[GTK] media/event-attributes.html is flaky

[Zan Dobersek]

The media/event-attributes.html layout test is flaky on GTK builders.
http://webkit-test-results.appspot.com/dashboards/flakiness_dashboard.html#tests=media%2Fevent-attributes.html

[Sergio Villar Senin]

Even crashes in Debug builds

STDERR: WebKitWebProcess: malloc.c:4094: malloc_consolidate: Assertion `p->bk_nextsize->fd_nextsize == p' failed.

[Fujii Hironori]

I see an assertion failure in trunk@233029 GTK port, debug build.

> STDERR: warning: core file may not match specified executable file.
> STDERR: failed to create drawable
> STDERR: ASSERTION FAILED: end.isValid()

Callstack:

> Thread 1 (Thread 0x7f0b1787af80 (LWP 4274)):
> #0  0x00007f0b021173da in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:267
> #1  0x00007f0b115bebab in WebCore::PlatformTimeRanges::add (this=0x55e71ced1de0, start=..., end=...) at ../../Source/WebCore/platform/graphics/PlatformTimeRanges.cpp:139
> #2  0x00007f0b11edb993 in WebCore::MediaPlayerPrivateGStreamer::buffered (this=0x7f0a8b078000) at ../../Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:1116
> #3  0x00007f0b115a6e5c in WebCore::MediaPlayer::buffered (this=0x7f0af0054a80) at ../../Source/WebCore/platform/graphics/MediaPlayer.cpp:818
> #4  0x00007f0b10e761c2 in WebCore::HTMLMediaElement::buffered (this=0x7f0a8a2007b0) at ../../Source/WebCore/html/HTMLMediaElement.cpp:5081
> #5  0x00007f0b0fbd3613 in WebCore::jsHTMLMediaElementBufferedGetter (state=..., thisObject=..., throwScope=...) at DerivedSources/WebCore/JSHTMLMediaElement.cpp:686
> #6  0x00007f0b0fbddc29 in WebCore::IDLAttribute<WebCore::JSHTMLMediaElement>::get<WebCore::jsHTMLMediaElementBufferedGetter, (WebCore::CastedThisErrorBehavior)3> (state=..., thisValue=139683433955456, attributeName=0x7f0b1367f731 "buffered") at ../../Source/WebCore/bindings/js/JSDOMAttribute.h:69
> #7  0x00007f0b0fbd368e in WebCore::jsHTMLMediaElementBuffered (state=0x7ffc06e52150, thisValue=139683433955456) at DerivedSources/WebCore/JSHTMLMediaElement.cpp:692
> #8  0x00007f0b01e9debb in JSC::PropertySlot::customGetter (this=0x7ffc06e51fe0, exec=0x7ffc06e52150, propertyName=...) at ../../Source/JavaScriptCore/runtime/PropertySlot.cpp:50
> #9  0x00007f0b0f3336f7 in JSC::PropertySlot::getValue (this=0x7ffc06e51fe0, exec=0x7ffc06e52150, propertyName=...) at DerivedSources/ForwardingHeaders/JavaScriptCore/PropertySlot.h:410
> #10 0x00007f0b014f7c51 in JSC::JSValue::get (this=0x7ffc06e51f40, exec=0x7ffc06e52150, propertyName=..., slot=...) at ../../Source/JavaScriptCore/runtime/JSCJSValueInlines.h:831
> #11 0x00007f0b01b6b5ac in JSC::LLInt::llint_slow_path_get_by_id (exec=0x7ffc06e52150, pc=0x7f0a95dfeb60) at ../../Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:712
> #12 0x00007f0b01b6155f in llint_entry () at DerivedSources/ForwardingHeaders/wtf/CagedPtr.h:50
> #13 0x00007f0b01b65a6e in llint_entry () at DerivedSources/ForwardingHeaders/wtf/CagedPtr.h:50
> #14 0x00007f0b01b65a6e in llint_entry () at DerivedSources/ForwardingHeaders/wtf/CagedPtr.h:50
> #15 0x00007f0b01b5e287 in vmEntryToJavaScript () at DerivedSources/ForwardingHeaders/wtf/CagedPtr.h:50
> #16 0x00007f0b01a97119 in JSC::JITCode::execute (this=0x7f0a8b005e60, vm=0x7f0a95b00000, protoCallFrame=0x7ffc06e52490) at ../../Source/JavaScriptCore/jit/JITCodeInlines.h:38
> #17 0x00007f0b01a8ea4d in JSC::Interpreter::executeCall (this=0x7f0af00ff7d8, callFrame=0x7f0a957e1fa8, function=0x7f0a89ef86f0, callType=<incomplete type>, callData=..., thisValue=..., args=...) at ../../Source/JavaScriptCore/interpreter/Interpreter.cpp:1023
> #18 0x00007f0b01cdb452 in JSC::call (exec=0x7f0a957e1fa8, functionObject=..., callType=<incomplete type>, callData=..., thisValue=..., args=...) at ../../Source/JavaScriptCore/runtime/CallData.cpp:41
> #19 0x00007f0b01cdb538 in JSC::call (exec=0x7f0a957e1fa8, functionObject=..., callType=<incomplete type>, callData=..., thisValue=..., args=..., returnedException=...) at ../../Source/JavaScriptCore/runtime/CallData.cpp:48
> #20 0x00007f0b01cdb72a in JSC::profiledCall (exec=0x7f0a957e1fa8, reason=JSC::ProfilingReason::Other, functionObject=..., callType=<incomplete type>, callData=..., thisValue=..., args=..., returnedException=...) at ../../Source/JavaScriptCore/runtime/CallData.cpp:67
> #21 0x00007f0b10758dcc in WebCore::JSMainThreadExecState::profiledCall (exec=0x7f0a957e1fa8, reason=JSC::ProfilingReason::Other, functionObject=..., callType=<incomplete type>, callData=..., thisValue=..., args=..., returnedException=...) at ../../Source/WebCore/bindings/js/JSMainThreadExecState.h:72
> #22 0x00007f0b10792e36 in WebCore::JSEventListener::handleEvent (this=0x7f0a8b07bfc0, scriptExecutionContext=..., event=...) at ../../Source/WebCore/bindings/js/JSEventListener.cpp:170
> #23 0x00007f0b10bcea0a in WebCore::EventTarget::fireEventListeners (this=0x7f0a8a2007b0, event=..., listeners=...) at ../../Source/WebCore/dom/EventTarget.cpp:292
> #24 0x00007f0b10bce51a in WebCore::EventTarget::fireEventListeners (this=0x7f0a8a2007b0, event=...) at ../../Source/WebCore/dom/EventTarget.cpp:234
> #25 0x00007f0b10c1a039 in WebCore::Node::handleLocalEvents (this=0x7f0a8a2007b0, event=...) at ../../Source/WebCore/dom/Node.cpp:2321
> #26 0x00007f0b10bb11d5 in WebCore::EventContext::handleLocalEvents (this=0x7f0a812b54e0, event=...) at ../../Source/WebCore/dom/EventContext.cpp:54
> #27 0x00007f0b10bc812e in WebCore::dispatchEventInDOM (event=..., path=...) at ../../Source/WebCore/dom/EventDispatcher.cpp:91
> #28 0x00007f0b10bc8655 in WebCore::EventDispatcher::dispatchEvent (node=..., event=...) at ../../Source/WebCore/dom/EventDispatcher.cpp:159
> #29 0x00007f0b10c1a08b in WebCore::Node::dispatchEvent (this=0x7f0a8a2007b0, event=...) at ../../Source/WebCore/dom/Node.cpp:2331
> #30 0x00007f0b10bd8e9c in WebCore::GenericEventQueue::dispatchOneEvent (this=0x7f0a8a200c48) at ../../Source/WebCore/dom/GenericEventQueue.cpp:68
> #31 0x00007f0b10be6cda in std::__invoke_impl<void, void (WebCore::GenericEventQueue::*&)(), WebCore::GenericEventQueue*&> (__f=@0x7f0a812b5388: (void (WebCore::GenericEventQueue::*)(WebCore::GenericEventQueue * const)) 0x7f0b10bd8db8 <WebCore::GenericEventQueue::dispatchOneEvent()>, __t=@0x7f0a812b5398: 0x7f0a8a200c48) at /usr/include/c++/7/bits/invoke.h:73
> #32 0x00007f0b10be6c4b in std::__invoke<void (WebCore::GenericEventQueue::*&)(), WebCore::GenericEventQueue*&> (__fn=@0x7f0a812b5388: (void (WebCore::GenericEventQueue::*)(WebCore::GenericEventQueue * const)) 0x7f0b10bd8db8 <WebCore::GenericEventQueue::dispatchOneEvent()>, __args#0=@0x7f0a812b5398: 0x7f0a8a200c48) at /usr/include/c++/7/bits/invoke.h:95
> #33 0x00007f0b10be6b9d in std::_Bind<void (WebCore::GenericEventQueue::*(WebCore::GenericEventQueue*))()>::__call<void, , 0ul>(std::tuple<>&&, std::_Index_tuple<0ul>) (this=0x7f0a812b5388, __args=...) at /usr/include/c++/7/functional:467
> #34 0x00007f0b10be6b27 in std::_Bind<void (WebCore::GenericEventQueue::*(WebCore::GenericEventQueue*))()>::operator()<, void>() (this=0x7f0a812b5388) at /usr/include/c++/7/functional:551
> #35 0x00007f0b10be6aec in WTF::Function<void ()>::CallableWrapper<std::_Bind<void (WebCore::GenericEventQueue::*(WebCore::GenericEventQueue*))()> >::call() (this=0x7f0a812b5380) at DerivedSources/ForwardingHeaders/wtf/Function.h:101
> #36 0x00007f0b0ec7cd76 in WTF::Function<void ()>::operator()() const (this=0x7f0a812a1418) at DerivedSources/ForwardingHeaders/wtf/Function.h:56
> #37 0x00007f0b10541705 in WebCore::GenericTaskQueue<WebCore::Timer>::enqueueTask(WTF::Function<void ()>&&)::{lambda()#1}::operator()() const (__closure=0x7f0a812a1410) at ../../Source/WebCore/platform/GenericTaskQueue.h:94
> #38 0x00007f0b10542d3e in WTF::Function<void ()>::CallableWrapper<WebCore::GenericTaskQueue<WebCore::Timer>::enqueueTask(WTF::Function<void ()>&&)::{lambda()#1}>::call() (this=0x7f0a812a1408) at DerivedSources/ForwardingHeaders/wtf/Function.h:101
> #39 0x00007f0b0ec7cd76 in WTF::Function<void ()>::operator()() const (this=0x7ffc06e52ea0) at DerivedSources/ForwardingHeaders/wtf/Function.h:56
> #40 0x00007f0b1145f95c in WebCore::TaskDispatcher<WebCore::Timer>::dispatchOneTask (this=0x7f0a8a200c58) at ../../Source/WebCore/platform/GenericTaskQueue.cpp:80
> #41 0x00007f0b1145f827 in WebCore::TaskDispatcher<WebCore::Timer>::sharedTimerFired () at ../../Source/WebCore/platform/GenericTaskQueue.cpp:65
> #42 0x00007f0b1145f681 in WebCore::TaskDispatcher<WebCore::Timer>::<lambda()>::operator()(void) const (__closure=0x7f0a8b0a4788) at ../../Source/WebCore/platform/GenericTaskQueue.cpp:49
> #43 0x00007f0b1146020a in WTF::Function<void()>::CallableWrapper<WebCore::TaskDispatcher<WebCore::Timer>::sharedTimer()::<lambda()> >::call(void) (this=0x7f0a8b0a4780) at DerivedSources/ForwardingHeaders/wtf/Function.h:101
> #44 0x00007f0b0ec7cd76 in WTF::Function<void ()>::operator()() const (this=0x7f0b176a5380 <WebCore::TaskDispatcher<WebCore::Timer>::sharedTimer()::timer+64>) at DerivedSources/ForwardingHeaders/wtf/Function.h:56
> #45 0x00007f0b0ec8da64 in WebCore::Timer::fired (this=0x7f0b176a5340 <WebCore::TaskDispatcher<WebCore::Timer>::sharedTimer()::timer>) at ../../Source/WebCore/platform/Timer.h:131
> #46 0x00007f0b11491603 in WebCore::ThreadTimers::sharedTimerFiredInternal (this=0x7f0af007e938) at ../../Source/WebCore/platform/ThreadTimers.cpp:117
> #47 0x00007f0b114910db in WebCore::ThreadTimers::<lambda()>::operator()(void) const (__closure=0x7f0af00f9338) at ../../Source/WebCore/platform/ThreadTimers.cpp:69
> #48 0x00007f0b1149ca38 in WTF::Function<void()>::CallableWrapper<WebCore::ThreadTimers::setSharedTimer(WebCore::SharedTimer*)::<lambda()> >::call(void) (this=0x7f0af00f9330) at DerivedSources/ForwardingHeaders/wtf/Function.h:101
> #49 0x00007f0b0ec7cd76 in WTF::Function<void ()>::operator()() const (this=0x7f0b176a54a8 <WebCore::MainThreadSharedTimer::singleton()::instance+8>) at DerivedSources/ForwardingHeaders/wtf/Function.h:56
> #50 0x00007f0b1146eb7f in WebCore::MainThreadSharedTimer::fired (this=0x7f0b176a54a0 <WebCore::MainThreadSharedTimer::singleton()::instance>) at ../../Source/WebCore/platform/MainThreadSharedTimer.cpp:54
> #51 0x00007f0b114728a8 in WTF::RunLoop::Timer<WebCore::MainThreadSharedTimer>::fired (this=0x7f0b176a54b0 <WebCore::MainThreadSharedTimer::singleton()::instance+16>) at DerivedSources/ForwardingHeaders/wtf/RunLoop.h:148
> #52 0x00007f0b02199305 in WTF::RunLoop::TimerBase::<lambda(gpointer)>::operator()(gpointer) const (__closure=0x0, userData=0x7f0b176a54b0 <WebCore::MainThreadSharedTimer::singleton()::instance+16>) at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:170
> #53 0x00007f0b0219935d in WTF::RunLoop::TimerBase::<lambda(gpointer)>::_FUN(gpointer) () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:176
> #54 0x00007f0b021989e4 in WTF::<lambda(GSource*, GSourceFunc, gpointer)>::operator()(GSource *, GSourceFunc, gpointer) const (__closure=0x0, source=0x55e71cb90680, callback=0x7f0b02199340 <WTF::RunLoop::TimerBase::<lambda(gpointer)>::_FUN(gpointer)>, userData=0x7f0b176a54b0 <WebCore::MainThreadSharedTimer::singleton()::instance+16>) at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:45
> #55 0x00007f0b02198a13 in WTF::<lambda(GSource*, GSourceFunc, gpointer)>::_FUN(GSource *, GSourceFunc, gpointer) () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:46
> #56 0x00007f0b03d64c55 in g_main_dispatch () at /home/fujii/work/webkit/ga/WebKitBuild/DependenciesGTK/Source/glib-2.54.2/glib/gmain.c:3148
> #57 g_main_context_dispatch () at /home/fujii/work/webkit/ga/WebKitBuild/DependenciesGTK/Source/glib-2.54.2/glib/gmain.c:3813
> #58 0x00007f0b03d65020 in g_main_context_iterate () at /home/fujii/work/webkit/ga/WebKitBuild/DependenciesGTK/Source/glib-2.54.2/glib/gmain.c:3886
> #59 0x00007f0b03d65332 in g_main_loop_run () at /home/fujii/work/webkit/ga/WebKitBuild/DependenciesGTK/Source/glib-2.54.2/glib/gmain.c:4082
> #60 0x00007f0b02198f41 in WTF::RunLoop::run () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:96
> #61 0x00007f0b0f8a110a in WebKit::ChildProcessMain<WebKit::WebProcess, WebKit::WebProcessMain> (argc=3, argv=0x7ffc06e53458) at ../../Source/WebKit/Shared/unix/ChildProcessMain.h:61
> #62 0x00007f0b0f8a0dc7 in WebKit::WebProcessMainUnix (argc=3, argv=0x7ffc06e53458) at ../../Source/WebKit/WebProcess/gtk/WebProcessMainGtk.cpp:67
> #63 0x000055e71beada45 in main (argc=3, argv=0x7ffc06e53458) at ../../Source/WebKit/WebProcess/EntryPoint/unix/WebProcessMain.cpp:52

[Fujii Hironori]

I commented out the assertion, and tried again.
> ./Tools/Scripts/run-webkit-tests --gtk --debug -v media/event-attributes.html

Another assertion failure happens.

> STDERR: ASSERTION FAILED: it != m_tiles.end()

Backtrace:

> Thread 1 (Thread 0x7fa2017fa700 (LWP 7488)):
> #0  0x00007fa2d1ba23da in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:267
> #1  0x00007fa2df0a655f in WebKit::CoordinatedBackingStore::updateTile (this=0x7fa250cea980, id=12, sourceRect=..., tileRect=..., buffer=..., offset=...) at ../../Source/WebKit/Shared/CoordinatedGraphics/CoordinatedBackingStore.cpp:84
> #2  0x00007fa2df0a8d0a in WebKit::CoordinatedGraphicsScene::updateTilesIfNeeded (this=0x7fa250ce8000, layer=0x7fa250cdeb40, state=..., commitScope=...) at ../../Source/WebKit/Shared/CoordinatedGraphics/CoordinatedGraphicsScene.cpp:358
> #3  0x00007fa2df0a819d in WebKit::CoordinatedGraphicsScene::setLayerState (this=0x7fa250ce8000, id=24, layerState=..., commitScope=...) at ../../Source/WebKit/Shared/CoordinatedGraphics/CoordinatedGraphicsScene.cpp:225
> #4  0x00007fa2df0a9778 in WebKit::CoordinatedGraphicsScene::commitSceneState (this=0x7fa250ce8000, state=...) at ../../Source/WebKit/Shared/CoordinatedGraphics/CoordinatedGraphicsScene.cpp:446
> #5  0x00007fa2df0a751d in WebKit::CoordinatedGraphicsScene::applyStateChanges (this=0x7fa250ce8000, states=...) at ../../Source/WebKit/Shared/CoordinatedGraphics/CoordinatedGraphicsScene.cpp:61
> #6  0x00007fa2df0bedc2 in WebKit::ThreadedCompositor::renderLayerTree (this=0x7fa250ced000) at ../../Source/WebKit/Shared/CoordinatedGraphics/threadedcompositor/ThreadedCompositor.cpp:243
> #7  0x00007fa2df0bddd5 in WebKit::ThreadedCompositor::<lambda()>::operator()(void) const (__closure=0x7fa256a259d8) at ../../Source/WebKit/Shared/CoordinatedGraphics/threadedcompositor/ThreadedCompositor.cpp:57
> #8  0x00007fa2df0c2ba4 in WTF::Function<void()>::CallableWrapper<WebKit::ThreadedCompositor::ThreadedCompositor(WebKit::ThreadedCompositor::Client&, WebKit::WebPage&, const WebCore::IntSize&, float, WebKit::ThreadedCompositor::ShouldDoFrameSync, WebCore::TextureMapper::PaintFlags)::<lambda()> >::call(void) (this=0x7fa256a259d0) at DerivedSources/ForwardingHeaders/wtf/Function.h:101
> #9  0x00007fa2de707d76 in WTF::Function<void ()>::operator()() const (this=0x7fa2bfbdff40) at DerivedSources/ForwardingHeaders/wtf/Function.h:56
> #10 0x00007fa2df0bdd02 in WebKit::CompositingRunLoop::updateTimerFired (this=0x7fa2bfbdff00) at ../../Source/WebKit/Shared/CoordinatedGraphics/threadedcompositor/CompositingRunLoop.cpp:258
> #11 0x00007fa2df0ca968 in WTF::RunLoop::Timer<WebKit::CompositingRunLoop>::fired (this=0x7fa2bfbdff00) at DerivedSources/ForwardingHeaders/wtf/RunLoop.h:148
> #12 0x00007fa2d1c24305 in WTF::RunLoop::TimerBase::<lambda(gpointer)>::operator()(gpointer) const (__closure=0x0, userData=0x7fa2bfbdff00) at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:170
> #13 0x00007fa2d1c2435d in WTF::RunLoop::TimerBase::<lambda(gpointer)>::_FUN(gpointer) () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:176
> #14 0x00007fa2d1c239e4 in WTF::<lambda(GSource*, GSourceFunc, gpointer)>::operator()(GSource *, GSourceFunc, gpointer) const (__closure=0x0, source=0x56486d047c30, callback=0x7fa2d1c24340 <WTF::RunLoop::TimerBase::<lambda(gpointer)>::_FUN(gpointer)>, userData=0x7fa2bfbdff00) at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:45
> #15 0x00007fa2d1c23a13 in WTF::<lambda(GSource*, GSourceFunc, gpointer)>::_FUN(GSource *, GSourceFunc, gpointer) () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:46
> #16 0x00007fa2d37efc55 in g_main_dispatch () at /home/fujii/work/webkit/ga/WebKitBuild/DependenciesGTK/Source/glib-2.54.2/glib/gmain.c:3148
> #17 g_main_context_dispatch () at /home/fujii/work/webkit/ga/WebKitBuild/DependenciesGTK/Source/glib-2.54.2/glib/gmain.c:3813
> #18 0x00007fa2d37f0020 in g_main_context_iterate () at /home/fujii/work/webkit/ga/WebKitBuild/DependenciesGTK/Source/glib-2.54.2/glib/gmain.c:3886
> #19 0x00007fa2d37f0332 in g_main_loop_run () at /home/fujii/work/webkit/ga/WebKitBuild/DependenciesGTK/Source/glib-2.54.2/glib/gmain.c:4082
> #20 0x00007fa2d1c23f41 in WTF::RunLoop::run () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:96
> #21 0x00007fa2d1c213f6 in WTF::WorkQueue::<lambda()>::operator()(void) const (__closure=0x7fa250cee338) at ../../Source/WTF/wtf/generic/WorkQueueGeneric.cpp:43
> #22 0x00007fa2d1c23422 in WTF::Function<void()>::CallableWrapper<WTF::WorkQueue::platformInitialize(char const*, WTF::WorkQueue::Type, WTF::WorkQueue::QOS)::<lambda()> >::call(void) (this=0x7fa250cee330) at ../../Source/WTF/wtf/Function.h:101
> #23 0x00007fa2de707d76 in WTF::Function<void ()>::operator()() const (this=0x7fa2017f9b30) at DerivedSources/ForwardingHeaders/wtf/Function.h:56
> #24 0x00007fa2d1bd64a7 in WTF::Thread::entryPoint (newThreadContext=0x7fa256a58820) at ../../Source/WTF/wtf/Threading.cpp:136
> #25 0x00007fa2d1c1fcd5 in WTF::wtfThreadEntryPoint (context=0x7fa256a58820) at ../../Source/WTF/wtf/ThreadingPthreads.cpp:223
> #26 0x00007fa2ce5986db in start_thread (arg=0x7fa2017fa700) at pthread_create.c:463
> #27 0x00007fa2d5e2488f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

[Fujii Hironori]

segfault happens in release build. (trunk@233029, GTK port)
Seems same with Bug 186206 and Bug 185910.

> Core was generated by `/home/fujii/work/webkit/ga/WebKitBuild/Release/bin/WebKitWebProcess 3 16'.
> Program terminated with signal SIGSEGV, Segmentation fault.
> #0  0x00007f74c8aab575 in WebKit::CoordinatedBackingStoreTile::setBackBuffer(WebCore::IntRect const&, WebCore::IntRect const&, WTF::RefPtr<Nicosia::Buffer, WTF::DumbPtrTraits<Nicosia::Buffer> >&&, WebCore::IntPoint const&) () from /home/fujii/work/webkit/ga/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> [Current thread is 1 (Thread 0x7f7400ff9700 (LWP 9059))]

> Thread 1 (Thread 0x7f7400ff9700 (LWP 9059)):
> #0  0x00007f74c8aab575 in WebKit::CoordinatedBackingStoreTile::setBackBuffer(WebCore::IntRect const&, WebCore::IntRect const&, WTF::RefPtr<Nicosia::Buffer, WTF::DumbPtrTraits<Nicosia::Buffer> >&&, WebCore::IntPoint const&) () from /home/fujii/work/webkit/ga/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #1  0x00007f74c8aab612 in WebKit::CoordinatedBackingStore::updateTile(unsigned int, WebCore::IntRect const&, WebCore::IntRect const&, WTF::RefPtr<Nicosia::Buffer, WTF::DumbPtrTraits<Nicosia::Buffer> >&&, WebCore::IntPoint const&) () from /home/fujii/work/webkit/ga/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #2  0x00007f74c8aae8b7 in WebKit::CoordinatedGraphicsScene::updateTilesIfNeeded(WebCore::TextureMapperLayer*, WebCore::CoordinatedGraphicsLayerState const&, WebKit::CoordinatedGraphicsScene::CommitScope&) () from /home/fujii/work/webkit/ga/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #3  0x00007f74c8aafcec in WebKit::CoordinatedGraphicsScene::setLayerState(unsigned int, WebCore::CoordinatedGraphicsLayerState const&, WebKit::CoordinatedGraphicsScene::CommitScope&) () from /home/fujii/work/webkit/ga/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #4  0x00007f74c8ab02c0 in WebKit::CoordinatedGraphicsScene::commitSceneState(WebCore::CoordinatedGraphicsState const&) () from /home/fujii/work/webkit/ga/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #5  0x00007f74c8ab0557 in WebKit::CoordinatedGraphicsScene::applyStateChanges(WTF::Vector<WebCore::CoordinatedGraphicsState, 0ul, WTF::CrashOnOverflow, 16ul> const&) () from /home/fujii/work/webkit/ga/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #6  0x00007f74c8ab398c in WebKit::ThreadedCompositor::renderLayerTree() () from /home/fujii/work/webkit/ga/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
> #7  0x00007f74c356ec23 in WTF::RunLoop::TimerBase::TimerBase(WTF::RunLoop&)::{lambda(void*)#1}::_FUN(void*) () from /home/fujii/work/webkit/ga/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
> #8  0x00007f74c430fc55 in g_main_dispatch () at /home/fujii/work/webkit/ga/WebKitBuild/DependenciesGTK/Source/glib-2.54.2/glib/gmain.c:3148
> #9  g_main_context_dispatch () at /home/fujii/work/webkit/ga/WebKitBuild/DependenciesGTK/Source/glib-2.54.2/glib/gmain.c:3813
> #10 0x00007f74c4310020 in g_main_context_iterate () at /home/fujii/work/webkit/ga/WebKitBuild/DependenciesGTK/Source/glib-2.54.2/glib/gmain.c:3886
> #11 0x00007f74c4310332 in g_main_loop_run () at /home/fujii/work/webkit/ga/WebKitBuild/DependenciesGTK/Source/glib-2.54.2/glib/gmain.c:4082
> #12 0x00007f74c356f020 in WTF::RunLoop::run() () from /home/fujii/work/webkit/ga/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
> #13 0x00007f74c35383eb in WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*) () from /home/fujii/work/webkit/ga/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
> #14 0x00007f74c356d199 in WTF::wtfThreadEntryPoint(void*) () from /home/fujii/work/webkit/ga/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
> #15 0x00007f74c1dfb6db in start_thread (arg=0x7f7400ff9700) at pthread_create.c:463
> #16 0x00007f74c694488f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

[Philippe Normand]

Fuji, seems like you're hitting https://bugs.webkit.org/show_bug.cgi?id=186206

[Michael Catanzaro]

Both crashes should now be fixed, thanks to Fujii.

[Miguel Gomez]

Moving to https://bugs.webkit.org/show_bug.cgi?id=198830 as there's a new crash that's affecting several tests.