254275 2023-03-22 10:09:35 -0700 ASSERTION FAILED: m_normalWorld->hasOneRef() on imported/w3c/web-platform-tests/fetch/api/policies/csp-blocked-worker.html, flakily 2023-03-22 16:31:15 -0700 1 1 1 Unclassified WebKit New Bugs Other Unspecified Unspecified NEW https://bugs.webkit.org/show_bug.cgi?id=254184 InRadar P2 Normal --- 1 bharris9 webkit-unassigned cdumez webkit-bot-watchers-bugzilla webkit-bug-importer youennf oldest_to_newest 1943118 0 bharris9 2023-03-22 10:09:35 -0700 imported/w3c/web-platform-tests/fetch/api/policies/csp-blocked-worker.html is a flaky crash on iOS 16 and macOS Debug running on Intel only. HISTORY: https://results.webkit.org/?suite=layout-tests&test=imported%2Fw3c%2Fweb-platform-tests%2Ffetch%2Fapi%2Fpolicies%2Fcsp-blocked-worker.html CRASH LOG/ STDERR Text: ASSERTION FAILED: m_normalWorld->hasOneRef() bindings/js/WebCoreJSClientData.cpp(144) : virtual WebCore::JSVMClientData::~JSVMClientData() 1 0x703cade79 WTFCrash 2 0x6c32fe6fb WTFCrashWithInfo(int, char const*, char const*, int) 3 0x6c679471d WebCore::JSVMClientData::~JSVMClientData() 4 0x6c67949d5 WebCore::JSVMClientData::~JSVMClientData() 5 0x6c67949f9 WebCore::JSVMClientData::~JSVMClientData() 6 0x705ede709 JSC::VM::~VM() 7 0x705edf805 JSC::VM::~VM() 8 0x70475aaca WTF::ThreadSafeRefCounted<JSC::VM, (WTF::DestructionThread)0>::deref() const::'lambda'()::operator()() const 9 0x704740b27 WTF::ThreadSafeRefCounted<JSC::VM, (WTF::DestructionThread)0>::deref() const 10 0x7055e599e WTF::DefaultRefDerefTraits<JSC::VM>::derefIfNotNull(JSC::VM*) 11 0x7055c9fa1 WTF::RefPtr<JSC::VM, WTF::RawPtrTraits<JSC::VM>, WTF::DefaultRefDerefTraits<JSC::VM> >::operator=(std::nullptr_t) 12 0x705bdf18a JSC::JSLockHolder::~JSLockHolder() 13 0x705bdf1f5 JSC::JSLockHolder::~JSLockHolder() 14 0x6c967cd9b WebCore::WorkerOrWorkletScriptController::~WorkerOrWorkletScriptController() 15 0x6c967ce35 WebCore::WorkerOrWorkletScriptController::~WorkerOrWorkletScriptController() 16 0x6c96a9bab std::__1::default_delete<WebCore::WorkerOrWorkletScriptController>::operator()(WebCore::WorkerOrWorkletScriptController*) const 17 0x6c96a9b2c std::__1::unique_ptr<WebCore::WorkerOrWorkletScriptController, std::__1::default_delete<WebCore::WorkerOrWorkletScriptController> >::reset(WebCore::WorkerOrWorkletScriptController*) 18 0x6c967c501 std::__1::unique_ptr<WebCore::WorkerOrWorkletScriptController, std::__1::default_delete<WebCore::WorkerOrWorkletScriptController> >::operator=(std::nullptr_t) 19 0x6c967c4d0 WebCore::WorkerOrWorkletGlobalScope::clearScript() 20 0x6c96d0bd6 WebCore::WorkerOrWorkletThread::stop(WTF::Function<void ()>&&)::$_6::operator()(WebCore::ScriptExecutionContext&) const::'lambda'(WebCore::ScriptExecutionContext&)::operator()(WebCore::ScriptExecutionContext&) const 21 0x6c96d0b81 WTF::Detail::CallableWrapper<WebCore::WorkerOrWorkletThread::stop(WTF::Function<void ()>&&)::$_6::operator()(WebCore::ScriptExecutionContext&) const::'lambda'(WebCore::ScriptExecutionContext&), void, WebCore::ScriptExecutionContext&>::call(WebCore::ScriptExecutionContext&) 22 0x6c63592a7 WTF::Function<void (WebCore::ScriptExecutionContext&)>::operator()(WebCore::ScriptExecutionContext&) const 23 0x6c6349d7d WebCore::ScriptExecutionContext::Task::performTask(WebCore::ScriptExecutionContext&) 24 0x6c96b53cd WebCore::WorkerDedicatedRunLoop::Task::performTask(WebCore::WorkerOrWorkletGlobalScope*) 25 0x6c96b4b05 WebCore::WorkerDedicatedRunLoop::runCleanupTasks(WebCore::WorkerOrWorkletGlobalScope*) 26 0x6c96b2eaf WebCore::WorkerDedicatedRunLoop::run(WebCore::WorkerOrWorkletGlobalScope*) 27 0x6c96b2e34 WebCore::WorkerOrWorkletThread::runEventLoop() 28 0x6c9823745 WebCore::ServiceWorkerThread::runEventLoop() 29 0x6c96b3213 WebCore::WorkerOrWorkletThread::workerOrWorkletThread() 30 0x6c96de8c8 WebCore::WorkerThread::createThread()::$_17::operator()() const 31 0x6c96de869 WTF::Detail::CallableWrapper<WebCore::WorkerThread::createThread()::$_17, void>::call() com.apple.WebKit.WebContent.Development terminated (pid 32996) for reason: crash LEAK: 1 WebPageProxy 1943120 1 bharris9 2023-03-22 10:18:40 -0700 I was able to reproduce this crash running on Ventura ToT as follows: run-webkit-tests imported/w3c/web-platform-tests/fetch/api/policies/csp-blocked-worker.html 1943121 2 webkit-bug-importer 2023-03-22 10:18:58 -0700 <rdar://problem/107062990>