Bug 264999

Summary:	[Win] flaky crash "ASSERTION FAILED: info.bmBitsPixel == 32" for layout tests using mouse drag
Product:	WebKit	Reporter:	Fujii Hironori <Hironori.Fujii>
Component:	Platform	Assignee:	Nobody <webkit-unassigned>
Status:	NEW ---
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified
See Also:	https://bugs.webkit.org/show_bug.cgi?id=276245

Description Fujii Hironori 2023-11-16 19:04:12 PST

Buildbot: builder WinCairo-64-bit-Debug-Tests build 21319: 270772@main
https://build.webkit.org/#/builders/727/builds/21319

  fast/events/setDragImage-in-document-element-crash.html [ Crash ]

Buildbot: builder WinCairo-64-bit-Debug-Tests build 21325 : 270828@main
https://build.webkit.org/#/builders/727/builds/21325

  http/tests/local/drag-over-remote-content.html [ Crash ]

Buildbot: builder WinCairo-64-bit-Debug-Tests build 21326 : 270842@main
https://build.webkit.org/#/builders/727/builds/21326

  fast/events/setDragImage-in-document-element-crash.html [ Crash ]

stderr:
ASSERTION FAILED: info.bmBitsPixel == 32
C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\win\DragImageCairoWin.cpp(91) : createCairoContextFromBitmap
1   00007FF903611B99 WTFCrash
2   00007FF8E000730D WTFCrashWithInfo
3   00007FF8E0317413 WebCore::createCairoContextFromBitmap
4   00007FF8E031725E WebCore::scaleDragImage
5   00007FF8E3A75B93 WebCore::platformAdjustDragImageForDeviceScaleFactor
6   00007FF8E384C778 WebCore::DragController::doImageDrag
7   00007FF8E384A5C4 WebCore::DragController::startDrag
8   00007FF8E3852FA1 WebCore::EventHandler::handleDrag
9   00007FF8E3851B6B WebCore::EventHandler::handleMouseDraggedEvent
10  00007FF8E385A931 WebCore::EventHandler::handleMouseMoveEvent
11  00007FF8E02AAD94 WebCore::EventHandler::passMouseMoveEventToSubframe
12  00007FF8E385A756 WebCore::EventHandler::handleMouseMoveEvent
13  00007FF8E3859CA0 WebCore::EventHandler::mouseMoved
14  00007FF8EBFF7902 WebKit::WebFrame::handleMouseEvent
15  00007FF8EBF95505 WebKit::WebPage::mouseEvent
16  00007FF8EAC680D3 IPC::callMemberFunction<WebKit::WebPage,WebKit::WebPage,void (WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >, const WebKit::WebMouseEvent &, std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > &&, WTF::CompletionHandler<void (std::optional<WebKit::WebEventType>, bool, std::optional<WebCore::RemoteUserInputEventData>)> &&),std::tuple<WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > >,void (std::optional<WebKit::WebEventType>, bool, std::optional<WebCore::RemoteUserInputEventData>)>::<lambda_1>::operator()<WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > >
17  00007FF8EAC68011 std::invoke<`lambda at C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\HandleMessage.h:146:9',WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > >
18  00007FF8EAC67FD2 std::_Apply_impl<`lambda at C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\HandleMessage.h:146:9',std::tuple<WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > >,0,1,2>
19  00007FF8EAC67F72 std::apply<`lambda at C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\HandleMessage.h:146:9',std::tuple<WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > > >
20  00007FF8EAC6591E IPC::callMemberFunction<WebKit::WebPage,WebKit::WebPage,void (WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >, const WebKit::WebMouseEvent &, std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > &&, WTF::CompletionHandler<void (std::optional<WebKit::WebEventType>, bool, std::optional<WebCore::RemoteUserInputEventData>)> &&),std::tuple<WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > >,void (std::optional<WebKit::WebEventType>, bool, std::optional<WebCore::RemoteUserInputEventData>)>
21  00007FF8EAC477DE IPC::handleMessageAsync<Messages::WebPage::MouseEvent,WebKit::WebPage,WebKit::WebPage,void (WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >, const WebKit::WebMouseEvent &, std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > &&, WTF::CompletionHandler<void (std::optional<WebKit::WebEventType>, bool, std::optional<WebCore::RemoteUserInputEventData>)> &&)>
22  00007FF8EAC3F834 WebKit::WebPage::didReceiveWebPageMessage
23  00007FF8EBF9D3A4 WebKit::WebPage::didReceiveMessage
24  00007FF8EB607866 IPC::MessageReceiverMap::dispatchMessage
25  00007FF8EBB0104D WebKit::WebProcess::didReceiveMessage
26  00007FF8EB5DE43A IPC::Connection::dispatchMessage
27  00007FF8EB5DE6A3 IPC::Connection::dispatchMessage
28  00007FF8EB5E468E IPC::Connection::SyncMessageState::ConnectionAndIncomingMessage::dispatch
29  00007FF8EB5D8FCD IPC::Connection::SyncMessageState::dispatchMessages
30  00007FF8EB5DDDEB IPC::Connection::dispatchSyncMessage
31  00007FF8EB5DE687 IPC::Connection::dispatchMessage
ERROR: 000002B7DA6238D0 - [PID=7484] WebProcessProxy::didClose (web process crash)
C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\UIProcess/WebProcessProxy.cpp(1100) : didClose
ERROR: 000002B7DA6238D0 - [PID=7484] WebProcessProxy::processDidTerminateOrFailedToLaunch: reason=Crash
C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\UIProcess/WebProcessProxy.cpp(1108) : processDidTerminateOrFailedToLaunch
ERROR: 000002B7DA5E0EB0 - [pageProxyID=919, webPageID=920, PID=7484] WebPageProxy::processDidTerminate: (pid 7484), reason=Crash
C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\UIProcess/WebPageProxy.cpp(9126) : resetStateAfterProcessTermination
ERROR: 000002B7DA5E0EB0 - [pageProxyID=919, webPageID=920, PID=7484] WebPageProxy::dispatchProcessDidTerminate: reason=Crash
C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\UIProcess/WebPageProxy.cpp(9184) : dispatchProcessDidTerminate
WebProcess terminated (pid 7484) for reason: crash

Comment 1 Fujii Hironori 2023-11-18 13:58:06 PST

Did 270779@main (bug#264361) resolve this bug too? 
https://results.webkit.org/?suite=layout-tests&suite=layout-tests&test=fast%2Fevents%2FsetDragImage-in-document-element-crash.html&test=http%2Ftests%2Flocal%2Fdrag-over-remote-content.html&platform=wincairo

Comment 2 Fujii Hironori 2023-11-20 12:23:00 PST

Still happenning:

Buildbot: builder WinCairo-64-bit-Debug-Tests build 21348 : 270967@main
https://build.webkit.org/#/builders/727/builds/21348

  http/tests/misc/drag-over-iframe-invalid-source-crash.html [ Crash ]

Comment 3 Radar WebKit Bug Importer 2023-11-23 19:05:13 PST

<rdar://problem/118759256>

Comment 4 Fujii Hironori 2023-11-27 13:18:43 PST

271165@main skips more mouse drag tests.