Bug 286859 – [WPE] REGRESSION(289282@main) webrtc/captureCanvas-webrtc-with-video-scaling-adaptation.html is a constant crash

• Component: WPE WebKit
• Status: RESOLVED DUPLICATE

[Claudio Saavedra]

Prior to 289282@main the test was a constant failure, but starting on that change the test started crashing in WPE consistently.

This is a sample crash log I got from just running it a few times today:

#0  0x00007f68405068a8 in GrResourceCache::notifyARefCntReachedZero(GrGpuResource*, GrIORef<GrGpuResource>::LastRemovedRef) [clone .cold] () from /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
[Current thread is 1 (Thread 0x7f682df81900 (LWP 49))]
(gdb) back
#0  0x00007f68405068a8 in GrResourceCache::notifyARefCntReachedZero(GrGpuResource*, GrIORef<GrGpuResource>::LastRemovedRef) [clone .cold] () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#1  0x00007f684050f137 in GrTextureProxy::~GrTextureProxy() () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#2  0x00007f684050fa41 in virtual thunk to GrTextureRenderTargetProxy::~GrTextureRenderTargetProxy() () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#3  0x00007f6840527c3d in skgpu::ganesh::SurfaceFillContext::~SurfaceFillContext() () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#4  0x00007f684052073c in skgpu::ganesh::SurfaceContext::readPixels(GrDirectContext*, GrPixmap, SkIPoint) () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#5  0x00007f68404b5e8b in skgpu::ganesh::Device::onReadPixels(SkPixmap const&, int, int) () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#6  0x00007f683f8c1df2 in WebCore::ImageBufferSkiaAcceleratedBackend::getPixelBuffer(WebCore::IntRect const&, WebCore::PixelBuffer&) () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#7  0x00007f683f734001 in WebCore::ImageBuffer::getPixelBuffer(WebCore::PixelBufferFormat const&, WebCore::IntRect const&, WebCore::ImageBufferAllocator const&) const ()
    at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#8  0x00007f683ed51b94 in WebCore::HTMLCanvasElement::toVideoFrame() () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#9  0x00007f683df13d35 in WebCore::CanvasCaptureMediaStreamTrack::Source::captureCanvas() () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#10 0x00007f683df0a5b2 in WTF::Detail::CallableWrapper<WebCore::Timer::Timer<WebCore::CanvasCaptureMediaStreamTrack::Source, WebCore::CanvasCaptureMediaStreamTrack::Source>(WebCore::CanvasCaptureMediaStreamTrack::Source&, void (WebCore::CanvasCaptureMediaStreamTrack::Source::*)())::{lambda()#1}, void>::call() () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#11 0x00007f683f615feb in WebCore::ThreadTimers::sharedTimerFiredInternal() () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#12 0x00007f683c6a9a25 in WTF::RunLoop::TimerBase::TimerBase(WTF::Ref<WTF::RunLoop, WTF::RawPtrTraits<WTF::RunLoop>, WTF::DefaultRefDerefTraits<WTF::RunLoop> >&&)::{lambda(void*)#1}::_FUN(void*) ()
    at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#13 0x00007f683c6aa47f in WTF::RunLoop::{lambda(_GSource*, int (*)(void*), void*)#1}::_FUN(_GSource*, int (*)(void*), void*) () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#14 0x00007f6834c8dd36 in g_main_dispatch (context=0x55b0dd4ccc20) at ../glib/gmain.c:3460
#15 g_main_context_dispatch (context=0x55b0dd4ccc20) at ../glib/gmain.c:4200
#16 0x00007f6834ceb2b8 in g_main_context_iterate.isra.0 (context=0x55b0dd4ccc20, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4276
#17 0x00007f6834c8d3ff in g_main_loop_run (loop=0x55b0dd4ccd60) at ../glib/gmain.c:4479
#18 0x00007f683c6aa5b0 in WTF::RunLoop::run() () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#19 0x00007f683a7aea3f in int WebKit::AuxiliaryProcessMain<WebKit::WebProcessMainWPE>(int, char**) () at /app/webkit/WebKitBuild/WPE/Release/lib/libWPEWebKit-2.0.so.2
#20 0x00007f683443b08a in __libc_start_call_main (main=main@entry=0x55b0ae2538d0 <main>, argc=argc@entry=5, argv=argv@entry=0x7ffc5bafc108) at ../sysdeps/nptl/libc_start_call_main.h:58
#21 0x00007f683443b14b in __libc_start_main_impl (main=0x55b0ae2538d0 <main>, argc=5, argv=0x7ffc5bafc108, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffc5bafc0f8)
    at ../csu/libc-start.c:360
#22 0x000055b0ae253805 in _start () at ../sysdeps/x86_64/start.S:115

[Claudio Saavedra]

Gardened in https://commits.webkit.org/289668@main

[Claudio Saavedra]

http/wpt/mediarecorder/MediaRecorder-webm-AV-audio-video-dataavailable.html is also crashing with the same stacktrace (in Release only from what I can see).

[Claudio Saavedra]

This started failing with text failure around 303624@main. The crash still happens occasionally, so updating the expectation to this below:

# This also crashes with that skia issue, but since 303624@main it started having a text failure:
webkit.org/b/286859 webrtc/captureCanvas-webrtc-with-video-scaling-adaptation.html [ Text Crash Pass ]

[Lauro Moura]

webrtc/video-vp8-videorange.html was assigned to this bug, but it's not crashing anymore since late December 2025. I've created bug305356 to track its current text failure.

[Philippe Normand]

*** This bug has been marked as a duplicate of bug 305356 ***