237295 – [ iOS GPUP ] fast/mediastream/video-rotation-gpu-process-crash.html is a flaky crash

RESOLVED DUPLICATE of bug 238618 237295

[ iOS GPUP ] fast/mediastream/video-rotation-gpu-process-crash.html is a flaky crash

https://bugs.webkit.org/show_bug.cgi?id=237295

Summary [ iOS GPUP ] fast/mediastream/video-rotation-gpu-process-crash.html is a flak...

Dawn Morningstar

Reported 2022-02-28 17:22:02 PST

fast/mediastream/video-rotation-gpu-process-crash.html

Attachments
expectations (1.49 KB, patch) 2022-02-28 18:28 PST, Dawn Morningstar	ews-feeder: commit-queue-	Details Formatted Diff Diff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.

Dawn Morningstar

Comment 1 2022-02-28 17:23:13 PST

fast/mediastream/video-rotation-gpu-process-crash.html is a flaky crash on iOS gpuprocess specifically. Appears to be similar to https://bugs.webkit.org/show_bug.cgi?id=237164.

Dawn Morningstar

Comment 2 2022-02-28 17:28:47 PST

HISTORY: https://results.webkit.org/?suite=layout-tests&test=fast%2Fmediastream%2Fvideo-rotation-gpu-process-crash.html CRASH-LOG: https://build.webkit.org/results/Apple-iOS-15-Simulator-Release-GPUProcess-arm64-WK2-Tests/r290597%20(1151)/fast/mediastream/video-rotation-gpu-process-crash-crash-log.txt System Integrity Protection: enabled Crashed Thread: 0 Dispatch queue: com.apple.main-thread Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000018 Exception Note: EXC_CORPSE_NOTIFY Termination Signal: Segmentation fault: 11 Termination Reason: Namespace SIGNAL, Code 0xb Terminating Process: exc handler [97072]

Radar WebKit Bug Importer

Comment 3 2022-02-28 17:29:23 PST

<rdar://problem/89591901>

Dawn Morningstar

Comment 4 2022-02-28 18:28:05 PST

Created attachment 453460 [details] expectations

Robert Jenner

Comment 5 2022-02-28 18:38:26 PST

Comment on attachment 453460 [details] expectations Clearing flags on attachment: 453460 Committed r290624 (?): <https://commits.webkit.org/r290624>

Dawn Morningstar

Comment 6 2022-02-28 18:47:45 PST

(In reply to Matteo Flores from comment #2) > HISTORY: > https://results.webkit.org/?suite=layout- > tests&test=fast%2Fmediastream%2Fvideo-rotation-gpu-process-crash.html > > CRASH-LOG: > https://build.webkit.org/results/Apple-iOS-15-Simulator-Release-GPUProcess- > arm64-WK2-Tests/r290597%20(1151)/fast/mediastream/video-rotation-gpu-process- > crash-crash-log.txt > > System Integrity Protection: enabled > > Crashed Thread: 0 Dispatch queue: com.apple.main-thread > > Exception Type: EXC_BAD_ACCESS (SIGSEGV) > Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000018 > Exception Note: EXC_CORPSE_NOTIFY > > Termination Signal: Segmentation fault: 11 > Termination Reason: Namespace SIGNAL, Code 0xb > Terminating Process: exc handler [97072] CRASH-LOG TEXT: Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebKit 0x000000010df9aec0 has_value + 0 (optional:295) [inlined] 1 com.apple.WebKit 0x000000010df9aec0 operator bool + 0 (optional:938) [inlined] 2 com.apple.WebKit 0x000000010df9aec0 colorSpace + 0 (ShareableBitmapCG.cpp:60) [inlined] 3 com.apple.WebKit 0x000000010df9aec0 WebKit::wantsExtendedRange(WebKit::ShareableBitmap::Configuration const&) + 8 (ShareableBitmapCG.cpp:65) 4 com.apple.WebKit 0x000000010df9af10 calculateBytesPerPixel + 8 (ShareableBitmapCG.cpp:105) [inlined] 5 com.apple.WebKit 0x000000010df9af10 WebKit::ShareableBitmap::createGraphicsContext() + 52 (ShareableBitmapCG.cpp:110) 6 com.apple.WebKit 0x000000010df9b094 WebKit::ShareableBitmap::makeCGImageCopy() + 28 (ShareableBitmapCG.cpp:167) 7 com.apple.WebKit 0x000000010dce18d4 operator() + 28 (RemoteLayerBackingStore.mm:483) [inlined] 8 com.apple.WebKit 0x000000010dce18d4 __invoke_constexpr<WTF::Visitor<(lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)>, WebKit::ShareableBitmap::Handle &> + 28 (type_traits:3700) [inlined] 9 com.apple.WebKit 0x000000010dce18d4 operator()<std::__variant_detail::__alt<0, WebKit::ShareableBitmap::Handle> &> + 32 (variant:615) [inlined] 10 com.apple.WebKit 0x000000010dce18d4 __invoke_constexpr<std::__variant_detail::__visitation::__variant::__value_visitor<WTF::Visitor<(lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)> >, std::__variant_detail::__alt<0, WebKit::ShareableBitmap::Handle> &> + 32 (type_traits:3700) [inlined] 11 com.apple.WebKit 0x000000010dce18d4 decltype(auto) std::__1::__variant_detail::__visitation::__base::__dispatcher<0ul>::__dispatch<std::__1::__variant_detail::__visitation::__variant::__value_visitor<WTF::Visitor<WebKit::RemoteLayerBackingStore::applyBackingStoreToLayer(CALayer*, WebKit::RemoteLayerBackingStore::LayerContentsType, bool)::$_1, WebKit::RemoteLayerBackingStore::applyBackingStoreToLayer(CALayer*, WebKit::RemoteLayerBackingStore::LayerContentsType, bool)::$_2> >&&, std::__1::__variant_detail::__base<(std::__1::__variant_detail::_Trait)1, WebKit::ShareableBitmap::Handle, WTF::MachSendRight>&>(std::__1::__variant_detail::__visitation::__variant::__value_visitor<WTF::Visitor<WebKit::RemoteLayerBackingStore::applyBackingStoreToLayer(CALayer*, WebKit::RemoteLayerBackingStore::LayerContentsType, bool)::$_1, WebKit::RemoteLayerBackingStore::applyBackingStoreToLayer(CALayer*, WebKit::RemoteLayerBackingStore::LayerContentsType, bool)::$_2> >&&, std::__1::__variant_detail::__base<(std::__1::__variant_detail::_Trait)1, WebKit::ShareableBitmap::Handle, WTF::MachSendRight>&) + 48 (variant:497) 12 com.apple.WebKit 0x000000010dcdf60c __visit_alt<std::__variant_detail::__visitation::__variant::__value_visitor<WTF::Visitor<(lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)> >, std::__variant_detail::__impl<WebKit::ShareableBitmap::Handle, WTF::MachSendRight> &> + 20 (variant:460) [inlined] 13 com.apple.WebKit 0x000000010dcdf60c __visit_alt<std::__variant_detail::__visitation::__variant::__value_visitor<WTF::Visitor<(lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)> >, std::variant<WebKit::ShareableBitmap::Handle, WTF::MachSendRight> &> + 20 (variant:567) [inlined] 14 com.apple.WebKit 0x000000010dcdf60c __visit_value<WTF::Visitor<(lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)>, std::variant<WebKit::ShareableBitmap::Handle, WTF::MachSendRight> &> + 24 (variant:585) [inlined] 15 com.apple.WebKit 0x000000010dcdf60c visit<WTF::Visitor<(lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)>, std::variant<WebKit::ShareableBitmap::Handle, WTF::MachSendRight> &> + 24 (variant:1654) [inlined] 16 com.apple.WebKit 0x000000010dcdf60c switchOn<std::variant<WebKit::ShareableBitmap::Handle, WTF::MachSendRight> &, (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:481:9), (lambda at /Volumes/Data/worker/ios-simulator-15-release/build/Source/WebKit/Shared/RemoteLayerTree/RemoteLayerBackingStore.mm:485:9)> + 24 (StdLibExtras.h:392) [inlined] 17 com.apple.WebKit 0x000000010dcdf60c WebKit::RemoteLayerBackingStore::applyBackingStoreToLayer(CALayer*, WebKit::RemoteLayerBackingStore::LayerContentsType, bool) + 112 (RemoteLayerBackingStore.mm:480) 18 com.apple.WebKit 0x000000010dcec0cc WebKit::RemoteLayerTreePropertyApplier::applyPropertiesToLayer(CALayer*, WebKit::RemoteLayerTreeHost*, WebKit::RemoteLayerTreeTransaction::LayerProperties const&, WebKit::RemoteLayerBackingStore::LayerContentsType) + 1556 (RemoteLayerTreePropertyApplier.mm:258) 19 com.apple.WebKit 0x000000010dcec20c WebKit::RemoteLayerTreePropertyApplier::applyProperties(WebKit::RemoteLayerTreeNode&, WebKit::RemoteLayerTreeHost*, WebKit::RemoteLayerTreeTransaction::LayerProperties const&, WTF::HashMap<unsigned long long, std::__1::unique_ptr<WebKit::RemoteLayerTreeNode, std::__1::default_delete<WebKit::RemoteLayerTreeNode> >, WTF::DefaultHash<unsigned long long>, WTF::HashTraits<unsigned long long>, WTF::HashTraits<std::__1::unique_ptr<WebKit::RemoteLayerTreeNode, std::__1::default_delete<WebKit::RemoteLayerTreeNode> > >, WTF::HashTableTraits> const&, WebKit::RemoteLayerBackingStore::LayerContentsType) + 40 (RemoteLayerTreePropertyApplier.mm:300) 20 com.apple.WebKit 0x000000010def5b08 WebKit::RemoteLayerTreeHost::updateLayerTree(WebKit::RemoteLayerTreeTransaction const&, float) + 936 (RemoteLayerTreeHost.mm:151) 21 com.apple.WebKit 0x000000010def5520 WebKit::RemoteLayerTreeDrawingAreaProxy::commitLayerTree(WebKit::RemoteLayerTreeTransaction const&, WebKit::RemoteScrollingCoordinatorTransaction const&) + 104 (RemoteLayerTreeDrawingAreaProxy.mm:232) 22 com.apple.WebKit 0x000000010dbf4fd4 callMemberFunctionImpl<WebKit::RemoteLayerTreeDrawingAreaProxy, void (WebKit::RemoteLayerTreeDrawingAreaProxy::*)(const WebKit::RemoteLayerTreeTransaction &, const WebKit::RemoteScrollingCoordinatorTransaction &), std::tuple<WebKit::RemoteLayerTreeTransaction, WebKit::RemoteScrollingCoordinatorTransaction>, 0, 1> + 16 (HandleMessage.h:125) [inlined] 23 com.apple.WebKit 0x000000010dbf4fd4 callMemberFunction<WebKit::RemoteLayerTreeDrawingAreaProxy, void (WebKit::RemoteLayerTreeDrawingAreaProxy::*)(const WebKit::RemoteLayerTreeTransaction &, const WebKit::RemoteScrollingCoordinatorTransaction &), std::tuple<WebKit::RemoteLayerTreeTransaction, WebKit::RemoteScrollingCoordinatorTransaction>, std::integer_sequence<unsigned long, 0, 1> > + 16 (HandleMessage.h:131) [inlined] 24 com.apple.WebKit 0x000000010dbf4fd4 handleMessage<Messages::RemoteLayerTreeDrawingAreaProxy::CommitLayerTree, WebKit::RemoteLayerTreeDrawingAreaProxy, void (WebKit::RemoteLayerTreeDrawingAreaProxy::*)(const WebKit::RemoteLayerTreeTransaction &, const WebKit::RemoteScrollingCoordinatorTransaction &)> + 36 (HandleMessage.h:196) [inlined] 25 com.apple.WebKit 0x000000010dbf4fd4 WebKit::RemoteLayerTreeDrawingAreaProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 260 (RemoteLayerTreeDrawingAreaProxyMessageReceiver.cpp:48) 26 com.apple.WebKit 0x000000010de92f7c IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::Decoder&) + 252 (MessageReceiverMap.cpp:129) 27 com.apple.WebKit 0x000000010e065084 WebKit::WebProcessProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 32 (WebProcessProxy.cpp:856) 28 com.apple.WebKit 0x000000010de8c330 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 308 (Connection.cpp:1137) 29 com.apple.WebKit 0x000000010de8ba20 IPC::Connection::dispatchIncomingMessages() + 356 (Connection.cpp:1241) 30 com.apple.JavaScriptCore 0x000000010765ec84 operator() + 16 (Function.h:82) [inlined] 31 com.apple.JavaScriptCore 0x000000010765ec84 WTF::RunLoop::performWork() + 168 (RunLoop.cpp:133) 32 com.apple.JavaScriptCore 0x000000010765f658 WTF::RunLoop::performWork(void*) + 36 (RunLoopCF.cpp:46) 33 com.apple.CoreFoundation 0x0000000106cb1220 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 24 34 com.apple.CoreFoundation 0x0000000106cb1128 __CFRunLoopDoSource0 + 200 35 com.apple.CoreFoundation 0x0000000106cb04b4 __CFRunLoopDoSources0 + 256 36 com.apple.CoreFoundation 0x0000000106caaafc __CFRunLoopRun + 744 37 com.apple.CoreFoundation 0x0000000106caa308 CFRunLoopRunSpecific + 572 38 com.apple.Foundation 0x00000001056aea68 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 232 39 org.webkit.WebKitTestRunnerApp 0x0000000102dc9d60 WTR::TestController::platformRunUntil(bool&, WTF::Seconds) + 200 40 org.webkit.WebKitTestRunnerApp 0x0000000102dd28ac WTR::TestInvocation::invoke() + 324 41 org.webkit.WebKitTestRunnerApp 0x0000000102db9ef0 WTR::TestController::runTest(char const*) + 312 42 org.webkit.WebKitTestRunnerApp 0x0000000102dba194 WTR::TestController::runTestingServerLoop() + 124 43 org.webkit.WebKitTestRunnerApp 0x0000000102db5588 WTR::TestController::TestController(int, char const**) + 340 44 org.webkit.WebKitTestRunnerApp 0x0000000102da3e84 -[WebKitTestRunnerApp _runTestController] + 40 45 com.apple.Foundation 0x00000001056d88b4 __NSThreadPerformPerform + 184 46 com.apple.CoreFoundation 0x0000000106cb1220 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 24 47 com.apple.CoreFoundation 0x0000000106cb1128 __CFRunLoopDoSource0 + 200 48 com.apple.CoreFoundation 0x0000000106cb0518 __CFRunLoopDoSources0 + 356 49 com.apple.CoreFoundation 0x0000000106caaafc __CFRunLoopRun + 744 50 com.apple.CoreFoundation 0x0000000106caa308 CFRunLoopRunSpecific + 572 51 com.apple.GraphicsServices 0x00000001030a35ec GSEventRunModal + 160 52 com.apple.UIKitCore 0x0000000115e3c4e0 -[UIApplication _run] + 992 53 com.apple.UIKitCore 0x0000000115e40fc0 UIApplicationMain + 112 54 org.webkit.WebKitTestRunnerApp 0x0000000102da3f90 main + 80 55 dyld_sim 0x0000000102ebdc04 start_sim + 20 56 ??? 0x0000000000000001 0 + 1

youenn fablet

Comment 7 2022-03-01 02:23:56 PST

We currently have ASSERT(m_bufferHandle) in RemoteLayerBackingStore::applyBackingStoreToLayer. Maybe there are some error cases where m_bufferHandle is null that GPUProcess crash is triggering in this test.

Said Abou-Hallawa

Comment 8 2022-04-15 18:22:05 PDT

The flakiness has been fixed since r292289 was landed. *** This bug has been marked as a duplicate of bug 238618 ***

Note You need to log in before you can comment on or make changes to this bug.

Status RESOLVED

Resolution DUPLICATE

of bug 238618

Priority P2

Severity Normal

Classification Unclassified

Version WebKit Nightly Build

Hardware Unspecified

OS Unspecified

Product WebKit

Component New Bugs

Assignee

Nobody

Reported

2022-02-28 17:22 PST

Modified

2022-04-15 18:22 PDT History

CC List

9 users Show

URL

Keywords InRadar

Depends on

Blocks