Bug 223920 – Crash in webgl/1.0.x/conformance/textures/misc/texture-with-flip-y-and-premultiply-alpha.html

• Status: RESOLVED
• Resolution: FIXED
• Component: WebGL

[Kimmo Kinnunen]

Crash in webgl/1.0.x/conformance/textures/misc/texture-with-flip-y-and-premultiply-alpha.html ANGLE+METAL

[Kimmo Kinnunen]

With skip changed from 2.0.y -> 2.0.0, 1.0.x -> 1.0.3

../Internal/Tools/Scripts/run-webkit-tests --debug --no-build --order=random   fast/canvas webgl --timeout=300000


Process:               com.apple.WebKit.WebContent.Development [15487]
Path:                  /Users/USER/*/com.apple.WebKit.WebContent.Development
Identifier:            com.apple.WebKit.WebContent
Version:               612+ (612.1.9+)
Code Type:             X86-64 (Native)
Parent Process:        ??? [1]
Responsible:           WebKitTestRunner [15484]
User ID:               501

PlugIn Path:             /Users/USER/*/libANGLE-shared.dylib
PlugIn Identifier:       libANGLE-shared.dylib
PlugIn Version:          ??? (0)

Date/Time:             2021-03-30 14:30:12.603 +0300
OS Version:            macOS 11.3 (20E201)
Report Version:        12
Bridge OS Version:     5.3 (18P4544)
Anonymous UUID:        ADEB2724-109F-6379-8A4B-657A6A37BBA8

Sleep/Wake UUID:       D48EB9D4-6C73-426F-AF12-26DC79BB8DC1

Time Awake Since Boot: 110000 seconds
Time Since Wake:       5900 seconds

System Integrity Protection: enabled

Crashed Thread:        0  Dispatch queue: com.apple.main-thread

Exception Type:        EXC_BAD_INSTRUCTION (SIGILL)
Exception Codes:       0x0000000000000001, 0x0000000000000000
Exception Note:        EXC_CORPSE_NOTIFY

Termination Signal:    Illegal instruction: 4
Termination Reason:    Namespace SIGNAL, Code 0x4
Terminating Process:   exc handler [15487]

Application Specific Information:
CRASHING TEST: webgl/1.0.x/conformance/ogles/GL/build/build_009_to_016.html

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   libANGLE-shared.dylib         	0x00000007f5b411de gl::LogMessage::~LogMessage() + 238 (debug.cpp:199)
1   libANGLE-shared.dylib         	0x00000007f5b40ab5 gl::LogMessage::~LogMessage() + 21 (debug.cpp:175)
2   libANGLE-shared.dylib         	0x00000007f611ce4c (anonymous namespace)::Separator::visitDeclarationPost(sh::TIntermDeclaration&) + 668 (SeparateCompoundExpressions.cpp:334)
3   libANGLE-shared.dylib         	0x00000007f5e1cb2b sh::TIntermRebuild::traversePost(sh::NodeType, sh::TIntermNode const&, sh::TIntermNode&, sh::TIntermRebuild::VisitBits) + 1755 (IntermRebuild.cpp:511)
4   libANGLE-shared.dylib         	0x00000007f5e1b1b9 sh::TIntermRebuild::traverseAny(sh::TIntermNode&) + 585 (IntermRebuild.cpp:328)
5   libANGLE-shared.dylib         	0x00000007f5e1b4d9 sh::TIntermRebuild::traverseAggregateBaseChildren(sh::TIntermAggregateBase&) + 761 (IntermRebuild.cpp:266)
6   libANGLE-shared.dylib         	0x00000007f5e1e5c6 sh::TIntermRebuild::traverseBlockChildren(sh::TIntermBlock&) + 38 (IntermRebuild.cpp:532)
7   libANGLE-shared.dylib         	0x00000007f5e1c305 sh::TIntermRebuild::traverseChildren(sh::NodeType, sh::TIntermNode const&, sh::TIntermNode&, sh::TIntermRebuild::VisitBits) + 1093 (IntermRebuild.cpp:438)
8   libANGLE-shared.dylib         	0x00000007f5e1b15e sh::TIntermRebuild::traverseAny(sh::TIntermNode&) + 494 (IntermRebuild.cpp:322)
9   libANGLE-shared.dylib         	0x00000007f5e1f151 sh::TIntermBlock* sh::TIntermRebuild::traverseAnyAs<sh::TIntermBlock>(sh::TIntermNode&) + 33 (IntermRebuild.cpp:233)
10  libANGLE-shared.dylib         	0x00000007f5e1e47c sh::TIntermRebuild::traverseFunctionDefinitionChildren(sh::TIntermFunctionDefinition&) + 796 (IntermRebuild.cpp:736)
11  libANGLE-shared.dylib         	0x00000007f5e1c2a7 sh::TIntermRebuild::traverseChildren(sh::NodeType, sh::TIntermNode const&, sh::TIntermNode&, sh::TIntermRebuild::VisitBits) + 999 (IntermRebuild.cpp:434)
12  libANGLE-shared.dylib         	0x00000007f5e1b15e sh::TIntermRebuild::traverseAny(sh::TIntermNode&) + 494 (IntermRebuild.cpp:322)
13  libANGLE-shared.dylib         	0x00000007f5e1b4d9 sh::TIntermRebuild::traverseAggregateBaseChildren(sh::TIntermAggregateBase&) + 761 (IntermRebuild.cpp:266)
14  libANGLE-shared.dylib         	0x00000007f5e1e5c6 sh::TIntermRebuild::traverseBlockChildren(sh::TIntermBlock&) + 38 (IntermRebuild.cpp:532)
15  libANGLE-shared.dylib         	0x00000007f5e1c305 sh::TIntermRebuild::traverseChildren(sh::NodeType, sh::TIntermNode const&, sh::TIntermNode&, sh::TIntermRebuild::VisitBits) + 1093 (IntermRebuild.cpp:438)
16  libANGLE-shared.dylib         	0x00000007f5e1b15e sh::TIntermRebuild::traverseAny(sh::TIntermNode&) + 494 (IntermRebuild.cpp:322)
17  libANGLE-shared.dylib         	0x00000007f5e1f151 sh::TIntermBlock* sh::TIntermRebuild::traverseAnyAs<sh::TIntermBlock>(sh::TIntermNode&) + 33 (IntermRebuild.cpp:233)
18  libANGLE-shared.dylib         	0x00000007f5e1ae00 bool sh::TIntermRebuild::rebuildInPlaceImpl<sh::TIntermBlock>(sh::TIntermBlock&) + 32 (IntermRebuild.cpp:209)
19  libANGLE-shared.dylib         	0x00000007f5e1ad0d sh::TIntermRebuild::rebuildInPlace(sh::TIntermBlock&) + 29 (IntermRebuild.cpp:198)
20  libANGLE-shared.dylib         	0x00000007f5e1acb4 sh::TIntermRebuild::rebuildRoot(sh::TIntermBlock&) + 36 (IntermRebuild.cpp:184)
21  libANGLE-shared.dylib         	0x00000007f6118df4 sh::SeparateCompoundExpressions(sh::TCompiler&, sh::SymbolEnv&, sh::IdGen&, sh::TIntermBlock&) + 260 (SeparateCompoundExpressions.cpp:649)
22  libANGLE-shared.dylib         	0x00000007f622fe85 sh::TranslatorMetalDirect::translateImpl(sh::TIntermBlock&, unsigned long long) + 6149 (TranslatorMetalDirect.cpp:1475)
23  libANGLE-shared.dylib         	0x00000007f6232c0c sh::TranslatorMetalDirect::translate(sh::TIntermBlock*, unsigned long long, sh::PerformanceDiagnostics*) + 316 (TranslatorMetalDirect.cpp:1552)
24  libANGLE-shared.dylib         	0x00000007f5a70efe sh::TCompiler::compile(char const* const*, unsigned long, unsigned long long) + 286 (Compiler.cpp:981)
25  libANGLE-shared.dylib         	0x00000007f61492a4 sh::Compile(void*, char const* const*, unsigned long, unsigned long long) + 340 (ShaderLang.cpp:336)
26  libANGLE-shared.dylib         	0x00000007f614716a rx::TranslateTask::operator()() + 266 (ShaderImpl.cpp:52)
27  libANGLE-shared.dylib         	0x00000007f62f4f3f angle::SingleThreadedWorkerPool::postWorkerTask(std::__1::shared_ptr<angle::Closure>) + 47 (WorkerThread.cpp:68)
28  libANGLE-shared.dylib         	0x00000007f62f62a4 angle::WorkerThreadPool::PostWorkerTask(std::__1::shared_ptr<angle::WorkerThreadPool>, std::__1::shared_ptr<angle::Closure>) + 84 (WorkerThread.cpp:348)
29  libANGLE-shared.dylib         	0x00000007f614c5c7 rx::ShaderMtl::compileImplMtl(gl::Context const*, gl::ShCompilerInstance*, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, unsigned long long) + 263 (ShaderMtl.mm:97)
30  libANGLE-shared.dylib         	0x00000007f614ca70 rx::ShaderMtl::compile(gl::Context const*, gl::ShCompilerInstance*, unsigned long long) + 464 (ShaderMtl.mm:140)
31  libANGLE-shared.dylib         	0x00000007f612ea3f gl::Shader::compile(gl::Context const*) + 1663 (Shader.cpp:367)
32  libANGLE-shared.dylib         	0x00000007f5aaec19 gl::Context::compileShader(gl::ShaderProgramID) + 73 (Context.cpp:6183)
33  libANGLE-shared.dylib         	0x00000007f5c03a96 gl::CompileShader(unsigned int) + 134 (entry_points_gles_2_0_autogen.cpp:541)
34  com.apple.WebCore             	0x00000007d0d64794 WebCore::GraphicsContextGLOpenGL::compileShader(unsigned int) + 148 (GraphicsContextGLANGLE.cpp:917)
35  com.apple.WebCore             	0x00000007d40682de WebCore::WebGLRenderingContextBase::compileShader(WebCore::WebGLShader&) + 126 (WebGLRenderingContextBase.cpp:1752)
36  com.apple.WebCore             	0x00000007d22555c2 WebCore::jsWebGLRenderingContextPrototypeFunction_compileShaderBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()::operator()() const + 34 (JSWebGLRenderingContext.cpp:5015)
37  com.apple.WebCore             	0x00000007d225542d JSC::JSValue WebCore::toJS<WebCore::IDLUndefined, WebCore::jsWebGLRenderingContextPrototypeFunction_compileShaderBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()>(JSC::JSGlobalObject&, JSC::ThrowScope&, WebCore::jsWebGLRenderingContextPrototypeFunction_compileShaderBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()&&) + 29 (JSDOMConvertBase.h:165)
38  com.apple.WebCore             	0x00000007d225534c WebCore::jsWebGLRenderingContextPrototypeFunction_compileShaderBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*) + 812 (JSWebGLRenderingContext.cpp:5015)
39  com.apple.WebCore             	0x00000007d2254fec long long WebCore::IDLOperation<WebCore::JSWebGLRenderingContext>::call<&(WebCore::jsWebGLRenderingContextPrototypeFunction_compileShaderBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)), (WebCore::CastedThisErrorBehavior)0>(JSC::JSGlobalObject&, JSC::CallFrame&, char const*) + 700 (JSDOMOperation.h:55)
40  com.apple.WebCore             	0x00000007d22478c4 WebCore::jsWebGLRenderingContextPrototypeFunction_compileShader(JSC::JSGlobalObject*, JSC::CallFrame*) + 36 (JSWebGLRenderingContext.cpp:5020)
41  ???                           	0x0000438e90a011d8 0 + 74279590826456
42  com.apple.JavaScriptCore      	0x00000007ee777a45 llint_entry + 138563 (LowLevelInterpreter.asm:1093)
43  com.apple.JavaScriptCore      	0x00000007ee777a45 llint_entry + 138563 (LowLevelInterpreter.asm:1093)
44  com.apple.JavaScriptCore      	0x00000007ee777a45 llint_entry + 138563 (LowLevelInterpreter.asm:1093)
45  com.apple.JavaScriptCore      	0x00000007ee755a10 vmEntryToJavaScript + 289 (LowLevelInterpreter64.asm:316)
46  com.apple.JavaScriptCore      	0x00000007ef618e3b JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 235 (JITCodeInlines.h:42)
47  com.apple.JavaScriptCore      	0x00000007ef6195f7 JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 1815 (Interpreter.cpp:907)
48  com.apple.JavaScriptCore      	0x00000007ef9878ad JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 221 (CallData.cpp:57)
49  com.apple.JavaScriptCore      	0x00000007ef98798f JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 207 (CallData.cpp:64)
50  com.apple.JavaScriptCore      	0x00000007ef987c72 JSC::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 130 (CallData.cpp:85)
51  com.apple.WebCore             	0x00000007d3335cae WebCore::JSExecState::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 110 (JSExecState.h:73)
52  com.apple.WebCore             	0x00000007d3353c2b WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext&, WebCore::Event&) + 2171 (JSEventListener.cpp:186)
53  com.apple.WebCore             	0x00000007d3a79147 WebCore::EventTarget::innerInvokeEventListeners(WebCore::Event&, WTF::Vector<WTF::RefPtr<WebCore::RegisteredEventListener, WTF::RawPtrTraits<WebCore::RegisteredEventListener>, WTF::DefaultRefDerefTraits<WebCore::RegisteredEventListener> >, 1ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>, WebCore::EventTarget::EventInvokePhase) + 1063 (EventTarget.cpp:344)
54  com.apple.WebCore             	0x00000007d3a78ba4 WebCore::EventTarget::fireEventListeners(WebCore::Event&, WebCore::EventTarget::EventInvokePhase) + 356 (EventTarget.cpp:276)
55  com.apple.WebCore             	0x00000007d3a78a25 WebCore::EventTarget::dispatchEvent(WebCore::Event&) + 357 (EventTarget.cpp:234)
56  com.apple.WebCore             	0x00000007d59d896b WebCore::XMLHttpRequest::dispatchEvent(WebCore::Event&) + 347 (XMLHttpRequest.cpp:1079)
57  com.apple.WebCore             	0x00000007d59d9312 WebCore::XMLHttpRequestProgressEventThrottle::dispatchEventWhenPossible(WebCore::Event&) + 114 (XMLHttpRequestProgressEventThrottle.cpp:86)
58  com.apple.WebCore             	0x00000007d59d2c1b WebCore::XMLHttpRequestProgressEventThrottle::dispatchReadyStateChangeEvent(WebCore::Event&, WebCore::ProgressEventAction) + 59 (XMLHttpRequestProgressEventThrottle.cpp:78)
59  com.apple.WebCore             	0x00000007d59d2b5c WebCore::XMLHttpRequest::callReadyStateChangeListener() + 284 (XMLHttpRequest.cpp:313)
60  com.apple.WebCore             	0x00000007d59d2906 WebCore::XMLHttpRequest::changeState(WebCore::XMLHttpRequest::State) + 246 (XMLHttpRequest.cpp:300)
61  com.apple.WebCore             	0x00000007d59d79cf WebCore::XMLHttpRequest::didFinishLoading(unsigned long) + 287 (XMLHttpRequest.cpp:928)
62  com.apple.WebCore             	0x00000007d44ff463 WebCore::DocumentThreadableLoader::didFinishLoading(unsigned long) + 1043 (DocumentThreadableLoader.cpp:496)
63  com.apple.WebCore             	0x00000007d44fee5f WebCore::DocumentThreadableLoader::notifyFinished(WebCore::CachedResource&, WebCore::NetworkLoadMetrics const&) + 383 (DocumentThreadableLoader.cpp:468)
64  com.apple.WebCore             	0x00000007d46377ba WebCore::CachedResource::checkNotify(WebCore::NetworkLoadMetrics const&) + 138 (CachedResource.cpp:379)
65  com.apple.WebCore             	0x00000007d46332ac WebCore::CachedResource::finishLoading(WebCore::SharedBuffer*, WebCore::NetworkLoadMetrics const&) + 60 (CachedResource.cpp:395)
66  com.apple.WebCore             	0x00000007d463482c WebCore::CachedRawResource::finishLoading(WebCore::SharedBuffer*, WebCore::NetworkLoadMetrics const&) + 332 (CachedRawResource.cpp:123)
67  com.apple.WebCore             	0x00000007d45badb4 WebCore::SubresourceLoader::didFinishLoading(WebCore::NetworkLoadMetrics const&) + 1684 (SubresourceLoader.cpp:736)
68  com.apple.WebKit              	0x00000007c1d7d64a WebKit::WebResourceLoader::didFinishResourceLoad(WebCore::NetworkLoadMetrics const&) + 778 (WebResourceLoader.cpp:227)
69  com.apple.WebKit              	0x00000007c2378e30 void IPC::callMemberFunctionImpl<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&), std::__1::tuple<WebCore::NetworkLoadMetrics>, 0ul>(WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&), std::__1::tuple<WebCore::NetworkLoadMetrics>&&, std::__1::integer_sequence<unsigned long, 0ul>) + 160 (HandleMessage.h:43)
70  com.apple.WebKit              	0x00000007c2378d80 void IPC::callMemberFunction<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&), std::__1::tuple<WebCore::NetworkLoadMetrics>, std::__1::integer_sequence<unsigned long, 0ul> >(std::__1::tuple<WebCore::NetworkLoadMetrics>&&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&)) + 112 (HandleMessage.h:49)
71  com.apple.WebKit              	0x00000007c2376b2e void IPC::handleMessage<Messages::WebResourceLoader::DidFinishResourceLoad, WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&)>(IPC::Decoder&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebCore::NetworkLoadMetrics const&)) + 190 (HandleMessage.h:121)
72  com.apple.WebKit              	0x00000007c237649e WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::Decoder&) + 494 (WebResourceLoaderMessageReceiver.cpp:56)
73  com.apple.WebKit              	0x00000007c1d3e930 WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 144 (NetworkProcessConnection.cpp:94)
74  com.apple.WebKit              	0x00000007c0084024 IPC::Connection::dispatchMessage(IPC::Decoder&) + 516 (Connection.cpp:1020)
75  com.apple.WebKit              	0x00000007c00847ec IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 636 (Connection.cpp:1065)
76  com.apple.WebKit              	0x00000007c0084e10 IPC::Connection::dispatchOneIncomingMessage() + 208 (Connection.cpp:1134)
77  com.apple.WebKit              	0x00000007c00a3368 IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_9::operator()() + 88 (Connection.cpp:989)
78  com.apple.WebKit              	0x00000007c00a325e WTF::Detail::CallableWrapper<IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_9, void>::call() + 30 (Function.h:52)
79  com.apple.JavaScriptCore      	0x00000007ee1aec62 WTF::Function<void ()>::operator()() const + 130 (Function.h:83)
80  com.apple.JavaScriptCore      	0x00000007ee226de5 WTF::RunLoop::performWork() + 341 (RunLoop.cpp:133)
81  com.apple.JavaScriptCore      	0x00000007ee22a761 WTF::RunLoop::performWork(void*) + 33 (RunLoopCF.cpp:46)
82  com.apple.CoreFoundation      	0x00007fff2045be2c __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
83  com.apple.CoreFoundation      	0x00007fff2045bd94 __CFRunLoopDoSource0 + 180
84  com.apple.CoreFoundation      	0x00007fff2045bb14 __CFRunLoopDoSources0 + 242
85  com.apple.CoreFoundation      	0x00007fff2045a53c __CFRunLoopRun + 893
86  com.apple.CoreFoundation      	0x00007fff20459afc CFRunLoopRunSpecific + 563
87  com.apple.Foundation          	0x00007fff211e3bb7 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 212
88  com.apple.Foundation          	0x00007fff21271a81 -[NSRunLoop(NSRunLoop) run] + 76
89  libxpc.dylib                  	0x00007fff200b138d _xpc_objc_main + 825
90  libxpc.dylib                  	0x00007fff200b0cd3 xpc_main + 116
91  com.apple.WebKit              	0x00000007c0d628e1 WebKit::XPCServiceMain(int, char const**) + 1025 (XPCServiceMain.mm:209)
92  com.apple.WebKit              	0x00000007c2404c6b WKXPCServiceMain + 27 (WKMain.mm:33)
93  com.apple.WebKit.WebContent   	0x0000000104b6aea2 main + 34 (AuxiliaryProcessMain.cpp:30)
94  libdyld.dylib                 	0x00007fff2037df3d start + 1

[Kimmo Kinnunen]

Skip the previous comment, it was of wrong crash.

This one is:


Process:               com.apple.WebKit.WebContent.Development [86645]
Path:                  /Users/USER/*/com.apple.WebKit.WebContent.Development
Identifier:            com.apple.WebKit.WebContent
Version:               612+ (612.1.9+)
Code Type:             X86-64 (Native)
Parent Process:        ??? [1]
User ID:               501

Date/Time:             2021-03-30 14:21:48.603 +0300
OS Version:            macOS 11.3 (20E201)
Report Version:        12
Bridge OS Version:     5.3 (18P4544)
Anonymous UUID:        ADEB2724-109F-6379-8A4B-657A6A37BBA8

Sleep/Wake UUID:       D48EB9D4-6C73-426F-AF12-26DC79BB8DC1

Time Awake Since Boot: 110000 seconds
Time Since Wake:       5400 seconds

System Integrity Protection: enabled

Crashed Thread:        0  Dispatch queue: com.apple.main-thread

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x00000000bbadbeef
Exception Note:        EXC_CORPSE_NOTIFY

Termination Signal:    Segmentation fault: 11
Termination Reason:    Namespace SIGNAL, Code 0xb
Terminating Process:   exc handler [86645]

VM Regions Near 0xbbadbeef:
--> 
    __TEXT                      108c0e000-108c12000    [   16K] r-x/r-x SM=COW  /Users/*/*.Development

Application Specific Information:
CRASHING TEST: webgl/1.0.x/conformance/textures/misc/texture-with-flip-y-and-premultiply-alpha.html

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore      	0x00000001420346ae WTFCrash + 14 (Assertions.cpp:295)
1   com.apple.WebCore             	0x0000000125013e4b WTFCrashWithInfo(int, char const*, char const*, int) + 27 (Assertions.h:671)
2   com.apple.WebCore             	0x000000012900f464 WebCore::getDataFormat(unsigned int, unsigned int) + 1364 (GraphicsContextGL.cpp:136)
3   com.apple.WebCore             	0x000000012900ecbd WebCore::GraphicsContextGL::extractTextureData(unsigned int, unsigned int, unsigned int, unsigned int, WebCore::GraphicsContextGL::PixelStoreParams const&, bool, bool, void const*, WTF::Vector<unsigned char, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&) + 77 (GraphicsContextGL.cpp:791)
4   com.apple.WebCore             	0x000000012857f5d9 WebCore::WebGLRenderingContextBase::texImageArrayBufferViewHelper(WebCore::WebGLRenderingContextBase::TexImageFunctionID, unsigned int, int, int, int, int, int, int, unsigned int, unsigned int, int, int, int, WTF::RefPtr<JSC::ArrayBufferView, WTF::RawPtrTraits<JSC::ArrayBufferView>, WTF::DefaultRefDerefTraits<JSC::ArrayBufferView> >&&, WebCore::WebGLRenderingContextBase::NullDisposition, unsigned int) + 1529 (WebGLRenderingContextBase.cpp:4981)
5   com.apple.WebCore             	0x00000001285816fc WebCore::WebGLRenderingContextBase::texImage2D(unsigned int, int, unsigned int, int, int, int, unsigned int, unsigned int, WTF::RefPtr<JSC::ArrayBufferView, WTF::RawPtrTraits<JSC::ArrayBufferView>, WTF::DefaultRefDerefTraits<JSC::ArrayBufferView> >&&) + 268 (WebGLRenderingContextBase.cpp:5226)
6   com.apple.WebCore             	0x00000001267614e1 WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2D1Body(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()::operator()() const + 241 (JSWebGLRenderingContext.cpp:5062)
7   com.apple.WebCore             	0x000000012676110d JSC::JSValue WebCore::toJS<WebCore::IDLUndefined, WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2D1Body(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()>(JSC::JSGlobalObject&, JSC::ThrowScope&, WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2D1Body(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)::'lambda'()&&) + 29 (JSDOMConvertBase.h:165)
8   com.apple.WebCore             	0x0000000126760dcd WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2D1Body(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*) + 2733 (JSWebGLRenderingContext.cpp:5062)
9   com.apple.WebCore             	0x000000012675f9eb WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2DOverloadDispatcher(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*) + 299 (JSWebGLRenderingContext.cpp:5116)
10  com.apple.WebCore             	0x000000012675f88c long long WebCore::IDLOperation<WebCore::JSWebGLRenderingContext>::call<&(WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2DOverloadDispatcher(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::JSWebGLRenderingContext*)), (WebCore::CastedThisErrorBehavior)0>(JSC::JSGlobalObject&, JSC::CallFrame&, char const*) + 700 (JSDOMOperation.h:55)
11  com.apple.WebCore             	0x00000001267518f4 WebCore::jsWebGLRenderingContextPrototypeFunction_texImage2D(JSC::JSGlobalObject*, JSC::CallFrame*) + 36 (JSWebGLRenderingContext.cpp:5124)
12  ???                           	0x000054c3eb0011d8 0 + 93200438006232
13  com.apple.JavaScriptCore      	0x000000014262599d llint_entry + 138395 (LowLevelInterpreter.asm:1093)
14  com.apple.JavaScriptCore      	0x0000000142625a45 llint_entry + 138563 (LowLevelInterpreter.asm:1093)
15  com.apple.JavaScriptCore      	0x0000000142603a10 vmEntryToJavaScript + 289 (LowLevelInterpreter64.asm:316)
16  com.apple.JavaScriptCore      	0x00000001434c6e3b JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 235 (JITCodeInlines.h:42)
17  com.apple.JavaScriptCore      	0x00000001434c6398 JSC::Interpreter::executeProgram(JSC::SourceCode const&, JSC::JSGlobalObject*, JSC::JSObject*) + 6600 (Interpreter.cpp:839)
18  com.apple.JavaScriptCore      	0x00000001438a4b17 JSC::evaluate(JSC::JSGlobalObject*, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 567 (Completion.cpp:137)
19  com.apple.JavaScriptCore      	0x00000001438a4c6a JSC::profiledEvaluate(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 74 (Completion.cpp:152)
20  com.apple.WebCore             	0x00000001278efebc WebCore::JSExecState::profiledEvaluate(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 76 (JSExecState.h:79)
21  com.apple.WebCore             	0x00000001278efa9e WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld&) + 398 (ScriptController.cpp:148)
22  com.apple.WebCore             	0x00000001278ef8c9 WebCore::ScriptController::evaluateInWorldIgnoringException(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld&) + 41 (ScriptController.cpp:121)
23  com.apple.WebCore             	0x00000001278f01c5 WebCore::ScriptController::evaluateIgnoringException(WebCore::ScriptSourceCode const&) + 53 (ScriptController.cpp:167)
24  com.apple.WebCore             	0x000000012804cb76 WebCore::ScriptElement::executeClassicScript(WebCore::ScriptSourceCode const&) + 1478 (ScriptElement.cpp:405)
25  com.apple.WebCore             	0x000000012804ab8b WebCore::ScriptElement::prepareScript(WTF::TextPosition const&, WebCore::ScriptElement::LegacyTypeSupport) + 2699 (ScriptElement.cpp:271)
26  com.apple.WebCore             	0x00000001285dfc76 WebCore::HTMLScriptRunner::runScript(WebCore::ScriptElement&, WTF::TextPosition const&) + 390 (HTMLScriptRunner.cpp:250)
27  com.apple.WebCore             	0x00000001285dfa77 WebCore::HTMLScriptRunner::execute(WTF::Ref<WebCore::ScriptElement, WTF::RawPtrTraits<WebCore::ScriptElement> >&&, WTF::TextPosition const&) + 71 (HTMLScriptRunner.cpp:140)
28  com.apple.WebCore             	0x00000001285be181 WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder() + 897 (HTMLDocumentParser.cpp:244)
29  com.apple.WebCore             	0x00000001285be605 WebCore::HTMLDocumentParser::pumpTokenizerLoop(WebCore::HTMLDocumentParser::SynchronousMode, bool, WebCore::PumpSession&) + 133 (HTMLDocumentParser.cpp:263)
30  com.apple.WebCore             	0x00000001285bd97f WebCore::HTMLDocumentParser::pumpTokenizer(WebCore::HTMLDocumentParser::SynchronousMode) + 495 (HTMLDocumentParser.cpp:322)
31  com.apple.WebCore             	0x00000001285bd116 WebCore::HTMLDocumentParser::pumpTokenizerIfPossible(WebCore::HTMLDocumentParser::SynchronousMode) + 198 (HTMLDocumentParser.cpp:196)
32  com.apple.WebCore             	0x00000001285bf3b4 WebCore::HTMLDocumentParser::append(WTF::RefPtr<WTF::StringImpl, WTF::RawPtrTraits<WTF::StringImpl>, WTF::DefaultRefDerefTraits<WTF::StringImpl> >&&) + 548 (HTMLDocumentParser.cpp:437)
33  com.apple.WebCore             	0x0000000127e4e9e6 WebCore::DecodedDataDocumentParser::appendBytes(WebCore::DocumentWriter&, char const*, unsigned long) + 150 (DecodedDataDocumentParser.cpp:50)
34  com.apple.WebCore             	0x0000000128a0b14d WebCore::DocumentWriter::addData(char const*, unsigned long) + 365 (DocumentWriter.cpp:263)
35  com.apple.WebCore             	0x00000001289bd7ae WebCore::DocumentLoader::commitData(char const*, unsigned long) + 2414 (DocumentLoader.cpp:1235)
36  com.apple.WebKit              	0x000000011750a0c2 WebKit::WebFrameLoaderClient::committedLoad(WebCore::DocumentLoader*, char const*, int) + 82 (WebFrameLoaderClient.cpp:1147)
37  com.apple.WebCore             	0x00000001289c3ca1 WebCore::DocumentLoader::commitLoad(char const*, int) + 209 (DocumentLoader.cpp:1117)
38  com.apple.WebCore             	0x00000001289c3bc8 WebCore::DocumentLoader::dataReceived(char const*, int) + 568 (DocumentLoader.cpp:1268)
39  com.apple.WebCore             	0x00000001289c4578 WebCore::DocumentLoader::dataReceived(WebCore::CachedResource&, char const*, int) + 152 (DocumentLoader.cpp:1241)
40  com.apple.WebCore             	0x0000000128b3e59e WebCore::CachedRawResource::notifyClientsDataWasReceived(char const*, unsigned int) + 142 (CachedRawResource.cpp:139)
41  com.apple.WebCore             	0x0000000128b3e3a5 WebCore::CachedRawResource::updateBuffer(WebCore::SharedBuffer&) + 357 (CachedRawResource.cpp:76)
42  com.apple.WebCore             	0x0000000128ac86ff WebCore::SubresourceLoader::didReceiveDataOrBuffer(char const*, int, WTF::RefPtr<WebCore::SharedBuffer, WTF::RawPtrTraits<WebCore::SharedBuffer>, WTF::DefaultRefDerefTraits<WebCore::SharedBuffer> >&&, long long, WebCore::DataPayloadType) + 671 (SubresourceLoader.cpp:537)
43  com.apple.WebCore             	0x0000000128ac8451 WebCore::SubresourceLoader::didReceiveData(char const*, unsigned int, long long, WebCore::DataPayloadType) + 97 (SubresourceLoader.cpp:505)
44  com.apple.WebKit              	0x000000011740f2ba WebKit::WebResourceLoader::didReceiveData(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long) + 1018 (WebResourceLoader.cpp:210)
45  com.apple.WebKit              	0x0000000117a0ad09 void IPC::callMemberFunctionImpl<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long), std::__1::tuple<IPC::ArrayReference<unsigned char, 18446744073709551615ul>, long long>, 0ul, 1ul>(WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long), std::__1::tuple<IPC::ArrayReference<unsigned char, 18446744073709551615ul>, long long>&&, std::__1::integer_sequence<unsigned long, 0ul, 1ul>) + 185 (HandleMessage.h:43)
46  com.apple.WebKit              	0x0000000117a0ac40 void IPC::callMemberFunction<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long), std::__1::tuple<IPC::ArrayReference<unsigned char, 18446744073709551615ul>, long long>, std::__1::integer_sequence<unsigned long, 0ul, 1ul> >(std::__1::tuple<IPC::ArrayReference<unsigned char, 18446744073709551615ul>, long long>&&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long)) + 112 (HandleMessage.h:49)
47  com.apple.WebKit              	0x0000000117a08a66 void IPC::handleMessage<Messages::WebResourceLoader::DidReceiveData, WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long)>(IPC::Decoder&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long)) + 150 (HandleMessage.h:121)
48  com.apple.WebKit              	0x0000000117a08442 WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::Decoder&) + 402 (WebResourceLoaderMessageReceiver.cpp:54)
49  com.apple.WebKit              	0x00000001173d0930 WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 144 (NetworkProcessConnection.cpp:94)
50  com.apple.WebKit              	0x0000000115716024 IPC::Connection::dispatchMessage(IPC::Decoder&) + 516 (Connection.cpp:1020)
51  com.apple.WebKit              	0x00000001157167ec IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 636 (Connection.cpp:1065)
52  com.apple.WebKit              	0x0000000115716e10 IPC::Connection::dispatchOneIncomingMessage() + 208 (Connection.cpp:1134)
53  com.apple.WebKit              	0x0000000115735368 IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_9::operator()() + 88 (Connection.cpp:989)
54  com.apple.WebKit              	0x000000011573525e WTF::Detail::CallableWrapper<IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_9, void>::call() + 30 (Function.h:52)
55  com.apple.JavaScriptCore      	0x000000014205cc62 WTF::Function<void ()>::operator()() const + 130 (Function.h:83)
56  com.apple.JavaScriptCore      	0x00000001420d4de5 WTF::RunLoop::performWork() + 341 (RunLoop.cpp:133)
57  com.apple.JavaScriptCore      	0x00000001420d8761 WTF::RunLoop::performWork(void*) + 33 (RunLoopCF.cpp:46)
58  com.apple.CoreFoundation      	0x00007fff2045be2c __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
59  com.apple.CoreFoundation      	0x00007fff2045bd94 __CFRunLoopDoSource0 + 180
60  com.apple.CoreFoundation      	0x00007fff2045bb14 __CFRunLoopDoSources0 + 242
61  com.apple.CoreFoundation      	0x00007fff2045a53c __CFRunLoopRun + 893
62  com.apple.CoreFoundation      	0x00007fff20459afc CFRunLoopRunSpecific + 563
63  com.apple.Foundation          	0x00007fff211e3bb7 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 212
64  com.apple.Foundation          	0x00007fff21271a81 -[NSRunLoop(NSRunLoop) run] + 76
65  libxpc.dylib                  	0x00007fff200b138d _xpc_objc_main + 825
66  libxpc.dylib                  	0x00007fff200b0cd3 xpc_main + 116
67  com.apple.WebKit              	0x00000001163f48e1 WebKit::XPCServiceMain(int, char const**) + 1025 (XPCServiceMain.mm:209)
68  com.apple.WebKit              	0x0000000117a96c6b WKXPCServiceMain + 27 (WKMain.mm:33)
69  com.apple.WebKit.WebContent   	0x0000000108c11ea2 main + 34 (AuxiliaryProcessMain.cpp:30)
70  libdyld.dylib                 	0x00007fff2037df3d start + 1

[Kimmo Kinnunen]

The switch is asserting with at least RGBA 0x1908 case.
So perhaps the validation is missing this

[Radar WebKit Bug Importer]

<rdar://problem/76261913>

[Kimmo Kinnunen]

*** Bug 223329 has been marked as a duplicate of this bug. ***

[Kimmo Kinnunen]

Created attachment 432467 [details]
Patch

[Kimmo Kinnunen]

Created attachment 432468 [details]
Patch

[Kenneth Russell]

Comment on attachment 432468 [details]
Patch

Looks good! r+

[EWS]

Committed r280587 (240209@main): <https://commits.webkit.org/240209@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 432468 [details].