Bug 244913

Summary:	New Test(254216@main): [ iOS Debug x86_64 wk2 ] fast/mediastream/getDisplayMedia-displaySurface.html is a constant crash
Product:	WebKit	Reporter:	Hercules Hjalmarsson <hhjalmarsson>
Component:	New Bugs	Assignee:	youenn fablet <youennf>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	webkit-bot-watchers-bugzilla, webkit-bug-importer, youennf
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Hercules Hjalmarsson

Reported 2022-09-07 16:14:12 PDT

fast/mediastream/getDisplayMedia-displaySurface.html Is a constant crash on iOS Debug ToT and since introduced at 254216@main. HISTORY: https://results.webkit.org/?suite=layout-tests&test=fast/mediastream/getDisplayMedia-displaySurface.html DIFF: Modules/mediastream/MediaStreamTrack.cpp(299) : WebCore::DoubleRange WebCore::capabilityDoubleRange(const WebCore::CapabilityValueOrRange &) 1 0x7a6e31a89 WTFCrash 2 0x7d0be1aeb WTFCrashWithInfo(int, char const*, char const*, int) 3 0x7d3563f9b WebCore::capabilityDoubleRange(WebCore::CapabilityValueOrRange const&) 4 0x7d3563899 WebCore::MediaStreamTrack::getCapabilities() const 5 0x7d207754d WebCore::jsMediaStreamTrackPrototypeFunction_getCapabilitiesBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSMediaStreamTrack*) 6 0x7d207744e long long WebCore::IDLOperation<WebCore::JSMediaStreamTrack>::call<&(WebCore::jsMediaStreamTrackPrototypeFunction_getCapabilitiesBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSMediaStreamTrack*)), (WebCore::CastedThisErrorBehavior)0>(JSC::JSGlobalObject&, JSC::CallFrame&, char const*) 7 0x7d20766f4 WebCore::jsMediaStreamTrackPrototypeFunction_getCapabilities(JSC::JSGlobalObject*, JSC::CallFrame*) 8 0x51a7c800c038 (null) 9 0x7a753bd4e llint_entry 10 0x7a753bd4e llint_entry 11 0x7a753bd4e llint_entry 12 0x7a753bd4e llint_entry 13 0x7a75177c0 vmEntryToJavaScript 14 0x7a859bc92 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) 15 0x7a859c472 JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) 16 0x7a89a3a29 JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) 17 0x7a89a3ce5 JSC::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) 18 0x7a8c6c3de JSC::runJSMicrotask(JSC::JSGlobalObject*, WTF::ObjectIdentifier<JSC::MicrotaskIdentifierType>, JSC::JSValue, JSC::JSValue, JSC::JSValue, JSC::JSValue, JSC::JSValue) 19 0x7a8c6c50f JSC::JSMicrotask::run(JSC::JSGlobalObject*) 20 0x7d3beffbb WebCore::JSExecState::runTask(JSC::JSGlobalObject*, JSC::Microtask&) 21 0x7d3befeee WebCore::JSMicrotaskCallback::call() 22 0x7d3befd3b WebCore::JSDOMWindowBase::queueMicrotaskToEventLoop(JSC::JSGlobalObject&, WTF::Ref<JSC::Microtask, WTF::RawPtrTraits<JSC::Microtask> >&&)::$_41::operator()() 23 0x7d3befc59 WTF::Detail::CallableWrapper<WebCore::JSDOMWindowBase::queueMicrotaskToEventLoop(JSC::JSGlobalObject&, WTF::Ref<JSC::Microtask, WTF::RawPtrTraits<JSC::Microtask> >&&)::$_41, void>::call() 24 0x7d0c02842 WTF::Function<void ()>::operator()() const 25 0x7d44bfed9 WebCore::EventLoopFunctionDispatchTask::execute() 26 0x7d4518b91 WebCore::MicrotaskQueue::performMicrotaskCheckpoint() 27 0x7d44b0fb9 WebCore::EventLoop::run() 28 0x7d4644d26 WebCore::WindowEventLoop::didReachTimeToRun() 29 0x7d4648aa9 decltype(*(static_cast<WebCore::WindowEventLoop*&>(fp0)).*fp()) std::__1::__invoke<void (WebCore::WindowEventLoop::*&)(), WebCore::WindowEventLoop*&, void>(void (WebCore::WindowEventLoop::*&)(), WebCore::WindowEventLoop*&) 30 0x7d4648a2d std::__1::__bind_return<void (WebCore::WindowEventLoop::*)(), std::__1::tuple<WebCore::WindowEventLoop*>, std::__1::tuple<>, __is_valid_bind_return<void (WebCore::WindowEventLoop::*)(), std::__1::tuple<WebCore::WindowEventLoop*>, std::__1::tuple<> >::value>::type std::__1::__apply_functor<void (WebCore::WindowEventLoop::*)(), std::__1::tuple<WebCore::WindowEventLoop*>, 0ul, std::__1::tuple<> >(void (WebCore::WindowEventLoop::*&)(), std::__1::tuple<WebCore::WindowEventLoop*>&, std::__1::__tuple_indices<0ul>, std::__1::tuple<>&&) 31 0x7d46489e0 std::__1::__bind_return<void (WebCore::WindowEventLoop::*)(), std::__1::tuple<WebCore::WindowEventLoop*>, std::__1::tuple<>, __is_valid_bind_return<void (WebCore::WindowEventLoop::*)(), std::__1::tuple<WebCore::WindowEventLoop*>, std::__1::tuple<> >::value>::type std::__1::__bind<void (WebCore::WindowEventLoop::*&)(), WebCore::WindowEventLoop*>::operator()<>() com.apple.WebKit.WebContent.Development terminated (pid 21357) for reason: crash

Attachments
Add attachment proposed patch, testcase, etc.

Radar WebKit Bug Importer

Comment 1 2022-09-07 16:14:35 PDT

<rdar://problem/99670481>

Hercules Hjalmarsson

Comment 2 2022-09-07 16:19:19 PDT

This issue can be bisected to 254216@main using command: run-webkit-tests --debug --ios-simulator --iterations=2 fast/mediastream/getDisplayMedia-displaySurface.html

EWS

Comment 3 2022-09-07 16:36:34 PDT

Test gardening commit 254255@main (dfee4b8bb322): <https://commits.webkit.org/254255@main> Reviewed commits have been landed. Closing PR #4113 and removing active labels.

youenn fablet

Comment 4 2022-11-17 01:19:50 PST

getDisplayMedia is not supported in iOS so the test should be skipped there.

youenn fablet

Comment 5 2024-03-22 10:42:28 PDT

Pull request: https://github.com/WebKit/WebKit/pull/26327

EWS

Comment 6 2024-03-25 01:04:59 PDT

Committed 276619@main (a0b7f7faeffb): <https://commits.webkit.org/276619@main> Reviewed commits have been landed. Closing PR #26327 and removing active labels.

Note You need to log in before you can comment on or make changes to this bug.