Bug 156990 – Crash under -[WKWebView _mayAutomaticallyShowVideoPictureInPicture] + 32 (WKWebView.mm:309)

• Status: RESOLVED
• Resolution: FIXED
• Component: WebKit2

[Chris Dumez]

Crash under -[WKWebView _mayAutomaticallyShowVideoPictureInPicture] + 32 (WKWebView.mm:309):
Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Subtype: KERN_INVALID_ADDRESS at 0x0000000000000030
Triggered by Thread:  0

Filtered syslog:
None found

Thread 0 name:  Dispatch queue: com.apple.main-thread
Thread 0 Crashed:
0   WebKit                              0x00000001951a2db8 WTF::HashTable<unsigned long long, WTF::KeyValuePair<unsigned long long, std::__1::tuple<WTF::RefPtr<WebKit::WebVideoFullscreenModelContext>, WTF::RefPtr<WebCore::WebVideoFullscreenInterfaceAVKit> > >, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<unsigned long long, std::__1::tuple<WTF::RefPtr<WebKit::WebVideoFullscreenModelContext>, WTF::RefPtr<WebCore::WebVideoFullscreenInterfaceAVKit> > > >, WTF::IntHash<unsigned long long>, WTF::HashMap<unsigned long long, std::__1::tuple<WTF::RefPtr<WebKit::WebVideoFullscreenModelContext>, WTF::RefPtr<WebCore::WebVideoFullscreenInterfaceAVKit> >, WTF::IntHash<unsigned long long>, WTF::HashTraits<unsigned long long>, WTF::HashTraits<std::__1::tuple<WTF::RefPtr<WebKit::WebVideoFullscreenModelContext>, WTF::RefPtr<WebCore::WebVideoFullscreenInterfaceAVKit> > > >::KeyValuePairTraits, WTF::HashTraits<unsigned long long> >::begin() const + 4 (HashTable.h:382)
1   WebKit                              0x00000001951a16fc WebKit::WebVideoFullscreenManagerProxy::mayAutomaticallyShowVideoPictureInPicture() const + 28 (HashMap.h:250)
2   WebKit                              0x00000001952006d0 -[WKWebView _mayAutomaticallyShowVideoPictureInPicture] + 32 (WKWebView.mm:309)
3   WebKit                              0x000000019503ff58 WebKit::PageClientImpl::isViewVisible() + 96 (PageClientImplIOS.mm:165)
4   WebKit                              0x000000019503fe5c WebKit::PageClientImpl::isViewWindowActive() + 28 (PageClientImplIOS.mm:148)
5   WebKit                              0x000000019503feb8 WebKit::PageClientImpl::isViewFocused() + 28 (PageClientImplIOS.mm:154)
6   WebKit                              0x000000019510e0d0 WebKit::WebPageProxy::updateViewState(unsigned int) + 52 (WebPageProxy.cpp:1373)
7   WebKit                              0x000000019510f6dc WebKit::WebPageProxy::reattachToWebProcess() + 232 (WebPageProxy.cpp:708)
8   WebKit                              0x000000019510fa30 WebKit::WebPageProxy::reattachToWebProcessForReload() + 44 (WebPageProxy.cpp:736)
9   WebKit                              0x0000000195111c5c WebKit::WebPageProxy::reload(bool, bool) + 424 (WebPageProxy.cpp:1109)
10  WebKit                              0x0000000195202ac4 -[WKWebView reload] + 44 (WKWebView.mm:730)
11  MobileSafari                        0x000000010014c8c8 -[LoadingController reloadAllowingContentBlockers:] + 168 (LoadingController.m:147)
12  MobileSafari                        0x00000001001b7174 -[TabDocument _webViewWebProcessDidCrash:] + 556 (TabDocument.mm:3230)
13  WebKit                              0x0000000194ff3bf0 WebKit::NavigationState::NavigationClient::processDidCrash(WebKit::WebPageProxy&) + 88 (NavigationState.mm:688)
14  WebKit                              0x000000019511f850 WebKit::WebPageProxy::processDidCrash() + 88 (WebPageProxy.cpp:4998)
15  WebKit                              0x000000019516d774 WebKit::WebProcessProxy::didClose(IPC::Connection&) + 244 (WebProcessProxy.cpp:531)
16  JavaScriptCore                      0x00000001904054e0 WTF::RunLoop::performWork() + 452 (functional:1817)
17  JavaScriptCore                      0x000000019040588c WTF::RunLoop::performWork(void*) + 36 (RunLoopCF.cpp:38)
18  CoreFoundation                      0x000000018bd1f510 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 24 (CFRunLoop.c:1934)
19  CoreFoundation                      0x000000018bd1ee58 __CFRunLoopDoSources0 + 524 (CFRunLoop.c:1980)
20  CoreFoundation                      0x000000018bd1cad8 __CFRunLoopRun + 804 (CFRunLoop.c:2812)
21  CoreFoundation                      0x000000018bc502b8 CFRunLoopRunSpecific + 292 (CFRunLoop.c:3094)
22  GraphicsServices                    0x000000018d5fe15c GSEventRunModal + 180 (GSEvent.c:2245)
23  UIKit                               0x0000000191bb1068 -[UIApplication _run] + 712 (UIApplication.m:2562)
24  UIKit                               0x0000000191babda4 UIApplicationMain + 184 (UIApplication.m:3957)
25  MobileSafari                        0x00000001000ea8dc main + 2012 (main.m:168)
26  libdyld.dylib                       0x000000018b7fb5c0 start + 4

[Chris Dumez]

rdar://problem/25904376

[Chris Dumez]

Created attachment 277268 [details]
Patch

[WebKit Commit Bot]

Comment on attachment 277268 [details]
Patch

Clearing flags on attachment: 277268

Committed r200050: <http://trac.webkit.org/changeset/200050>

[WebKit Commit Bot]

All reviewed patches have been landed.  Closing bug.