Bug 274229

Created attachment 471417 [details] .crash log Chrome for iOS is getting an increased volume of reports of a crash in VideoFullscreenInterfaceAVKit::doExitFullscreen, starting in iOS 17.4 (the crash exists in older iOS versions, but volume increased 15X after the release of iOS 17.4). We don't have steps to reproduce, but here's a crash stack. I've also attached a .crash log. Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Subtype: KERN_INVALID_ADDRESS at 0x000000000000063d Exception Codes: 0x0000000000000001, 0x000000000000063d Thread 0 Crashed: 0 WebCore 0x00000001a752329c WTF::Detail::CallableWrapper<WebCore::VideoFullscreenInterfaceAVKit::doExitFullscreen()::$_9, void>::call() + 48 (Function.h:53) 1 JavaScriptCore 0x00000001a87ecd44 WTF::RunLoop::performWork() + 204 (RunLoop.cpp:147) 2 JavaScriptCore 0x00000001a87edc6c WTF::RunLoop::performWork(void*) + 36 (RunLoopCF.cpp:46) 3 CoreFoundation 0x000000019276162c __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 28 (CFRunLoop.c:1957) 4 CoreFoundation 0x00000001927608a8 __CFRunLoopDoSource0 + 176 (CFRunLoop.c:2001) 5 CoreFoundation 0x000000019275f0b8 __CFRunLoopDoSources0 + 340 (CFRunLoop.c:2046) 6 CoreFoundation 0x000000019275dd88 __CFRunLoopRun + 828 (CFRunLoop.c:2955) 7 CoreFoundation 0x000000019275d968 CFRunLoopRunSpecific + 608 (CFRunLoop.c:3420) 8 GraphicsServices 0x00000001d6a534e0 GSEventRunModal + 164 (GSEvent.c:2196) 9 UIKitCore 0x0000000194bd0edc -[UIApplication _run] + 888 (UIApplication.m:3692) 10 UIKitCore 0x0000000194bd0518 UIApplicationMain + 340 (UIApplication.m:5282) 11 Chrome 0x00000001000e8390 0x1000e4000 + 17296 12 dyld 0x00000001b5c7ed84 start + 2240 (dyldMain.cpp:1298)