<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>202045</bug_id>
          
          <creation_ts>2019-09-20 05:56:38 -0700</creation_ts>
          <short_desc>bmalloc::IsoAllocator&lt;bmalloc:: IsoConfig&lt;&gt;&gt;:allocateSlow(bool) Crash on iOS 12.4 and newer OS</short_desc>
          <delta_ts>2019-09-21 02:09:32 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>bmalloc</component>
          <version>Other</version>
          <rep_platform>iPhone / iPad</rep_platform>
          <op_sys>Other</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>200024</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Jin">ljin.zq</reporter>
          <assigned_to name="Yusuke Suzuki">ysuzuki</assigned_to>
          <cc>ap</cc>
    
    <cc>fpizlo</cc>
    
    <cc>ggaren</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>ysuzuki</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1572729</commentid>
    <comment_count>0</comment_count>
    <who name="Jin">ljin.zq</who>
    <bug_when>2019-09-20 05:56:38 -0700</bug_when>
    <thetext>1. create a UIWebView 
2. access a big document webpage ,such as  https://www.5554443.com


It will crash soon.

It seems it can not allocate memory, but at iOS 12.0 it works great.

Could you tell me what&apos;s the reason?   
Did WebCore&apos;s memory allocate has been modified ?


Many devloper talk about this:
https://forums.developer.apple.com/thread/121480



Callstack:

0   WebCore                             0x19d5ec330 bmalloc::IsoAllocator&lt;bmalloc::IsoConfig&lt;96u&gt; &gt;::allocateSlow(bool) + 252  
1   WebCore                             0x19d5ea594 WebCore::Attr::create(WebCore::Element&amp;, WebCore::QualifiedName const&amp;) + 256  
2   WebCore                             0x19d657c94 WebCore::Element::ensureAttr(WebCore::QualifiedName const&amp;) + 140  
3   WebCore                             0x19d681740 WebCore::NamedNodeMap::item(unsigned int) const + 152  
4   WebCore                             0x19cef9a28 WebCore::JSNamedNodeMap::getOwnPropertySlotByIndex(JSC::JSObject*, JSC::ExecState*, unsigned int, JSC::PropertySlot&amp;) + 140  
5   JavaScriptCore                      0x19ba71ad0 llint_slow_path_get_by_val + 5312  
6   JavaScriptCore                      0x19b48e5cc llint_entry + 34380  
7   JavaScriptCore                      0x19b49a304 llint_entry + 82820  
8   JavaScriptCore                      0x19b49a304 llint_entry + 82820  
9   JavaScriptCore                      0x19b49a304 llint_entry + 82820  
10  JavaScriptCore                      0x19b49a3a4 llint_entry + 82980  
11  JavaScriptCore                      0x19b485cec vmEntryToJavaScript + 268  
12  JavaScriptCore                      0x19b9b74d0 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;) + 424  
13  JavaScriptCore                      0x19bb9968c JSC::profiledCall(JSC::ExecState*, JSC::ProfilingReason, JSC::JSValue, JSC::CallType, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;, ***::NakedPtr&lt;JSC::Exception&gt;&amp;) + 200  
14  WebCore                             0x19d3d7acc WebCore::JSExecState::profiledCall(JSC::ExecState*, JSC::ProfilingReason, JSC::JSValue, JSC::CallType, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;, ***::NakedPtr&lt;JSC::Exception&gt;&amp;) + 140  
15  WebCore                             0x19d406a50 WebCore::ScheduledAction::executeFunctionInContext(JSC::JSGlobalObject*, JSC::JSValue, WebCore::ScriptExecutionContext&amp;) + 424  
16  WebCore                             0x19d4066d4 WebCore::ScheduledAction::execute(WebCore::Document&amp;) + 144  
17  WebCore                             0x19da67b20 WebCore::DOMTimer::fired() + 816  
18  WebCore                             0x19db565bc WebCore::ThreadTimers::sharedTimerFiredInternal() + 216  
19  WebCore                             0x19db76608 WebCore::timerFired(__CFRunLoopTimer*, void*) + 28  
20  CoreFoundation                      0x194074d60 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 28  
21  CoreFoundation                      0x194074a90 __CFRunLoopDoTimer + 864  
22  CoreFoundation                      0x1940742c4 __CFRunLoopDoTimers + 248  
23  CoreFoundation                      0x19406f214 __CFRunLoopRun + 1844  
24  CoreFoundation                      0x19406e7c0 CFRunLoopRunSpecific + 436  
25  WebCore                             0x19cd61fc4 RunWebThread(void*) + 600  
26  libsystem_pthread.dylib             0x193d012c0 _pthread_body + 128  
27  libsystem_pthread.dylib             0x193d01220 _pthread_start + 44  
28  libsystem_pthread.dylib             0x193d04cdc thread_start + 4</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1572775</commentid>
    <comment_count>1</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2019-09-20 09:57:15 -0700</bug_when>
    <thetext>I cannot reproduce this on a newer iOS. Can you reproduce with iOS 13.1 beta?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1572777</commentid>
    <comment_count>2</comment_count>
    <who name="Yusuke Suzuki">ysuzuki</who>
    <bug_when>2019-09-20 10:08:48 -0700</bug_when>
    <thetext>I think this issue is fixed in iOS13.1, can you test it?
I also opened it on Safari on newer iOS and cannot reproduce the crash.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1572778</commentid>
    <comment_count>3</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2019-09-20 10:11:30 -0700</bug_when>
    <thetext>&lt;rdar://problem/55563460&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1573054</commentid>
    <comment_count>4</comment_count>
    <who name="Jin">ljin.zq</who>
    <bug_when>2019-09-21 01:59:05 -0700</bug_when>
    <thetext>(In reply to Yusuke Suzuki from comment #2)
&gt; I think this issue is fixed in iOS13.1, can you test it?
&gt; I also opened it on Safari on newer iOS and cannot reproduce the crash.

Cloud you give me the commit  or the diff ?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1573056</commentid>
    <comment_count>5</comment_count>
    <who name="Yusuke Suzuki">ysuzuki</who>
    <bug_when>2019-09-21 02:09:08 -0700</bug_when>
    <thetext>I confirmed it is fixed in public beta. Closing.

*** This bug has been marked as a duplicate of bug 200024 ***</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1573058</commentid>
    <comment_count>6</comment_count>
    <who name="Yusuke Suzuki">ysuzuki</who>
    <bug_when>2019-09-21 02:09:32 -0700</bug_when>
    <thetext>(In reply to Jin from comment #4)
&gt; (In reply to Yusuke Suzuki from comment #2)
&gt; &gt; I think this issue is fixed in iOS13.1, can you test it?
&gt; &gt; I also opened it on Safari on newer iOS and cannot reproduce the crash.
&gt; 
&gt; Cloud you give me the commit  or the diff ?

See this issue. https://bugs.webkit.org/show_bug.cgi?id=200024</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>