<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>196398</bug_id>
          
          <creation_ts>2019-03-29 08:36:08 -0700</creation_ts>
          <short_desc>[iOS] Safari crashes on launch on trunk (as of r243644)</short_desc>
          <delta_ts>2019-03-29 08:49:58 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Scrolling</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>INVALID</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Wenson Hsieh">wenson_hsieh</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1522453</commentid>
    <comment_count>0</comment_count>
    <who name="Wenson Hsieh">wenson_hsieh</who>
    <bug_when>2019-03-29 08:36:08 -0700</bug_when>
    <thetext>Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Subtype: KERN_INVALID_ADDRESS at 0x2000000104d8f1e0 -&gt; 0x0000000104d8f1e0 (possible pointer authentication failure)
VM Region Info: 0x104d8f1e0 is in 0x104a3c000-0x1050a0000;  bytes after start: 3486176  bytes before end: 3214879
      REGION TYPE                      START - END             [ VSIZE] PRT/MAX SHRMOD  REGION DETAIL
      __LINKEDIT             00000001049cc000-0000000104a3c000 [  448K] r--/rw- SM=COW  .../WebBookmarks
---&gt;  __TEXT                 0000000104a3c000-00000001050a0000 [ 6544K] r-x/rwx SM=COW  ...mework/WebKit
      __DATA_CONST           00000001050a0000-00000001050d0000 [  192K] r--/rw- SM=COW  ...mework/WebKit

Termination Signal: Segmentation fault: 11
Termination Reason: Namespace SIGNAL, Code 0xb
Terminating Process: exc handler [14028]
Triggered by Thread:  0

Thread 0 name:  Dispatch queue: com.apple.main-thread
Thread 0 Crashed:
0   WebKit                          0x0000000104d8f1e0 WebKit::RemoteScrollingTree::scrollingTreeNodeDidScroll(WebCore::ScrollingTreeScrollingNode&amp;, WebCore::ScrollingLayerPositionAction) + 0
1   WebCore                         0x000000010768ef5c WebCore::ScrollingTree::commitTreeState(std::__1::unique_ptr&lt;WebCore::ScrollingStateTree, std::__1::default_delete&lt;WebCore::ScrollingStateTree&gt; &gt;) + 648
2   WebKit                          0x0000000104d8ee2c WebKit::RemoteScrollingCoordinatorProxy::commitScrollingTreeState(WebKit::RemoteScrollingCoordinatorTransaction const&amp;, WebKit::RemoteScrollingCoordinatorProxy::RequestedScrollInfo&amp;) + 132
3   WebKit                          0x0000000104c7e760 WebKit::RemoteLayerTreeDrawingAreaProxy::commitLayerTree(WebKit::RemoteLayerTreeTransaction const&amp;, WebKit::RemoteScrollingCoordinatorTransaction const&amp;) + 200
4   WebKit                          0x0000000104aad308 void IPC::handleMessage&lt;Messages::RemoteLayerTreeDrawingAreaProxy::CommitLayerTree, WebKit::RemoteLayerTreeDrawingAreaProxy, void (WebKit::RemoteLayerTreeDrawingAreaProxy::*)(WebKit::RemoteLayerTreeTransaction const&amp;, WebKit::RemoteScrollingCoordinatorTransaction const&amp;)&gt;(IPC::Decoder&amp;, WebKit::RemoteLayerTreeDrawingAreaProxy*, void (WebKit::RemoteLayerTreeDrawingAreaProxy::*)(WebKit::RemoteLayerTreeTransaction const&amp;, WebKit::RemoteScrollingCoordinatorTransaction const&amp;)) + 116
5   WebKit                          0x0000000104a6e388 IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&amp;, IPC::Decoder&amp;) + 112
6   WebKit                          0x0000000104ccff8c WebKit::WebProcessProxy::didReceiveMessage(IPC::Connection&amp;, IPC::Decoder&amp;) + 36
7   WebKit                          0x0000000104a5a9dc IPC::Connection::dispatchMessage(IPC::Decoder&amp;) + 104
8   WebKit                          0x0000000104a576bc IPC::Connection::dispatchMessage(std::__1::unique_ptr&lt;IPC::Decoder, std::__1::default_delete&lt;IPC::Decoder&gt; &gt;) + 152
9   WebKit                          0x0000000104a5a210 IPC::Connection::dispatchIncomingMessages() + 348
10  JavaScriptCore                  0x00000001033c0588 WTF::RunLoop::performWork() + 272
11  JavaScriptCore                  0x00000001033c0858 WTF::RunLoop::performWork(void*) + 40
12  CoreFoundation                  0x00000001f6d90150 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 28
13  CoreFoundation                  0x00000001f6d900d8 __CFRunLoopDoSource0 + 92
14  CoreFoundation                  0x00000001f6d8f838 __CFRunLoopDoSources0 + 184
15  CoreFoundation                  0x00000001f6d8a72c __CFRunLoopRun + 1068
16  CoreFoundation                  0x00000001f6d89fd8 CFRunLoopRunSpecific + 480
17  GraphicsServices                0x00000001f5f6460c GSEventRunModal + 108
18  UIKitCore                       0x00000001fe8427f0 UIApplicationMain + 1956
19  MobileSafari                    0x00000001029343dc main + 1504
20  libdyld.dylib                   0x00000001f72ebcc0 start + 4</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1522461</commentid>
    <comment_count>1</comment_count>
    <who name="Wenson Hsieh">wenson_hsieh</who>
    <bug_when>2019-03-29 08:49:58 -0700</bug_when>
    <thetext>Never mind, I can&apos;t reproduce this...</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>