329042 2026-10-27 00:23:46 -0700 REGRESSION(318915@main): ANGLE: QueryContext EGL_CONTEXT_MEMORY_USAGE_ANGLE crashes with a large number of reserved names 2026-10-28 11:30:24 -0700 1 1 1 Unclassified WebKit ANGLE WebKit Nightly Build All All RESOLVED FIXED InRadar P2 Normal --- 190546 1 kkinnunen kkinnunen djg kbr kkinnunen webkit-bug-importer oldest_to_newest 2269777 0 kkinnunen 2026-10-27 00:23:46 -0700 Since 318915@main (bug 190546), the GPU process queries EGL_CONTEXT_MEMORY_USAGE_ANGLE after the WebGL calls that change memory use. Context::getMemoryUsage() walks the buffer, texture and renderbuffer resource maps. glGen* reserves a name by storing a null object in the resource map until the name is first bound. The ResourceMap iterator skips these null objects in its flat arrays, but returns them for names stored in its hash map, and getTotalMemorySize() dereferences them. WebKit's ANGLE stores names from 0x3000 up in the hash map. To reproduce: generate more than 0x3000 buffer, texture or renderbuffer names without binding them, then query EGL_CONTEXT_MEMORY_USAGE_ANGLE. The query crashes in gl::Buffer::getMemorySize() (or the texture or renderbuffer equivalent) with a null object. 2269778 1 kkinnunen 2026-10-27 00:24:02 -0700 <rdar://189684244> 2269779 2 kkinnunen 2026-10-27 00:25:31 -0700 Pull request: https://github.com/WebKit/WebKit/pull/78406 2270609 3 ews-feeder 2026-10-28 06:47:52 -0700 Committed 324979@main (ce11d7461d63): <https://commits.webkit.org/324979@main> Reviewed commits have been landed. Closing PR #78406 and removing active labels. 2270761 4 ews-feeder 2026-10-28 11:30:24 -0700 Committed ? (6f0ad1f18f18): <https://commits.webkit.org/6f0ad1f18f18> Reviewed commits have been landed. Closing PR #7554 and removing active labels.