231346 2021-10-06 21:07:57 -0700 _WKRemoteObjectRegistry's ReplyBlockCallChecker should always dealloc on the main thread 2021-10-06 22:33:45 -0700 1 1 1 Unclassified WebKit WebKit Misc. WebKit Local Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 timothy timothy cdumez thorton webkit-bug-importer oldest_to_newest 1801487 0 timothy 2021-10-06 21:07:57 -0700 It is currently hitting this ASSERT. Thread 11 Queue: #0 0x0000000136cbaf95 in WebKit::AuxiliaryProcessProxy::sendMessage(WTF::UniqueRef<IPC::Encoder>&&, WTF::OptionSet<IPC::SendOption>, std::__1::optional<std::__1::pair<WTF::CompletionHandler<void (IPC::Decoder*)>, unsigned long long> >&&, WebKit::AuxiliaryProcessProxy::ShouldStartProcessThrottlerActivity) at Source/WebKit/UIProcess/AuxiliaryProcessProxy.cpp:187 #1 0x0000000136e55740 in WebKit::WebPageProxy::sendMessage(WTF::UniqueRef<IPC::Encoder>&&, WTF::OptionSet<IPC::SendOption>, std::__1::optional<std::__1::pair<WTF::CompletionHandler<void (IPC::Decoder*)>, unsigned long long> >&&) at Source/WebKit/UIProcess/WebPageProxy.cpp:6756 #2 0x00000001363da27a in bool IPC::MessageSender::send<Messages::RemoteObjectRegistry::ReleaseUnusedReplyBlock>(Messages::RemoteObjectRegistry::ReleaseUnusedReplyBlock const&, unsigned long long, WTF::OptionSet<IPC::SendOption>) at Source/WebKit/Platform/IPC/MessageSender.h:50 #3 0x00000001363da1aa in WebKit::RemoteObjectRegistry::sendUnusedReply(unsigned long long) at Source/WebKit/Shared/API/Cocoa/RemoteObjectRegistry.mm:64 #4 0x0000000136405681 in -[_WKRemoteObjectRegistry _invokeMethod:]::ReplyBlockCallChecker::~ReplyBlockCallChecker() at Source/WebKit/Shared/API/Cocoa/_WKRemoteObjectRegistry.mm:306 #5 0x00000001364055b5 in -[_WKRemoteObjectRegistry _invokeMethod:]::ReplyBlockCallChecker::~ReplyBlockCallChecker() at Source/WebKit/Shared/API/Cocoa/_WKRemoteObjectRegistry.mm:296 #6 0x000000013640558a in WTF::ThreadSafeRefCounted<-[_WKRemoteObjectRegistry _invokeMethod:]::ReplyBlockCallChecker, (WTF::DestructionThread)0>::deref() const::'lambda'()::operator()() const at /usr/local/include/wtf/ThreadSafeRefCounted.h:117 #7 0x0000000136405507 in WTF::ThreadSafeRefCounted<-[_WKRemoteObjectRegistry _invokeMethod:]::ReplyBlockCallChecker, (WTF::DestructionThread)0>::deref() const at /usr/local/include/wtf/ThreadSafeRefCounted.h:129 #8 0x00000001364057ee in WTF::DefaultRefDerefTraits<-[_WKRemoteObjectRegistry _invokeMethod:]::ReplyBlockCallChecker>::derefIfNotNull(-[_WKRemoteObjectRegistry _invokeMethod:]::ReplyBlockCallChecker*) at /usr/local/include/wtf/RefPtr.h:42 #9 0x00000001364057b9 in WTF::RefPtr<-[_WKRemoteObjectRegistry _invokeMethod:]::ReplyBlockCallChecker, WTF::RawPtrTraits<-[_WKRemoteObjectRegistry _invokeMethod:]::ReplyBlockCallChecker>, WTF::DefaultRefDerefTraits<-[_WKRemoteObjectRegistry _invokeMethod:]::ReplyBlockCallChecker> >::~RefPtr() at /usr/local/include/wtf/RefPtr.h:73 #10 0x00000001363f5df5 in WTF::RefPtr<-[_WKRemoteObjectRegistry _invokeMethod:]::ReplyBlockCallChecker, WTF::RawPtrTraits<-[_WKRemoteObjectRegistry _invokeMethod:]::ReplyBlockCallChecker>, WTF::DefaultRefDerefTraits<-[_WKRemoteObjectRegistry _invokeMethod:]::ReplyBlockCallChecker> >::~RefPtr() at /usr/local/include/wtf/RefPtr.h:73 #11 0x00000001363ff1bd in -[_WKRemoteObjectRegistry _invokeMethod:]::$_1::~$_1() at Source/WebKit/Shared/API/Cocoa/_WKRemoteObjectRegistry.mm:324 #12 0x00000001363f5d65 in -[_WKRemoteObjectRegistry _invokeMethod:]::$_1::~$_1() at Source/WebKit/Shared/API/Cocoa/_WKRemoteObjectRegistry.mm:324 #13 0x00000001363f5d49 in __destroy_helper_block_e8_32c54_ZTSKZ41-[_WKRemoteObjectRegistry _invokeMethod:]E3$_1 () #14 0x00007ff819613651 in _Block_release () #15 0x00007ff819613651 in _Block_release () #16 0x000000010c2b8bad in __destroy_helper_block_ea8_32s () #17 0x00007ff819613651 in _Block_release () #18 0x000000010cd22bc3 in __destroy_helper_block_ea8_32s40s48s () #19 0x00007ff819613651 in _Block_release () #20 0x000000010cd20ab8 in __destroy_helper_block_ea8_32s40s () #21 0x00007ff819613651 in _Block_release () #22 0x00007ff81a7ca985 in -[_NSXPCConnectionExpectedReplyInfo dealloc] () #23 0x00007ff81a7cdbbf in __destroy_helper_block_e8_32o40o48o () #24 0x00007ff819613651 in _Block_release () #25 0x00007ff819622669 in _xpc_connection_call_reply_async () #26 0x00007ff8196281b9 in do_mach_notify_send_once () #27 0x00007ff81962812a in _Xmach_notify_send_once () #28 0x00007ff819626d12 in notify_server () #29 0x00007ff819626c49 in _xpc_connection_pass2mig () #30 0x000000010adae8da in _dispatch_client_callout3 () #31 0x000000010adcf517 in _dispatch_mach_msg_async_reply_invoke () #32 0x000000010adb5e09 in _dispatch_lane_serial_drain () #33 0x000000010adb6f20 in _dispatch_lane_invoke () #34 0x000000010adc4d1d in _dispatch_workloop_worker_thread () #35 0x000000010a51e7e7 in _pthread_wqthread () #36 0x000000010a524ceb in start_wqthread () 1801488 1 webkit-bug-importer 2021-10-06 21:08:11 -0700 <rdar://problem/83965481> 1801489 2 440465 timothy 2021-10-06 21:10:29 -0700 Created attachment 440465 Patch 1801492 3 440465 cdumez 2021-10-06 21:23:11 -0700 Comment on attachment 440465 Patch R=me 1801504 4 ews-feeder 2021-10-06 22:33:42 -0700 Committed r283701 (242627@main): <https://commits.webkit.org/242627@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 440465. 440465 2021-10-06 21:10:29 -0700 2021-10-06 22:33:43 -0700 Patch bug-231346-20211006211027.patch text/plain 1823 timothy U3VidmVyc2lvbiBSZXZpc2lvbjogMjgzNjUxCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IGQyNTljYWNlYTdkNDQxNzU4 MjYzNmUyYTFhYzE4MGIwOTRkOWFlMmUuLmE2NTAyZjUzMzdjOGZjMDU5NWMwOGY4ODcyMzZlZWRl M2UwYTBiOTMgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTQgQEAKKzIwMjEtMTAtMDYgIFRpbW90aHkg SGF0Y2hlciAgPHRpbW90aHlAYXBwbGUuY29tPgorCisgICAgICAgIF9XS1JlbW90ZU9iamVjdFJl Z2lzdHJ5J3MgUmVwbHlCbG9ja0NhbGxDaGVja2VyIHNob3VsZCBhbHdheXMgZGVhbGxvYyBvbiB0 aGUgbWFpbiB0aHJlYWQKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcu Y2dpP2lkPTIzMTM0NgorICAgICAgICByZGFyOi8vcHJvYmxlbS84Mzk2NTQ4MQorCisgICAgICAg IFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgICogU2hhcmVkL0FQSS9Db2Nv YS9fV0tSZW1vdGVPYmplY3RSZWdpc3RyeS5tbToKKyAgICAgICAgKC1bX1dLUmVtb3RlT2JqZWN0 UmVnaXN0cnkgX2ludm9rZU1ldGhvZDpdKTogQWRkZWQgV1RGOjpEZXN0cnVjdGlvblRocmVhZDo6 TWFpblJ1bkxvb3AgdG8gUmVwbHlCbG9ja0NhbGxDaGVja2VyLgorCiAyMDIxLTEwLTA2ICBNZWdh biBHYXJkbmVyICA8bWVnYW5fZ2FyZG5lckBhcHBsZS5jb20+CiAKICAgICAgICAgQWxsb3cgdGV4 dCBzZWxlY3Rpb24gdG8gZmxpcC4KZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJLaXQvU2hhcmVkL0FQ SS9Db2NvYS9fV0tSZW1vdGVPYmplY3RSZWdpc3RyeS5tbSBiL1NvdXJjZS9XZWJLaXQvU2hhcmVk L0FQSS9Db2NvYS9fV0tSZW1vdGVPYmplY3RSZWdpc3RyeS5tbQppbmRleCBiOThmMTQ0ZWVmNDMy YTQzOTY3Mjk2YTMxNTAyYzNmZTVkMTgzZDUzLi5iOTg5NjZlY2FkNDFiNDhlZWNkMjU4MjJiNGMz YzFlNmQ5OGEwODdlIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViS2l0L1NoYXJlZC9BUEkvQ29jb2Ev X1dLUmVtb3RlT2JqZWN0UmVnaXN0cnkubW0KKysrIGIvU291cmNlL1dlYktpdC9TaGFyZWQvQVBJ L0NvY29hL19XS1JlbW90ZU9iamVjdFJlZ2lzdHJ5Lm1tCkBAIC0yODgsNyArMjg4LDcgQEAgLSAo dm9pZClfaW52b2tlTWV0aG9kOihjb25zdCBXZWJLaXQ6OlJlbW90ZU9iamVjdEludm9jYXRpb24m KXJlbW90ZU9iamVjdEludm9jYXQKICAgICAgICAgUmV0YWluUHRyPF9XS1JlbW90ZU9iamVjdFJl Z2lzdHJ5PiByZW1vdGVPYmplY3RSZWdpc3RyeSA9IHNlbGY7CiAgICAgICAgIHVpbnQ2NF90IHJl cGx5SUQgPSByZXBseUluZm8tPnJlcGx5SUQ7CiAKLSAgICAgICAgY2xhc3MgUmVwbHlCbG9ja0Nh bGxDaGVja2VyIDogcHVibGljIFdURjo6VGhyZWFkU2FmZVJlZkNvdW50ZWQ8UmVwbHlCbG9ja0Nh bGxDaGVja2VyPiB7CisgICAgICAgIGNsYXNzIFJlcGx5QmxvY2tDYWxsQ2hlY2tlciA6IHB1Ymxp YyBXVEY6OlRocmVhZFNhZmVSZWZDb3VudGVkPFJlcGx5QmxvY2tDYWxsQ2hlY2tlciwgV1RGOjpE ZXN0cnVjdGlvblRocmVhZDo6TWFpblJ1bkxvb3A+IHsKICAgICAgICAgcHVibGljOgogICAgICAg ICAgICAgc3RhdGljIFJlZjxSZXBseUJsb2NrQ2FsbENoZWNrZXI+IGNyZWF0ZShfV0tSZW1vdGVP YmplY3RSZWdpc3RyeSAqcmVnaXN0cnksIHVpbnQ2NF90IHJlcGx5SUQpIHsgcmV0dXJuIGFkb3B0 UmVmKCpuZXcgUmVwbHlCbG9ja0NhbGxDaGVja2VyKHJlZ2lzdHJ5LCByZXBseUlEKSk7IH0KIAo=