 PST

fast/mediastream/video-rotation-gpu-process-crash.html is a flaky crash on iOS gpuprocess specifically. Appears to be similar to https://bugs.webkit.org/show_bug.cgi?id=237164.

Dawn Morningstar

Comment 2 2022-02-28 17:28:47 PST

HISTORY: https://results.webkit.org/?suite=layout-tests&test=fast%2Fmediastream%2Fvideo-rotation-gpu-process-crash.html CRASH-LOG: https://build.webkit.org/results/Apple-iOS-15-Simulator-Release-GPUProcess-arm64-WK2-Tests/r290597%20(1151)/fast/mediastream/video-rotation-gpu-process-crash-crash-log.txt System Integrity Protection: enabled Crashed Thread: 0 Dispatch queue: com.apple.main-thread Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000018 Exception Note: EXC_CORPSE_NOTIFY Termination Signal: Segmentation fault: 11 Termination Reason: Namespace SIGNAL, Code 0xb Terminating Process: exc handler [97072]

Radar WebKit Bug Importer

Comment 3 2022-02-28 17:29:23 PST

<rdar://problem/89591901>

Dawn Morningstar

Comment 4 2022-02-28 18:28:05 PST

Created attachment 453460 [details] expectations

Robert Jenner

Comment 5 2022-02-28 18:38:26 PST

Comment on attachment 453460 [details] expectations Clearing flags on attachment: 453460 Committed r290624 (?): <https://commits.webkit.org/r290624>

Dawn Morningstar

Comment 6 2022-02-28 18:47:45 PST

(In reply to Matteo Flores from comment #2) > HISTORY: > https://results.webkit.org/?suite=layout- > tests&test=fast%2Fmediastream%2Fvideo-rotation-gpu-process-crash.html > > CRASH-LOG: > https://build.webkit.org/results/Apple-iOS-15-Simulator-Release-GPUProcess- > arm64-WK2-Tests/r290597%20(1151)/fast/mediastream/video-rotation-gpu-process- > crash-crash-log.txt > > System Integrity Protection: enabled > > Crashed Thread: 0 Dispatch queue: com.apple.main-thread > > Exception Type: EXC_BAD_ACCESS (SIGSEGV) > Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000018 > Exception Note: EXC_CORPSE_NOTIFY > > Termination Signal: Segmentation fault: 11 > Termination Reason: Namespace SIGNAL, Code 0xb > Terminating Process: exc handler [97072] CRASH-LOG TEXT: Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebKit 0x000000010df9aec0 has_value + 0 (optional:295) [inlined] 1 com.apple.WebKit 0x000000010df9aec0 operator bool + 0 (optional:938) [inlined] 2 com.apple.WebKit 0x000000010df9aec0 colorSpace + 0 (ShareableBitmapCG.cpp:60) [inlined] 3 com.apple.WebKit 0x000000010df9aec0 WebKit::wantsExtendedRange(WebKit::ShareableBitmap::Configuration const&) + 8 (ShareableBitmapCG.cpp:65) 4 com.apple.WebKit 0x000000010df9af10 calculateBytesPerPixel + 8 (ShareableBitmapCG.cpp:105) [inlined] 5 com.apple.WebKit 0x000000010df9af10 WebKit::ShareableBitmap::createGraphicsContext() + 52 (ShareableBitmapCG.cpp:110) 6 com.apple.WebKit 0x000000010df9b094 WebKit::ShareableBitmap::makeCGImageCopy() + 28 (ShareableBitmapCG.cpp:167) 7 com.apple.WebKit 0x000000010dce18d4 operator() + 28 (RemoteLayerBackingStore.mm:483) [inlined] 8 com.apple.WebKit 0x000000010dce18d4 __invoke_constexpr<WTF::Visitor<(lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)>, WebKit::ShareableBitmap::Handle &> + 28 (type_traits:3700) [inlined] 9 com.apple.WebKit 0x000000010dce18d4 operator()<std::__variant_detail::__alt<0, WebKit::ShareableBitmap::Handle> &> + 32 (variant:615) [inlined] 10 com.apple.WebKit 0x000000010dce18d4 __invoke_constexpr<std::__variant_detail::__visitation::__variant::__value_visitor<WTF::Visitor<(lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)> >, std::__variant_detail::__alt<0, WebKit::ShareableBitmap::Handle> &> + 32 (type_traits:3700) [inlined] 11 com.apple.WebKit 0x000000010dce18d4 decltype(auto) std::__1::__variant_detail::__visitation::__base::__dispatcher<0ul>::__dispatch<std::__1::__variant_detail::__visitation::__variant::__value_visitor<WTF::Visitor<WebKit::RemoteLayerBackingStore::applyBackingStoreToLayer(CALayer*, WebKit::RemoteLayerBackingStore::LayerContentsType, bool)::$_1, WebKit::RemoteLayerBackingStore::applyBackingStoreToLayer(CALayer*, WebKit::RemoteLayerBackingStore::LayerContentsType, bool)::$_2> >&&, std::__1::__variant_detail::__base<(std::__1::__variant_detail::_Trait)1, WebKit::ShareableBitmap::Handle, WTF::MachSendRight>&>(std::__1::__variant_detail::__visitation::__variant::__value_visitor<WTF::Visitor<WebKit::RemoteLayerBackingStore::applyBackingStoreToLayer(CALayer*, WebKit::RemoteLayerBackingStore::LayerContentsType, bool)::$_1, WebKit::RemoteLayerBackingStore::applyBackingStoreToLayer(CALayer*, WebKit::RemoteLayerBackingStore::LayerContentsType, bool)::$_2> >&&, std::__1::__variant_detail::__base<(std::__1::__variant_detail::_Trait)1, WebKit::ShareableBitmap::Handle, WTF::MachSendRight>&) + 48 (variant:497) 12 com.apple.WebKit 0x000000010dcdf60c __visit_alt<std::__variant_detail::__visitation::__variant::__value_visitor<WTF::Visitor<(lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)> >, std::__variant_detail::__impl<WebKit::ShareableBitmap::Handle, WTF::MachSendRight> &> + 20 (variant:460) [inlined] 13 com.apple.WebKit 0x000000010dcdf60c __visit_alt<std::__variant_detail::__visitation::__variant::__value_visitor<WTF::Visitor<(lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)> >, std::variant<WebKit::ShareableBitmap::Handle, WTF::MachSendRight> &> + 20 (variant:567) [inlined] 14 com.apple.WebKit 0x000000010dcdf60c __visit_value<WTF::Visitor<(lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)>, std::variant<WebKit::ShareableBitmap::Handle, WTF::MachSendRight> &> + 24 (variant:585) [inlined] 15 com.apple.WebKit 0x000000010dcdf60c visit<WTF::Visitor<(lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)>, std::variant<WebKit::ShareableBitmap::Handle, WTF::MachSendRight> &> + 24 (variant:1654) [inlined] 16 com.apple.WebKit 0x000000010dcdf60c switchOn<std::variant<WebKit::ShareableBitmap::Handle, WTF::MachSendRight> &, (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)> + 24 (StdLibExtras.h:392) [inlined] 17 com.apple.WebKit 0x000000010dcdf60c WebKit::RemoteLayerBackingStore::applyBackingStoreToLayer(CALayer*, WebKit::RemoteLayerBackingStore::LayerContentsType, bool) + 112 (RemoteLayerBackingStore.mm:480) 18 com.apple.WebKit 0x000000010dcec0cc WebKit::RemoteLayerTreePropertyApplier::applyPropertiesToLayer(CALayer*, WebKit::RemoteLayerTreeHost*, WebKit::RemoteLayerTreeTransaction::LayerProperties const&, WebKit::RemoteLayerBackingStore::LayerContentsType) + 1556 (RemoteLayerTreePropertyApplier.mm:258) 19 com.apple.WebKit 0x000000010dcec20c WebKit::RemoteLayerTreePropertyApplier::applyProperties(WebKit::RemoteLayerTreeNode&, WebKit::RemoteLayerTreeHost*, WebKit::RemoteLayerTreeTransaction::LayerProperties const&, WTF::HashMap<unsigned long long, std::__1::unique_ptr<WebKit::RemoteLayerTreeNode, std::__1::default_delete<WebKit::RemoteLayerTreeNode> >, WTF::DefaultHash<unsigned long long>, WTF::HashTraits<unsigned long long>, WTF::HashTraits<std::__1::unique_ptr<WebKit::RemoteLayerTreeNode, std::__1::default_delete<WebKit::RemoteLayerTreeNode> > >, WTF::HashTableTraits> const&, WebKit::RemoteLayerBackingStore::LayerContentsType) + 40 (RemoteLayerTreePropertyApplier.mm:300) 20 com.apple.WebKit 0x000000010def5b08 WebKit::RemoteLayerTreeHost::updateLayerTree(WebKit::RemoteLayerTreeTransaction const&, float) + 936 (RemoteLayerTreeHost.mm:151) 21 com.apple.WebKit 0x000000010def5520 WebKit::RemoteLayerTreeDrawingAreaProxy::commitLayerTree(WebKit::RemoteLayerTreeTransaction const&, WebKit::RemoteScrollingCoordinatorTransaction const&) + 104 (RemoteLayerTreeDrawingAreaProxy.mm:232) 22 com.apple.WebKit 0x000000010dbf4fd4 callMemberFunctionImpl<WebKit::RemoteLayerTreeDrawingAreaProxy, void (WebKit::RemoteLayerTreeDrawingAreaProxy::*)(const WebKit::RemoteLayerTreeTransaction &, const WebKit::RemoteScrollingCoordinatorTransaction &), std::tuple<WebKit::RemoteLayerTreeTransaction, WebKit::RemoteScrollingCoordinatorTransaction>, 0, 1> + 16 (HandleMessage.h:125) [inlined] 23 com.apple.WebKit 0x000000010dbf4fd4 callMemberFunction<WebKit::RemoteLayerTreeDrawingAreaProxy, void (WebKit::RemoteLayerTreeDrawingAreaProxy::*)(const WebKit::RemoteLayerTreeTransaction &, const WebKit::RemoteScrollingCoordinatorTransaction &), std::tuple<WebKit::RemoteLayerTreeTransaction, WebKit::RemoteScrollingCoordinatorTransaction>, std::integer_sequence<unsigned long, 0, 1> > + 16 (HandleMessage.h:131) [inlined] 24 com.apple.WebKit 0x000000010dbf4fd4 handleMessage<Messages::RemoteLayerTreeDrawingAreaProxy::CommitLayerTree, WebKit::RemoteLayerTreeDrawingAreaProxy, void (WebKit::RemoteLayerTreeDrawingAreaProxy::*)(const WebKit::RemoteLayerTreeTransaction &, const WebKit::RemoteScrollingCoordinatorTransaction &)> + 36 (HandleMessage.h:196) [inlined] 25 com.apple.WebKit 0x000000010dbf4fd4 WebKit::RemoteLayerTreeDrawingAreaProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 260 (RemoteLayerTreeDrawingAreaProxyMessageReceiver.cpp:48) 26 com.apple.WebKit 0x000000010de92f7c IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::Decoder&) + 252 (MessageReceiverMap.cpp:129) 27 com.apple.WebKit 0x000000010e065084 WebKit::WebProcessProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 32 (WebProcessProxy.cpp:856) 28 com.apple.WebKit 0x000000010de8c330 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 308 (Connection.cpp:1137) 29 com.apple.WebKit 0x000000010de8ba20 IPC::Connection::dispatchIncomingMessages() + 356 (Connection.cpp:1241) 30 com.apple.JavaScriptCore 0x000000010765ec84 operator() + 16 (Function.h:82) [inlined] 31 com.apple.JavaScriptCore 0x000000010765ec84 WTF::RunLoop::performWork() + 168 (RunLoop.cpp:133) 32 com.apple.JavaScriptCore 0x000000010765f658 WTF::RunLoop::performWork(void*) + 36 (RunLoopCF.cpp:46) 33 com.apple.CoreFoundation 0x0000000106cb1220 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 24 34 com.apple.CoreFoundation 0x0000000106cb1128 __CFRunLoopDoSource0 + 200 35 com.apple.CoreFoundation 0x0000000106cb04b4 __CFRunLoopDoSources0 + 256 36 com.apple.CoreFoundation 0x0000000106caaafc __CFRunLoopRun + 744 37 com.apple.CoreFoundation 0x0000000106caa308 CFRunLoopRunSpecific + 572 38 com.apple.Foundation 0x00000001056aea68 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 232 39 org.webkit.WebKitTestRunnerApp 0x0000000102dc9d60 WTR::TestController::platformRunUntil(bool&, WTF::Seconds) + 200 40 org.webkit.WebKitTestRunnerApp 0x0000000102dd28ac WTR::TestInvocation::invoke() + 324 41 org.webkit.WebKitTestRunnerApp 0x0000000102db9ef0 WTR::TestController::runTest(char const*) + 312 42 org.webkit.WebKitTestRunnerApp 0x0000000102dba194 WTR::TestController::runTestingServerLoop() + 124 43 org.webkit.WebKitTestRunnerApp 0x0000000102db5588 WTR::TestController::TestController(int, char const**) + 340 44 org.webkit.WebKitTestRunnerApp 0x0000000102da3e84 -[WebKitTestRunnerApp _runTestController] + 40 45 com.apple.Foundation 0x00000001056d88b4 __NSThreadPerformPerform + 184 46 com.apple.CoreFoundation 0x0000000106cb1220 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 24 47 com.apple.CoreFoundation 0x0000000106cb1128 __CFRunLoopDoSource0 + 200 48 com.apple.CoreFoundation 0x0000000106cb0518 __CFRunLoopDoSources0 + 356 49 com.apple.CoreFoundation 0x0000000106caaafc __CFRunLoopRun + 744 50 com.apple.CoreFoundation 0x0000000106caa308 CFRunLoopRunSpecific + 572 51 com.apple.GraphicsServices 0x00000001030a35ec GSEventRunModal + 160 52 com.apple.UIKitCore 0x0000000115e3c4e0 -[UIApplication _run] + 992 53 com.apple.UIKitCore 0x0000000115e40fc0 UIApplicationMain + 112 54 org.webkit.WebKitTestRunnerApp 0x0000000102da3f90 main + 80 55 dyld_sim 0x0000000102ebdc04 start_sim + 20 56 ??? 0x0000000000000001 0 + 1

youenn fablet

Comment 7 2022-03-01 02:23:56 PST

We currently have ASSERT(m_bufferHandle) in RemoteLayerBackingStore::applyBackingStoreToLayer. Maybe there are some error cases where m_bufferHandle is null that GPUProcess crash is triggering in this test.

Said Abou-Hallawa

Comment 8 2022-04-15 18:22:05 PDT

The flakiness has been fixed since r292289 was landed. *** This bug has been marked as a duplicate of bug 238618 ***

Note You need to log in before you can comment on or make changes to this bug.