crash on iOS14，WebCore 0x1bfa25550gl::FramebufferManager::getFramebuffer(gl::FramebufferID) const

App & System Services Core OS
Gardenlee OP
Created Sep ’20
Replies 9
Boosts 0
Views 1.8k
Participants 8
our app have a lot of crash on iOS14, please help, thanks
crash info :
Incident Identifier: BA9B03D3-7D49-45F8-9239-9FC28284B6FA
CrashReporter Key: TODO
Hardware Model: iPhone9,2
Process: xx [12718]
Path: /private/var/containers/Bundle/Application/DB0B7E77-11E8-496B-B7B7-2565F8130572/xx.app/xx
Identifier: PaymentWebViewController|com.xx.xx
Version: 6.46.100+ (6.46.100)
Code Type: ARM-64
Parent Process: ??? [1]

Date/Time: 2020-06-27 13:26:37 +0000
OS Version: iPhone OS 14.0 (18A5301v)
Report Version: 104

Exception Type: SIGSEGV
Exception Codes: SEGVACCERR at 0x0
Triggered by Thread: 2

Thread 2 Crashed:
0 WebCore 0x00000001bfa25550 gl::FramebufferManager::getFramebuffer(gl::FramebufferID) const
1 WebCore 0x00000001bf8c6e20 gl::Context::unsetDefaultFramebuffer()
2 WebCore 0x00000001bf8c5b7c gl::Context::unMakeCurrent(egl::Display const*)
3 WebCore 0x00000001bf90acc0 egl::Display::makeCurrent(egl::Thread const*, egl::Surface*, egl::Surface*, gl::Context*)
4 WebCore 0x00000001bf9148f8 EGLMakeCurrent
5 WebCore 0x00000001be411d08 WebCore::GraphicsContextGLOpenGL::GraphicsContextGLOpenGL(WebCore::GraphicsContextGLAttributes, WebCore::HostWindow*, WebCore::GraphicsContextGL::Destination, WebCore::GraphicsContextGLOpenGL*)
6 WebCore 0x00000001be4111b0 WebCore::GraphicsContextGLOpenGL::create(WebCore::GraphicsContextGLAttributes, WebCore::HostWindow*, WebCore::GraphicsContextGL::Destination)
7 WebCore 0x00000001beda84bc WebCore::WebGLRenderingContextBase::create(WebCore::CanvasBase&, WebCore::GraphicsContextGLAttributes&, WTF::String const&)
8 WebCore 0x00000001bec50164 WebCore::HTMLCanvasElement::getContext(JSC::JSGlobalObject&, WTF::String const&, WTF::Vector<JSC::Strong<JSC::Unknown, (JSC::ShouldStrongDestructorGrabLock)0>, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&)
9 WebCore 0x00000001bde20188 WebCore::jsHTMLCanvasElementPrototypeFunctionGetContext(JSC::JSGlobalObject*, JSC::CallFrame*)
10 JavaScriptCore 0x00000001c5a78a04 llintentry
11 JavaScriptCore 0x00000001c5a76104 llintentry
12 JavaScriptCore 0x00000001c5a76104 llintentry
13 JavaScriptCore 0x00000001c5a76104 llintentry
14 JavaScriptCore 0x00000001c5a76104 llintentry
15 JavaScriptCore 0x00000001c5a76104 llintentry
16 JavaScriptCore 0x00000001c5a76104 llintentry
17 JavaScriptCore 0x00000001c5a76104 llintentry
18 JavaScriptCore 0x00000001c5a548a8 vmEntryToJavaScript
19 JavaScriptCore 0x00000001c601cc04 JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&)
20 JavaScriptCore 0x00000001c621905c JSC::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&)
21 WebCore 0x00000001be7be230 WebCore::JSExecState::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&)
22 WebCore 0x00000001be7be070 WebCore::ScheduledAction::executeFunctionInContext(JSC::JSGlobalObject*, JSC::JSValue, WebCore::ScriptExecutionContext&)
23 WebCore 0x00000001be7bdc0c WebCore::ScheduledAction::execute(WebCore::Document&)
24 WebCore 0x00000001befd5c80 WebCore::DOMTimer::fired()
25 WebCore 0x00000001bf113eac ZN3WTF6Detail15CallableWrapperIZN7WebCore12ThreadTimers14setSharedTimerEPNS211SharedTimerEE3$0vJEE4callEv
26 WebCore 0x00000001bf131ef8 WebCore::timerFired(CFRunLoopTimer*, void*)
27 CoreFoundation 0x00000001b4dfcf00 CFRUNLOOPISCALLINGOUTTOATIMERCALLBACKFUNCTION
28 CoreFoundation 0x00000001b4dfcb94 CFRunLoopDoTimer
29 CoreFoundation 0x00000001b4dfc21c CFRunLoopDoTimers
30 CoreFoundation 0x00000001b4df6b10 CFRunLoopRun
31 CoreFoundation 0x00000001b4df6030 CFRunLoopRunSpecific
32 WebCore 0x00000001be502384 RunWebThread(void*)
33 libsystempthread.dylib 0x00000001b4b91b70 pthreadstart
34 libsystempthread.dylib 0x00000001b4b96880 threadstart

Binary Images:
0x00000001b4b88000 - 0x00000001b4b98fff libsystempthread.dylib arm64 <8d9ba6de3b433d6ba073c078987fd878> /usr/lib/system/libsystempthread.dylib
0x00000001b4d63000 - 0x00000001b5101fff CoreFoundation arm64 <d3afd0baf0b631bdb65d2de422745537> /System/Library/Frameworks/CoreFoundation.framework/CoreFoundation
0x00000001bd989000 - 0x00000001bfbfffff WebCore arm64 <1e9377cad7643208ac924bd18d4ecc10> /System/Library/PrivateFrameworks/WebCore.framework/WebCore
0x00000001c587f000 - 0x00000001c6783fff JavaScriptCore arm64 <f51c36d8d47839e2bc5c28cc2b94726e> /System/Library/Frameworks/JavaScriptCore.framework/JavaScriptCore
0x00000001f0bc7000 - 0x00000001f0bdefff WebCore arm64 <9f109c5116623c9093a5c9b53f285e00> /System/Library/AccessibilityBundles/WebCore.axbundle/WebCore
Replies  9
Boosts  0
Views  1.8k
Participants  8
cptnapples OP
Sep ’20
I'm looking forward to the answer we get here.
We are facing the exact same issue here.

1
afms-je OP
Oct ’20
Same here.
0
ironelder OP
Oct ’20
one More Same Issue.

0
Gardenlee OP
Oct ’20
iOS 14.0 (18A373)
Code Block WebCore`gl::FramebufferManager::getFramebuffer:
    0x196aceaf8 <+0>:  pacibsp 
    0x196aceafc <+4>:  sub    sp, sp, #0x20             ; =0x20 
    0x196aceb00 <+8>:  stp    x29, x30, [sp, #0x10]
    0x196aceb04 <+12>: add    x29, sp, #0x10            ; =0x10 
    0x196aceb08 <+16>: stur   w1, [x29, #-0x4]
->  0x196aceb0c <+20>: ldr    x8, [x0, #0x68]        (WebThread (12): EXC_BAD_ACCESS (code=1, address=0xa0c20820001088))
    0x196aceb10 <+24>: cmp    x8, w1, uxtw
    0x196aceb14 <+28>: b.ls   0x196aceb30               ; <+56>
    0x196aceb18 <+32>: and    x8, x1, #0xffffffff
    0x196aceb1c <+36>: ldr    x9, [x0, #0x70]
    0x196aceb20 <+40>: ldr    x8, [x9, x8, lsl #3]
    0x196aceb24 <+44>: cmn    x8, #0x1                  ; =0x1 
    0x196aceb28 <+48>: csel   x0, xzr, x8, eq
    0x196aceb2c <+52>: b      0x196aceb44               ; <+76>

(lldb) reg read x8
      x8 = 0x000000016fe2f4b0
(lldb) reg read x0
      x0 = 0x00a0c20820001020
(lldb) im lookup -a 0x196aceb0c
      Address: WebCore[0x000000018edb6b0c] (WebCore.TEXT.text + 35807676)
      Summary: WebCore`gl::FramebufferManager::getFramebuffer(gl::FramebufferID) const + 20

can anybody help ? I can't find FramebufferManager class in the webcore sources.

1
appdev OP
Oct ’20
Same issue. Ugh.
1
Zamaraev OP
Oct ’20
one More Same Issue.
0
linwkr OP
Nov ’20
iOS 14.2 seems to fix this?
0
I_am_hida OP
Mar ’21
Same here，has anyone solved this issue？
0
I_am_hida OP
Mar ’21
I fixed the problem, and while iOS14.2 fixed the problem, I solved it in another way:

  1. Comment out all introduced JS elements in HTML;

  2. If not, release some JS elements until you can determine which JS file caused the crash.

0
crash on iOS14，WebCore 0x1bfa25550gl::FramebufferManager::getFramebuffer(gl::FramebufferID) const
First post date Last post date
 
 
Q