Bug 223430 - Media tests crash sometimes with over-release of a CFTypeRef (423 / CVPixelBufferBacking)
Summary: Media tests crash sometimes with over-release of a CFTypeRef (423 / CVPixelBu...
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebGL (show other bugs)
Version: Other
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks: webglgpup
  Show dependency treegraph
 
Reported: 2021-03-18 02:39 PDT by Kimmo Kinnunen
Modified: 2021-03-22 16:17 PDT (History)
7 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Kimmo Kinnunen 2021-03-18 02:39:17 PDT
Frequency: 1/20 maybe

../Internal/Tools/Scripts/run-webkit-tests --debug  --order=random  fast/canvas webgl 

Using port 'mac-bigsur-wk2'
Test configuration: <bigsur, x86_64, debug>
Placing test results in /Users/kkinnunen/Build/Debug/layout-test-results
Using Debug build
Pixel tests disabled
Regular timeout: 30000, slow test timeout: 150000

...
                       
[2774/2791] webgl/2.0.0/conformance2/textures/video/tex-2d-rgb32f-rgb-float.html failed unexpectedly (GPUProcess crashed [pid=51440])


Regressions: Unexpected crashes (1)
  webgl/2.0.0/conformance2/textures/video/tex-2d-rgb32f-rgb-float.html [ Crash ]

..

Process:               com.apple.WebKit.GPU.Development [51440]
Path:                  /Users/USER/*/com.apple.WebKit.GPU.Development
Identifier:            com.apple.WebKit.GPU
Version:               612+ (612.1.7+)
Code Type:             X86-64 (Native)
Parent Process:        ??? [1]
User ID:               501

Date/Time:             2021-03-18 11:29:55.357 +0200
OS Version:            macOS 11.3 (20E201)
Report Version:        12
Bridge OS Version:     5.3 (18P4544)
Anonymous UUID:        ADEB2724-109F-6379-8A4B-657A6A37BBA8

Sleep/Wake UUID:       BA4AE60D-ED97-4DE6-957D-5629D94106D9

Time Awake Since Boot: 96000 seconds
Time Since Wake:       69000 seconds

System Integrity Protection: enabled

Crashed Thread:        18  Dispatch queue: com.apple.coremedia.player.async.0x7f853961ff90.P/WP

Exception Type:        EXC_BAD_INSTRUCTION (SIGILL)
Exception Codes:       0x0000000000000001, 0x0000000000000000
Exception Note:        EXC_CORPSE_NOTIFY

Termination Signal:    Illegal instruction: 4
Termination Reason:    Namespace SIGNAL, Code 0x4
Terminating Process:   exc handler [51440]

Application Specific Information:
Detected over-release of a CFTypeRef 0x7f853c81ba00 (423 / CVPixelBufferBacking)

Thread 0:: Dispatch queue: com.apple.main-thread
0   com.apple.CoreFoundation      	0x00007fff20683638 _CFXNotificationRegistrarRecycleNameRegistration + 46
1   com.apple.CoreFoundation      	0x00007fff20681446 CFXNotificationRegistrarRemove + 263
2   com.apple.CoreFoundation      	0x00007fff20577d36 _CFXNotificationRemoveObservers + 113
3   com.apple.Foundation          	0x00007fff212d48e2 -[NSNotificationCenter removeObserver:name:object:] + 265
4   com.apple.AVFCore             	0x00007fff315cd188 -[AVCMNotificationDispatcher removeListenerWithWeakReference:callback:name:object:] + 68
5   com.apple.AVFCore             	0x00007fff315ce4b7 -[AVPlayerItem _removeFPListeners] + 304
6   com.apple.AVFCore             	0x00007fff315cdefa -[AVPlayerItem dealloc] + 58
7   libsystem_blocks.dylib        	0x00007fff201b6605 _Block_release + 128
8   libdispatch.dylib             	0x00007fff202d37e6 _dispatch_client_callout + 8
9   libdispatch.dylib             	0x00007fff202dfb2f _dispatch_main_queue_callback_4CF + 940
10  com.apple.CoreFoundation      	0x00007fff205b3a98 __CFRUNLOOP_IS_SERVICING_THE_MAIN_DISPATCH_QUEUE__ + 9
11  com.apple.CoreFoundation      	0x00007fff20575c82 __CFRunLoopRun + 2755
12  com.apple.CoreFoundation      	0x00007fff20574afc CFRunLoopRunSpecific + 563
13  com.apple.Foundation          	0x00007fff212febb7 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 212
14  com.apple.Foundation          	0x00007fff2138ca81 -[NSRunLoop(NSRunLoop) run] + 76
15  libxpc.dylib                  	0x00007fff201cc38d _xpc_objc_main + 825
16  libxpc.dylib                  	0x00007fff201cbcd3 xpc_main + 116
17  com.apple.WebKit              	0x00000001127b56a1 WebKit::XPCServiceMain(int, char const**) + 1025 (XPCServiceMain.mm:209)
18  com.apple.WebKit              	0x0000000113dc124b WKXPCServiceMain + 27 (WKMain.mm:33)
19  com.apple.WebKit.GPU          	0x000000010c487ea2 main + 34 (AuxiliaryProcessMain.cpp:30)
20  libdyld.dylib                 	0x00007fff20498f3d start + 1

Thread 1:: JavaScriptCore bmalloc scavenger
Comment 1 Radar WebKit Bug Importer 2021-03-18 02:39:54 PDT
<rdar://problem/75566034>
Comment 2 Alexey Proskuryakov 2021-03-22 16:17:14 PDT
> Crashed Thread:        18  Dispatch queue: com.apple.coremedia.player.async.0x7f853961ff90.P/WP

Looking at thread 18 in a complete crash log, there isn't any WebKit code running. Is this likely to be a WebKit issue? Or are we doing something in GPU Process to trigger it more than before?