180438 2017-12-05 12:56:21 -0800 ASSERTION FAILED: vm->currentThreadIsHoldingAPILock() in void JSC::sanitizeStackForVM(JSC::VM *) 2017-12-06 12:09:50 -0800 1 1 1 Unclassified WebKit JavaScriptCore Other Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=180492 InRadar P2 Normal --- 1 ryanhaddad saam bburg commit-queue ews-watchlist fpizlo hi joepeck keith_miller mark.lam msaboff saam timothy webkit-bug-importer ysuzuki oldest_to_newest 1378302 0 ryanhaddad 2017-12-05 12:56:21 -0800 The following assertion failure was seen with LayoutTest inspector/worker/debugger-pause.html https://build.webkit.org/results/Apple%20Sierra%20Debug%20WK2%20(Tests)/r225524%20(4304)/results.html ASSERTION FAILED: vm->currentThreadIsHoldingAPILock() ./runtime/VM.cpp(968) : void JSC::sanitizeStackForVM(JSC::VM *) 1 0x11850441d WTFCrash 2 0x1182a13dd JSC::sanitizeStackForVM(JSC::VM*) 3 0x117bf3d13 JSC::MarkedAllocator::allocate(JSC::GCDeferralContext*, JSC::AllocationFailureMode)::'lambda'()::operator()() const 4 0x117bf3c79 JSC::HeapCell* JSC::FreeList::allocate<JSC::MarkedAllocator::allocate(JSC::GCDeferralContext*, JSC::AllocationFailureMode)::'lambda'()>(JSC::MarkedAllocator::allocate(JSC::GCDeferralContext*, JSC::AllocationFailureMode)::'lambda'() const&) 5 0x117bf186a JSC::MarkedAllocator::allocate(JSC::GCDeferralContext*, JSC::AllocationFailureMode) 6 0x117bf1801 JSC::CompleteSubspace::allocateNonVirtual(unsigned long, JSC::GCDeferralContext*, JSC::AllocationFailureMode) 7 0x118200d7a void* JSC::tryAllocateCellHelper<JSC::PropertyTable>(JSC::Heap&, unsigned long, JSC::GCDeferralContext*, JSC::AllocationFailureMode) 8 0x1181eb293 void* JSC::allocateCell<JSC::PropertyTable>(JSC::Heap&, unsigned long) 9 0x1181eb226 JSC::PropertyTable::create(JSC::VM&, unsigned int) 10 0x118249884 JSC::Structure::materializePropertyTable(JSC::VM&, bool) 11 0x1170d9b92 JSC::Structure::ensurePropertyTableIfNotEmpty(JSC::VM&) 12 0x1170d9a94 JSC::Structure::get(JSC::VM&, JSC::PropertyName, unsigned int&, bool&) 13 0x1170fd3f5 JSC::Structure::get(JSC::VM&, JSC::PropertyName) 14 0x1174c1820 JSC::JSObject::getDirect(JSC::VM&, JSC::PropertyName) const 15 0x118072cbd JSC::InternalFunction::displayName(JSC::VM&) 16 0x118072d91 JSC::InternalFunction::calculatedDisplayName(JSC::VM&) 17 0x1180b752d JSC::getCalculatedDisplayName(JSC::VM&, JSC::JSObject*) 18 0x117d7b9a2 JSC::StackVisitor::Frame::functionName() const 19 0x117d28920 Inspector::CreateScriptCallStackFunctor::operator()(JSC::StackVisitor&) const 20 0x117d28863 void JSC::StackVisitor::visit<Inspector::CreateScriptCallStackFunctor>(JSC::ExecState*, JSC::VM*, Inspector::CreateScriptCallStackFunctor const&) 21 0x117d21471 void JSC::ExecState::iterate<Inspector::CreateScriptCallStackFunctor>(Inspector::CreateScriptCallStackFunctor const&) 22 0x117d21361 Inspector::createScriptCallStack(JSC::ExecState*, unsigned long) 23 0x10c6f712b WebCore::InspectorNetworkAgent::buildInitiatorObject(WebCore::Document*) 24 0x10c6f960e WebCore::InspectorNetworkAgent::didScheduleStyleRecalculation(WebCore::Document&) 25 0x10c626833 WebCore::InspectorInstrumentation::didScheduleStyleRecalculationImpl(WebCore::InstrumentingAgents&, WebCore::Document&) 26 0x10c0b4d4e WebCore::InspectorInstrumentation::didScheduleStyleRecalculation(WebCore::Document&) 27 0x10c0b4cb1 WebCore::Document::scheduleStyleRecalc() 28 0x10c0b4b3c WebCore::Document::scheduleForcedStyleRecalc() 29 0x10d3ea205 WebCore::Style::Scope::updateActiveStyleSheets(WebCore::Style::Scope::UpdateType) 30 0x10d3eb093 WebCore::Style::Scope::flushPendingSelfUpdate() 31 0x10be1f9e2 WebCore::Style::Scope::flushPendingUpdate() LEAK: 1 WebPageProxy 1378304 1 webkit-bug-importer 2017-12-05 12:57:14 -0800 <rdar://problem/35862342> 1378308 2 ryanhaddad 2017-12-05 13:06:36 -0800 Looking at crashlogs from the bots, this assertion failure has also been seen attributed to: http/tests/inspector/network/ping-type.html webaudio/audiobuffersource-multi-channels.html webaudio/test-basic.html webaudio/up-mixing-stereo-51.html webaudio/audiobuffersource-playbackrate.html webaudio/oscillator-triangle.html webaudio/up-mixing-mono-stereo.html 1378310 3 mark.lam 2017-12-05 13:09:10 -0800 Hi Ryan, any idea when this failure started manifesting? Is it correlated to some recently landed patch? 1378311 4 ryanhaddad 2017-12-05 13:11:57 -0800 (In reply to Mark Lam from comment #3) > Hi Ryan, any idea when this failure started manifesting? Is it correlated > to some recently landed patch? Still looking, it appears to have been happening since late October. 1378555 5 saam 2017-12-06 00:02:04 -0800 Seems like we just need to grab the API lock here. 1378556 6 saam 2017-12-06 00:02:39 -0800 (In reply to Ryan Haddad from comment #2) > Looking at crashlogs from the bots, this assertion failure has also been > seen attributed to: > http/tests/inspector/network/ping-type.html > webaudio/audiobuffersource-multi-channels.html > webaudio/test-basic.html > webaudio/up-mixing-stereo-51.html > webaudio/audiobuffersource-playbackrate.html > webaudio/oscillator-triangle.html > webaudio/up-mixing-mono-stereo.html Can you post crashlogs for these. 1378563 7 328556 saam 2017-12-06 00:20:28 -0800 Created attachment 328556 patch 1378586 8 328556 ysuzuki 2017-12-06 05:16:07 -0800 Comment on attachment 328556 patch r=me 1378675 9 ryanhaddad 2017-12-06 10:47:24 -0800 (In reply to Saam Barati from comment #6) > (In reply to Ryan Haddad from comment #2) > > Looking at crashlogs from the bots, this assertion failure has also been > > seen attributed to: > > http/tests/inspector/network/ping-type.html > > webaudio/audiobuffersource-multi-channels.html > > webaudio/test-basic.html > > webaudio/up-mixing-stereo-51.html > > webaudio/audiobuffersource-playbackrate.html > > webaudio/oscillator-triangle.html > > webaudio/up-mixing-mono-stereo.html > > Can you post crashlogs for these. https://build.webkit.org/results/Apple%20High%20Sierra%20Debug%20WK2%20(Tests)/r225482%20(1105)/http/tests/inspector/network/ping-type-crash-log.txt https://build.webkit.org/results/Apple%20El%20Capitan%20Debug%20WK2%20(Tests)/r225440%20(4421)/webaudio/audiobuffersource-crash-log.txt 1378680 10 saam 2017-12-06 10:54:09 -0800 (In reply to Ryan Haddad from comment #9) > (In reply to Saam Barati from comment #6) > > (In reply to Ryan Haddad from comment #2) > > > Looking at crashlogs from the bots, this assertion failure has also been > > > seen attributed to: > > > http/tests/inspector/network/ping-type.html > > > webaudio/audiobuffersource-multi-channels.html > > > webaudio/test-basic.html > > > webaudio/up-mixing-stereo-51.html > > > webaudio/audiobuffersource-playbackrate.html > > > webaudio/oscillator-triangle.html > > > webaudio/up-mixing-mono-stereo.html > > > > Can you post crashlogs for these. > https://build.webkit.org/results/ > Apple%20High%20Sierra%20Debug%20WK2%20(Tests)/r225482%20(1105)/http/tests/ > inspector/network/ping-type-crash-log.txt > https://build.webkit.org/results/ > Apple%20El%20Capitan%20Debug%20WK2%20(Tests)/r225440%20(4421)/webaudio/ > audiobuffersource-crash-log.txt The second one here I'll fix in another bug. 1378686 11 328556 commit-queue 2017-12-06 10:58:03 -0800 Comment on attachment 328556 patch Clearing flags on attachment: 328556 Committed r225579: <https://trac.webkit.org/changeset/225579> 1378687 12 commit-queue 2017-12-06 10:58:05 -0800 All reviewed patches have been landed. Closing bug. 1378733 13 saam 2017-12-06 12:09:50 -0800 (In reply to Saam Barati from comment #10) > (In reply to Ryan Haddad from comment #9) > > (In reply to Saam Barati from comment #6) > > > (In reply to Ryan Haddad from comment #2) > > > > Looking at crashlogs from the bots, this assertion failure has also been > > > > seen attributed to: > > > > http/tests/inspector/network/ping-type.html > > > > webaudio/audiobuffersource-multi-channels.html > > > > webaudio/test-basic.html > > > > webaudio/up-mixing-stereo-51.html > > > > webaudio/audiobuffersource-playbackrate.html > > > > webaudio/oscillator-triangle.html > > > > webaudio/up-mixing-mono-stereo.html > > > > > > Can you post crashlogs for these. > > https://build.webkit.org/results/ > > Apple%20High%20Sierra%20Debug%20WK2%20(Tests)/r225482%20(1105)/http/tests/ > > inspector/network/ping-type-crash-log.txt > > https://build.webkit.org/results/ > > Apple%20El%20Capitan%20Debug%20WK2%20(Tests)/r225440%20(4421)/webaudio/ > > audiobuffersource-crash-log.txt > > The second one here I'll fix in another bug. https://bugs.webkit.org/show_bug.cgi?id=180492 328556 2017-12-06 00:20:28 -0800 2017-12-06 10:58:03 -0800 patch b-backup.diff text/plain 1642 saam SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291 cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMjI1NTcwKQorKysgU291cmNl L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBA CisyMDE3LTEyLTA2ICBTYWFtIEJhcmF0aSAgPHNiYXJhdGlAYXBwbGUuY29tPgorCisgICAgICAg IEFTU0VSVElPTiBGQUlMRUQ6IHZtLT5jdXJyZW50VGhyZWFkSXNIb2xkaW5nQVBJTG9jaygpIGlu IHZvaWQgSlNDOjpzYW5pdGl6ZVN0YWNrRm9yVk0oSlNDOjpWTSAqKQorICAgICAgICBodHRwczov L2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTgwNDM4CisgICAgICAgIDxyZGFyOi8v cHJvYmxlbS8zNTg2MjM0Mj4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4K KworICAgICAgICBBIGNvdXBsZSBpbnNwZWN0b3IgbWV0aG9kcyB0aGF0IHRha2Ugc3RhY2t0cmFj ZXMgbmVlZAorICAgICAgICB0byBncmFiIHRoZSBKU0xvY2suCisKKyAgICAgICAgKiBpbnNwZWN0 b3IvU2NyaXB0Q2FsbFN0YWNrRmFjdG9yeS5jcHA6CisgICAgICAgIChJbnNwZWN0b3I6OmNyZWF0 ZVNjcmlwdENhbGxTdGFjayk6CisgICAgICAgIChJbnNwZWN0b3I6OmNyZWF0ZVNjcmlwdENhbGxT dGFja0ZvckNvbnNvbGUpOgorCiAyMDE3LTEyLTA1ICBTdGVwaGFuIFN6YWJvICA8c3RlcGhhbi5z emFib0Bzb255LmNvbT4KIAogICAgICAgICBTd2l0Y2ggd2luZG93cyBidWlsZCB0byBWaXN1YWwg U3R1ZGlvIDIwMTcKSW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9pbnNwZWN0b3IvU2NyaXB0 Q2FsbFN0YWNrRmFjdG9yeS5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL0phdmFTY3JpcHRDb3Jl L2luc3BlY3Rvci9TY3JpcHRDYWxsU3RhY2tGYWN0b3J5LmNwcAkocmV2aXNpb24gMjI1NTcwKQor KysgU291cmNlL0phdmFTY3JpcHRDb3JlL2luc3BlY3Rvci9TY3JpcHRDYWxsU3RhY2tGYWN0b3J5 LmNwcAkod29ya2luZyBjb3B5KQpAQCAtODksNiArODksNyBAQCBSZWY8U2NyaXB0Q2FsbFN0YWNr PiBjcmVhdGVTY3JpcHRDYWxsU3RhCiAgICAgaWYgKCFleGVjKQogICAgICAgICByZXR1cm4gU2Ny aXB0Q2FsbFN0YWNrOjpjcmVhdGUoKTsKIAorICAgIEpTTG9ja0hvbGRlciBsb2NrZXIoZXhlYyk7 CiAgICAgVmVjdG9yPFNjcmlwdENhbGxGcmFtZT4gZnJhbWVzOwogCiAgICAgQ2FsbEZyYW1lKiBm cmFtZSA9IGV4ZWMtPnZtKCkudG9wQ2FsbEZyYW1lOwpAQCAtMTAzLDYgKzEwNCw3IEBAIFJlZjxT Y3JpcHRDYWxsU3RhY2s+IGNyZWF0ZVNjcmlwdENhbGxTdGEKICAgICBpZiAoIWV4ZWMpCiAgICAg ICAgIHJldHVybiBTY3JpcHRDYWxsU3RhY2s6OmNyZWF0ZSgpOwogCisgICAgSlNMb2NrSG9sZGVy IGxvY2tlcihleGVjKTsKICAgICBWZWN0b3I8U2NyaXB0Q2FsbEZyYW1lPiBmcmFtZXM7CiAKICAg ICBDYWxsRnJhbWUqIGZyYW1lID0gZXhlYy0+dm0oKS50b3BDYWxsRnJhbWU7Cg==