<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>288931</bug_id>
          
          <creation_ts>2025-03-01 16:17:16 -0800</creation_ts>
          <short_desc>REGRESSION(291398@main): ASSERTION FAILED: expected.asNumber() == result.asNumber() in JSC::EncodedJSValue JSC::arrayProtoFuncIndexOf(JSGlobalObject *, CallFrame *)</short_desc>
          <delta_ts>2025-03-03 16:24:56 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=288548</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Fujii Hironori">fujii</reporter>
          <assigned_to name="Yijia Huang">yijia_huang</assigned_to>
          <cc>sosuke</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>yijia_huang</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2099684</commentid>
    <comment_count>0</comment_count>
    <who name="Fujii Hironori">fujii</who>
    <bug_when>2025-03-01 16:17:16 -0800</bug_when>
    <thetext>The following tests are crashing due to an assertion failure.

imported/w3c/web-platform-tests/css/css-animations/inheritance.html
imported/w3c/web-platform-tests/css/css-grid/grid-definition/grid-support-flexible-lengths-001.html

History:
  https://results.webkit.org/?suite=layout-tests&amp;suite=layout-tests&amp;test=imported%2Fw3c%2Fweb-platform-tests%2Fcss%2Fcss-grid%2Fgrid-definition%2Fgrid-support-flexible-lengths-001.html&amp;test=imported%2Fw3c%2Fweb-platform-tests%2Fcss%2Fcss-animations%2Finheritance.html&amp;style=debug

stderr:

https://build.webkit.org/results/Apple-Sequoia-Debug-WK1-Tests/291412@main%20(1236)/imported/w3c/web-platform-tests/css/css-animations/inheritance-crash-log.txt

ASSERTION FAILED: expected.asNumber() == result.asNumber()
./runtime/ArrayPrototype.cpp(1537) : JSC::EncodedJSValue JSC::arrayProtoFuncIndexOf(JSGlobalObject *, CallFrame *)
1   0x11d40e93e JSC::arrayProtoFuncIndexOf(JSC::JSGlobalObject*, JSC::CallFrame*)
2   0x186728118 1   ???                                 0x0000000186728118 0x0 + 6550618392
3   0x11e3824df jsc_llint_commonCallOp__llintOpWithMetadata__llintOpWithReturn__llintOp__commonOp__fn__fn__makeReturn__fn__fn__fn__916_callHelper__dispatch_LowLevelInterpreter64_asm_2535
4   0x186a315f7 3   ???                                 0x0000000186a315f7 0x0 + 6553802231
5   0x11e38391b jsc_llint_commonCallOp__llintOpWithMetadata__llintOpWithReturn__llintOp__commonOp__fn__fn__makeReturn__fn__fn__fn__934_callHelper__dispatch_LowLevelInterpreter64_asm_2535
6   0x11e38391b jsc_llint_commonCallOp__llintOpWithMetadata__llintOpWithReturn__llintOp__commonOp__fn__fn__makeReturn__fn__fn__fn__934_callHelper__dispatch_LowLevelInterpreter64_asm_2535
7   0x11e38391b jsc_llint_commonCallOp__llintOpWithMetadata__llintOpWithReturn__llintOp__commonOp__fn__fn__makeReturn__fn__fn__fn__934_callHelper__dispatch_LowLevelInterpreter64_asm_2535
8   0x11e3824df jsc_llint_commonCallOp__llintOpWithMetadata__llintOpWithReturn__llintOp__commonOp__fn__fn__makeReturn__fn__fn__fn__916_callHelper__dispatch_LowLevelInterpreter64_asm_2535
9   0x11e35a5ba llint_call_javascript
10  0x11d182d17 JSC::Interpreter::executeProgram(JSC::SourceCode const&amp;, JSC::JSGlobalObject*, JSC::JSObject*)
11  0x11d4e740b JSC::evaluate(JSC::JSGlobalObject*, JSC::SourceCode const&amp;, JSC::JSValue, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;)
12  0x11d4e756c JSC::profiledEvaluate(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::SourceCode const&amp;, JSC::JSValue, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;)
13  0x1696e9fb8 WebCore::JSExecState::profiledEvaluate(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::SourceCode const&amp;, JSC::JSValue, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;)
14  0x1696e997a WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&amp;, WebCore::DOMWrapperWorld&amp;)
15  0x1696e9609 WebCore::ScriptController::evaluateInWorldIgnoringException(WebCore::ScriptSourceCode const&amp;, WebCore::DOMWrapperWorld&amp;)
16  0x1696e9db5 WebCore::ScriptController::evaluateIgnoringException(WebCore::ScriptSourceCode const&amp;)
17  0x16a59a556 WebCore::ScriptElement::executeClassicScript(WebCore::ScriptSourceCode const&amp;)
18  0x16a509421 WebCore::LoadableClassicScript::execute(WebCore::ScriptElement&amp;)
19  0x16a59cf79 WebCore::ScriptElement::executeScriptAndDispatchEvent(WebCore::LoadableScript&amp;)
20  0x16a59d24b WebCore::ScriptElement::executePendingScript(WebCore::PendingScript&amp;)
21  0x16ac68a71 WebCore::HTMLScriptRunner::executePendingScriptAndDispatchEvent(WebCore::PendingScript&amp;)
22  0x16ac6935b WebCore::HTMLScriptRunner::executeParsingBlockingScripts()
23  0x16ac68c61 WebCore::HTMLScriptRunner::execute(WTF::Ref&lt;WebCore::ScriptElement, WTF::RawPtrTraits&lt;WebCore::ScriptElement&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::ScriptElement&gt;&gt;&amp;&amp;, WTF::TextPosition const&amp;)
24  0x16ac2b78e WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder()
25  0x16ac2bd1f WebCore::HTMLDocumentParser::pumpTokenizerLoop(WebCore::HTMLDocumentParser::SynchronousMode, bool, WebCore::PumpSession&amp;)
26  0x16ac2ae3d WebCore::HTMLDocumentParser::pumpTokenizer(WebCore::HTMLDocumentParser::SynchronousMode)
27  0x16ac2a4c2 WebCore::HTMLDocumentParser::pumpTokenizerIfPossible(WebCore::HTMLDocumentParser::SynchronousMode)
28  0x16ac2cac1 WebCore::HTMLDocumentParser::append(WTF::RefPtr&lt;WTF::StringImpl, WTF::RawPtrTraits&lt;WTF::StringImpl&gt;, WTF::DefaultRefDerefTraits&lt;WTF::StringImpl&gt;&gt;&amp;&amp;, WebCore::HTMLDocumentParser::SynchronousMode)
29  0x16ac2c87f WebCore::HTMLDocumentParser::append(WTF::RefPtr&lt;WTF::StringImpl, WTF::RawPtrTraits&lt;WTF::StringImpl&gt;, WTF::DefaultRefDerefTraits&lt;WTF::StringImpl&gt;&gt;&amp;&amp;)
30  0x16a2db0b4 WebCore::DecodedDataDocumentParser::appendBytes(WebCore::DocumentWriter&amp;, std::__1::span&lt;unsigned char const, 18446744073709551615ul&gt;)
31  0x16b11c174 WebCore::DocumentWriter::addData(WebCore::SharedBuffer const&amp;)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2099698</commentid>
    <comment_count>1</comment_count>
    <who name="Sosuke Suzuki">sosuke</who>
    <bug_when>2025-03-01 18:46:54 -0800</bug_when>
    <thetext>Probably caused by https://commits.webkit.org/291398@main</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2099700</commentid>
    <comment_count>2</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2025-03-01 19:34:43 -0800</bug_when>
    <thetext>&lt;rdar://problem/145945591&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2100087</commentid>
    <comment_count>3</comment_count>
    <who name="Yijia Huang">yijia_huang</who>
    <bug_when>2025-03-03 16:12:00 -0800</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/41818</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2100093</commentid>
    <comment_count>4</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2025-03-03 16:24:55 -0800</bug_when>
    <thetext>Committed 291535@main (db2338357f30): &lt;https://commits.webkit.org/291535@main&gt;

Reviewed commits have been landed. Closing PR #41818 and removing active labels.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>