<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>199657</bug_id>
          
          <creation_ts>2019-07-09 21:34:13 -0700</creation_ts>
          <short_desc>WebKit::WebProcessProxy::~WebProcessProxy crash</short_desc>
          <delta_ts>2019-07-10 09:44:55 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>Other</version>
          <rep_platform>iPhone / iPad</rep_platform>
          <op_sys>Other</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>199420</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>public-apollonian</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>achristensen</cc>
    
    <cc>ap</cc>
    
    <cc>cdumez</cc>
    
    <cc>rniwa</cc>
    
    <cc>sihui_liu</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1551596</commentid>
    <comment_count>0</comment_count>
    <who name="">public-apollonian</who>
    <bug_when>2019-07-09 21:34:13 -0700</bug_when>
    <thetext>Hardware Model:      iPhone10,3
Code Type:           ARM-64 (Native)
Role:                Foreground
Parent Process:      launchd [1]

OS Version:          iPhone OS 13.0 (17A5522g)
Release Type:        Beta
Baseband Version:    4.03.02
Report Version:      104

Exception Type:  EXC_BREAKPOINT (SIGTRAP)
Exception Codes: 0x0000000000000001, 0x000000019926a8a8
Termination Signal: Trace/BPT trap: 5
Termination Reason: Namespace SIGNAL, Code 0x5
Terminating Process: exc handler [4778]
Triggered by Thread:  19

Thread 19 name:  WebThread
Thread 19 Crashed:
0   WebKit                        	0x000000019926a8a8 WTFCrashWithInfo+ 116904 (int, char const*, char const*, int) + 20
1   WebKit                        	0x00000001994de1d4 WebKit::WebProcessProxy::~WebProcessProxy+ 2687444 () + 0
2   WebKit                        	0x00000001994de1fc WebKit::WebProcessProxy::~WebProcessProxy+ 2687484 () + 12
3   WebKit                        	0x00000001994f0690 WTF::Detail::CallableWrapper&lt;WebKit::WebProcessProxy::deleteWebsiteData(PAL::SessionID, WTF::OptionSet&lt;WebKit::WebsiteDataType&gt;, WTF::WallTime, WTF::CompletionHandler&lt;void ()&gt;&amp;&amp;)::$_27, void&gt;::~CallableWrapper+ 2762384 () + 192
4   WebKit                        	0x00000001994f0480 WTF::Detail::CallableWrapper&lt;void IPC::Connection::sendWithAsyncReply&lt;Messages::WebProcess::DeleteWebsiteData, WebKit::WebProcessProxy::deleteWebsiteData(PAL::SessionID, WTF::OptionSet&lt;WebKit::WebsiteDataType&gt;, WTF::WallTime, WTF::CompletionHandler&lt;void ()&gt;&amp;&amp;)::$_27&gt;(Messages::WebProcess::DeleteWebsiteData&amp;&amp;, WebKit::WebProcessProxy::deleteWebsiteData(PAL::SessionID, WTF::OptionSet&lt;WebKit::WebsiteDataType&gt;, WTF::WallTime, WTF::CompletionHandler&lt;void ()&gt;&amp;&amp;)::$_27&amp;&amp;, unsigned long long)::&apos;lambda&apos;(IPC::Decoder*), void, IPC::Decoder*&gt;::call+ 2761856 (IPC::Decoder*) + 116
5   WebKit                        	0x0000000199281274 IPC::clearAsyncReplyHandlers+ 209524 (IPC::Connection const&amp;) + 200
6   WebKit                        	0x0000000199280f6c IPC::Connection::~Connection+ 208748 () + 96
7   WebKit                        	0x000000019927659c WTF::Detail::CallableWrapper&lt;WTF::ThreadSafeRefCounted&lt;IPC::Connection, (WTF::DestructionThread)1&gt;::deref() const::&apos;lambda&apos;(), void&gt;::call+ 165276 () + 20
8   JavaScriptCore                	0x00000001a0ed83a0 WTF::dispatchFunctionsFromMainThread+ 156576 () + 316
9   Foundation                    	0x00000001921abe6c __NSThreadPerformPerform + 232
10  CoreFoundation                	0x0000000191d445fc __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 24
11  CoreFoundation                	0x0000000191d44554 __CFRunLoopDoSource0 + 80
12  CoreFoundation                	0x0000000191d43cec __CFRunLoopDoSources0 + 180
13  CoreFoundation                	0x0000000191d3ee38 __CFRunLoopRun + 1080
14  CoreFoundation                	0x0000000191d3e6d8 CFRunLoopRunSpecific + 464
15  WebCore                       	0x0000000199c0baec RunWebThread+ 4250348 (void*) + 612
16  libsystem_pthread.dylib       	0x0000000191ae4164 _pthread_start + 128
17  libsystem_pthread.dylib       	0x0000000191ae7aac thread_start + 8</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1551686</commentid>
    <comment_count>1</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2019-07-10 09:19:19 -0700</bug_when>
    <thetext>There is only one RELEASE_ASSERT in this function, that being:

    RELEASE_ASSERT(isMainThreadOrCheckDisabled());

The process uses both Legacy and Modern WebKit APIs, and we erroneously execute the IPC::Connection destructor on the WebThread instead of the UI thread.

For Apple employees, this looks identical to rdar://problem/51577716&amp;52224515.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1551698</commentid>
    <comment_count>2</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2019-07-10 09:44:55 -0700</bug_when>
    <thetext>

*** This bug has been marked as a duplicate of bug 199420 ***</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>