RESOLVED DUPLICATE of bug 222236 223476
[iOS 14.5 beta] Crash in call to logger() in UserMediaPermissionRequestManagerProxy::computeFilteredDeviceList 
https://bugs.webkit.org/show_bug.cgi?id=223476
Summary [iOS 14.5 beta] Crash in call to logger() in UserMediaPermissionRequestManage...
Ali Juma
Reported 2021-03-18 13:45:40 PDT
Chrome for iOS is getting reports of a crash that's new in iOS 14.5 beta (first seen in beta 2) with the following stack: CRASHED [EXC_BAD_ACCESS / KERN_INVALID_ADDRESS @ 0x00000020 ] Stack Quality84%Show frame trust levels 0x0000000196b2debc (WebKit + 0x00367ebc) WebKit::WebPageProxy::logger() 0x0000000196b2de70 (WebKit + 0x00367e70) WebKit::WebPageProxy::logger() 0x0000000196aee014 (WebKit + 0x00328014) WTF::Detail::CallableWrapper<WebKit::UserMediaPermissionRequestManagerProxy::computeFilteredDeviceList(bool, WTF::CompletionHandler<void (WTF::Vector<WebCore::CaptureDevice, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&)>&&)::$_12, void, WTF::Vector<WebCore::CaptureDevice, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&>::call(WTF::Vector<WebCore::CaptureDevice, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&) 0x00000001988ff584 (WebCore + 0x00000000019ae584) WTF::Detail::CallableWrapper<WebCore::RealtimeMediaSourceCenter::getMediaStreamDevices(WTF::CompletionHandler<void (WTF::Vector<WebCore::CaptureDevice, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&)>&&)::$_25, void, WTF::Vector<WebCore::CaptureDevice, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&>::call(WTF::Vector<WebCore::CaptureDevice, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&) 0x00000001988fba10 (WebCore + 0x00000000019aaa10) WTF::Detail::CallableWrapper<WebCore::RealtimeMediaSourceCenter::getMediaStreamDevices(WTF::CompletionHandler<void (WTF::Vector<WebCore::CaptureDevice, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&)>&&)::CaptureDeviceAccumulator::accumulate()::'lambda'(WTF::Vector<WebCore::CaptureDevice, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&), void, WTF::Vector<WebCore::CaptureDevice, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&>::~CallableWrapper() 0x0000000196f810d0 (WebCore + 0x000300d0) WTF::BlockPtr<void ()> WTF::BlockPtr<void ()>::fromCallable<WebCore::AVAudioSessionCaptureDeviceManager::getCaptureDevices(WTF::CompletionHandler<void (WTF::Vector<WebCore::CaptureDevice, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&)>&&)::$_5::operator()()::'lambda'()>(WebCore::AVAudioSessionCaptureDeviceManager::getCaptureDevices(WTF::CompletionHandler<void (WTF::Vector<WebCore::CaptureDevice, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&)>&&)::$_5::operator()()::'lambda'())::'lambda'(void*)::__invoke(void*) 0x000000018a50f2ac (libdispatch.dylib + 0x000602ac) _dispatch_call_block_and_release 0x000000018a510294 (libdispatch.dylib + 0x00061294) _dispatch_client_callout 0x000000018a4f2484 (libdispatch.dylib + 0x00043484) _dispatch_main_queue_callback_4CF$VARIANT$armv81 0x000000018a857560 (CoreFoundation + 0x0009a560) __CFRUNLOOP_IS_SERVICING_THE_MAIN_DISPATCH_QUEUE__ 0x000000018a8519c0 (CoreFoundation + 0x000949c0) __CFRunLoopRun 0x000000018a850a98 (CoreFoundation + 0x00093a98) CFRunLoopRunSpecific 0x00000001a14a256c (GraphicsServices + 0x0000356c) GSEventRunModal 0x000000018d16cc2c (UIKitCore + 0x00b2ec2c) -[UIApplication _run] 0x000000018d1721a8 (UIKitCore + 0x00b341a8) UIApplicationMain 0x0000000100a124ec (Chrome -chrome_exe_main.mm:71) main 0x000000018a52f13c (libdyld.dylib + 0x0000113c) start It looks like the call to ALWAYS_LOG in UserMediaPermissionRequestManagerProxy::computeFilteredDeviceList is crashing because m_page is null (and hence the call to logger() crashes). Looking at the code, I don't see how this can be null though. The most recent code change in this area seems to be from bug 220471, in January.
Attachments
Add attachment proposed patch, testcase, etc.
youenn fablet
Comment 1 2021-03-19 09:07:36 PDT
Isn't it a dupe of https://bugs.webkit.org/show_bug.cgi?id=222236
Ali Juma
Comment 2 2021-03-19 09:15:37 PDT
Yes, it sounds like a duplicate of that. We have crashes in beta 2 and beta 3, but none so far in beta 4, so if that's consistent with where bug 222236 has been fixed, we can close this.
Eric Carlson
Comment 3 2021-03-19 10:45:34 PDT
*** This bug has been marked as a duplicate of bug 222236 ***
Note You need to log in before you can comment on or make changes to this bug.