<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>200545</bug_id>
          
          <creation_ts>2019-08-08 13:09:22 -0700</creation_ts>
          <short_desc>ScrollingStateNode is not ThreadSafeRefCounted but is ref&apos;d / deref&apos;d from several threads</short_desc>
          <delta_ts>2019-08-08 15:11:19 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebCore Misc.</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>200507</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Chris Dumez">cdumez</reporter>
          <assigned_to name="Chris Dumez">cdumez</assigned_to>
          <cc>achristensen</cc>
    
    <cc>cmarcelo</cc>
    
    <cc>commit-queue</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>fred.wang</cc>
    
    <cc>ggaren</cc>
    
    <cc>jamesr</cc>
    
    <cc>koivisto</cc>
    
    <cc>luiz</cc>
    
    <cc>simon.fraser</cc>
    
    <cc>tonikitoo</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1559639</commentid>
    <comment_count>0</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2019-08-08 13:09:22 -0700</bug_when>
    <thetext>ScrollingStateNode is not ThreadSafeRefCounted but is ref&apos;d / deref&apos;d from several threads:

Thread 8 Crashed:: WebCore: Scrolling
0   com.apple.WebCore             	0x0000000101a45093 WTFCrashWithInfo(int, char const*, char const*, int) + 19
1   com.apple.WebCore             	0x0000000102cfddce WTF::RefCounted&lt;WebCore::ScrollingStateNode&gt;::deref() const + 126
2   com.apple.WebCore             	0x0000000102d00188 WebCore::ScrollingStateTree::~ScrollingStateTree() + 40
3   com.apple.WebCore             	0x0000000102d07b80 WebCore::ThreadedScrollingTree::commitTreeState(std::__1::unique_ptr&lt;WebCore::ScrollingStateTree, std::__1::default_delete&lt;WebCore::ScrollingStateTree&gt; &gt;) + 64
4   com.apple.WebCore             	0x0000000101c467e7 WTF::Detail::CallableWrapper&lt;WebCore::ScrollingCoordinatorMac::commitTreeState()::$_5, void&gt;::call() + 39
5   com.apple.WebCore             	0x0000000102d01d79 WebCore::ScrollingThread::dispatchFunctionsFromScrollingThread() + 121
6   com.apple.WebCore             	0x0000000101c4584a WebCore::ScrollingThread::threadRunLoopSourceCallback(void*) + 26
7   com.apple.CoreFoundation      	0x00007fff3e2f8581 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
8   com.apple.CoreFoundation      	0x00007fff3e3b08ac __CFRunLoopDoSource0 + 108
9   com.apple.CoreFoundation      	0x00007fff3e2db530 __CFRunLoopDoSources0 + 208
10  com.apple.CoreFoundation      	0x00007fff3e2da9ad __CFRunLoopRun + 1293
11  com.apple.CoreFoundation      	0x00007fff3e2da207 CFRunLoopRunSpecific + 487
12  com.apple.CoreFoundation      	0x00007fff3e3186b3 CFRunLoopRun + 99
13  com.apple.WebCore             	0x0000000101c457dd WebCore::ScrollingThread::initializeRunLoop() + 253
14  com.apple.JavaScriptCore      	0x000000010623e694 WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*) + 212
15  com.apple.JavaScriptCore      	0x0000000106240959 WTF::wtfThreadEntryPoint(void*) + 9
16  libsystem_pthread.dylib       	0x00007fff665b2661 _pthread_body + 340
17  libsystem_pthread.dylib       	0x00007fff665b250d _pthread_start + 377
18  libsystem_pthread.dylib       	0x00007fff665b1bf9 thread_start + 13</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1559646</commentid>
    <comment_count>1</comment_count>
      <attachid>375836</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2019-08-08 13:40:34 -0700</bug_when>
    <thetext>Created attachment 375836
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1559651</commentid>
    <comment_count>2</comment_count>
      <attachid>375836</attachid>
    <who name="Antti Koivisto">koivisto</who>
    <bug_when>2019-08-08 13:59:32 -0700</bug_when>
    <thetext>Comment on attachment 375836
Patch

In which thread is it supposed to be deleted?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1559652</commentid>
    <comment_count>3</comment_count>
    <who name="Simon Fraser (smfr)">simon.fraser</who>
    <bug_when>2019-08-08 14:01:13 -0700</bug_when>
    <thetext>Chris and I talked about this. We have an explicit hand-off of the state tree in ScrollingCoordinatorMac::commitTreeState() which may be tripping his assertions.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1559653</commentid>
    <comment_count>4</comment_count>
      <attachid>375837</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2019-08-08 14:02:31 -0700</bug_when>
    <thetext>Created attachment 375837
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1559655</commentid>
    <comment_count>5</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2019-08-08 14:05:25 -0700</bug_when>
    <thetext>(In reply to Simon Fraser (smfr) from comment #3)
&gt; Chris and I talked about this. We have an explicit hand-off of the state
&gt; tree in ScrollingCoordinatorMac::commitTreeState() which may be tripping his
&gt; assertions.

(In reply to Antti Koivisto from comment #2)
&gt; Comment on attachment 375836 [details]
&gt; Patch
&gt; 
&gt; In which thread is it supposed to be deleted?

I am not familiar enough with this part of the code to be sure, but looking at the ScrollingStateNode data members, I do not see anything obviously unsafe if constructing them on the main thread and then destroying them on the scrolling thread.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1559660</commentid>
    <comment_count>6</comment_count>
      <attachid>375838</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2019-08-08 14:27:32 -0700</bug_when>
    <thetext>Created attachment 375838
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1559677</commentid>
    <comment_count>7</comment_count>
      <attachid>375838</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2019-08-08 15:10:42 -0700</bug_when>
    <thetext>Comment on attachment 375838
Patch

Clearing flags on attachment: 375838

Committed r248445: &lt;https://trac.webkit.org/changeset/248445&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1559678</commentid>
    <comment_count>8</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2019-08-08 15:10:44 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1559679</commentid>
    <comment_count>9</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2019-08-08 15:11:19 -0700</bug_when>
    <thetext>&lt;rdar://problem/54098566&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>375836</attachid>
            <date>2019-08-08 13:40:34 -0700</date>
            <delta_ts>2019-08-08 14:02:30 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-200545-20190808134033.patch</filename>
            <type>text/plain</type>
            <size>1684</size>
            <attacher name="Chris Dumez">cdumez</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjQ4NDQwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>375837</attachid>
            <date>2019-08-08 14:02:31 -0700</date>
            <delta_ts>2019-08-08 14:27:31 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-200545-20190808140230.patch</filename>
            <type>text/plain</type>
            <size>1909</size>
            <attacher name="Chris Dumez">cdumez</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjQ4NDQwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>375838</attachid>
            <date>2019-08-08 14:27:32 -0700</date>
            <delta_ts>2019-08-08 15:10:42 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-200545-20190808142731.patch</filename>
            <type>text/plain</type>
            <size>2960</size>
            <attacher name="Chris Dumez">cdumez</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjQ4NDQwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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=
</data>

          </attachment>
      

    </bug>

</bugzilla>