Bug 176213 – AT&T EPTT crashes in IIOImagePlus::~IIOImagePlus

• Status: NEW
• Component: Images

[saurabh]

Created attachment 319583 [details]
Crash dump File attached

Summary:
Crash is observed randomly in Web thread.

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Subtype: KERN_INVALID_ADDRESS at 0x00000001ffffffff
Termination Signal: Segmentation fault: 11
Termination Reason: Namespace SIGNAL, Code 0xb
Terminating Process: exc handler [0]
Triggered by Thread:  4
Thread 4 name:  WebThread
Steps to Reproduce:
Issue is random

Expected Results:
App should not crash 

Actual Results:
App got crashed

Version/Build:
1. 
OS Version:          iPhone OS 10.3.3 (14G60)
Hardware Model:      iPhone7,1
2. 
OS Version:          iPhone OS 10.3.2 (14F89)
Hardware Model:      iPhone7,1
3.
Hardware Model:      iPhone9,4
OS Version:          iPhone OS 10.3.3 (14G60)
Configuration:

[Alexey Proskuryakov]

Thread 5 name:  WebThread
Thread 5 Crashed:
0   CoreFoundation                	0x000000018ac63234 CFRelease + 12
1   ImageIO                       	0x000000018ca391f8 IIOImagePlus::~IIOImagePlus() + 192
2   ImageIO                       	0x000000018ca3922c IIOImagePlus::~IIOImagePlus() + 20
3   ImageIO                       	0x000000018ca38b70 _CGImagePlusFinalize(void const*) + 184
4   CoreFoundation                	0x000000018ad3ac28 _CFRelease + 216
5   CoreFoundation                	0x000000018ad7a9ac common_removeAllObjects + 156
6   CoreFoundation                	0x000000018ac6e9f0 -[__NSArrayM dealloc] + 28
7   ImageIO                       	0x000000018ca122c8 IIOImageSource::~IIOImageSource() + 156
8   ImageIO                       	0x000000018ca12390 IIOImageSource::~IIOImageSource() + 20
9   ImageIO                       	0x000000018ca165c0 _CGImageSourceFinalize(void const*) + 72
10  CoreFoundation                	0x000000018ad3ac28 _CFRelease + 216
11  WebCore                       	0x000000018ff032f4 WebCore::ImageFrameCache::setDecoder(WebCore::ImageDecoder*) + 120
12  WebCore                       	0x000000018ff08854 WebCore::ImageSource::clear(WebCore::SharedBuffer*) + 92
13  WebCore                       	0x000000018f9d30d8 WebCore::BitmapImage::destroyDecodedData(bool) + 172
14  WebCore                       	0x00000001904752ac WebCore::MemoryCache::pruneLiveResourcesToSize(unsigned int, bool) + 252
15  WebCore                       	0x000000018f906e00 WebCore::ThreadTimers::sharedTimerFiredInternal() + 172

[Alexey Proskuryakov]

I understand that this issue is random, but is it possible to reproduce at all?