Bug 268469

Summary: [iOS 17.4]: Crash in VideoPresentationModelContext::returnVideoView
Product: WebKit Reporter: Ali Juma <ajuma>
Component: MediaAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: cdumez, fred.wang, jer.noble, michaeldo, webkit-bug-importer, wenson_hsieh
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 206854    
Attachments:
Description Flags
Crashlog none

Ali Juma
Reported 2024-01-31 08:33:35 PST
Created attachment 469630 [details] Crashlog Chrome for iOS is getting reports of a new frequent crash in WebKit::VideoPresentationModelContext::returnVideoView. We don't have steps to reproduce, but many of the crash reports are on m.youtube.com. I've attached a crashlog. The crashing stack is: Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Subtype: KERN_INVALID_ADDRESS at 0x0000000000000020 Thread 0 Crashed: 0 libobjc.A.dylib 0x00000001861055a8 objc_retainAutoreleaseReturnValue + 76 (NSObject.mm:2244) 1 UIKitCore 0x00000001903ad120 -[UIView(Hierarchy) _willMoveToWindow:] + 64 (UIView.m:13351) 2 UIKitCore 0x00000001903ab84c _makeSubTreePerformSelector + 432 (UIView.m:13496) 3 UIKitCore 0x00000001903aab74 -[UIView(Internal) _addSubview:positioned:relativeTo:] + 388 (UIView.m:18137) 4 WebKit 0x00000001a40c1d18 WebKit::VideoPresentationModelContext::returnVideoView() + 164 (VideoPresentationManagerProxy.mm:322) 5 WebCore 0x00000001a37b2d8c WebCore::VideoFullscreenInterfaceAVKit::returnToStandby() + 160 (VideoFullscreenInterfaceAVKit.mm:1593) 6 WebCore 0x00000001a37b2b7c WebCore::VideoFullscreenInterfaceAVKit::setHasVideoContentLayer(bool) + 124 (VideoFullscreenInterfaceAVKit.mm:1294) 7 WebKit 0x00000001a45ad49c WebKit::VideoPresentationManagerProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 640 (VideoPresentationManagerProxyMessageReceiver.cpp:69) 8 WebKit 0x00000001a4821718 IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::Decoder&) + 264 (MessageReceiverMap.cpp:129) 9 WebKit 0x00000001a42c2270 WebKit::WebProcessProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 44 (WebProcessProxy.cpp:1061) 10 WebKit 0x00000001a481c780 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder>>) + 324 (Connection.cpp:1280)
Attachments
Crashlog (27.82 KB, text/plain)
2024-01-31 08:33 PST, Ali Juma 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2024-02-01 15:24:04 PST
<rdar://problem/122136433>
Jer Noble
Comment 2 2024-02-01 16:20:31 PST
Hi Ali, This was recently fixed via Bug 268192. The crashing behavior is likely due to iOS 17.4 Beta, where the Fullscreen API is available and is used on m.youtube.com. We'll ping that bug when a fix is available for testing.
Frédéric Wang Nélar
Comment 3 2026-10-12 01:27:05 PDT
I guess Bug 268192 has long been integrated into Safari releases. @michaeldo can you confirm you are no longer observing this bug for Chrome for iOS and so we can close ?
michaeldo
Comment 4 2026-10-12 12:43:07 PDT
Confirmed fixed
michaeldo
Comment 5 2026-10-12 12:44:36 PDT
(I was going to close this bug, but I realized I can't. I've confirmed we no longer saw these reports in Chrome as of iOS 17.4 Beta 2)
Frédéric Wang Nélar
Comment 6 2026-10-13 03:25:42 PDT
@michaeldo: Thanks for confirming. That said, I realized Ali's report might have been when fullscreen api was on by default on some iOS beta. Currently, I believe fullscreen API is enabled by default on ipad but disabled by default on ios. In you reports do you know if fullscreen api is enabled?
Note You need to log in before you can comment on or make changes to this bug.