<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>288993</bug_id>
          
          <creation_ts>2025-03-03 12:28:06 -0800</creation_ts>
          <short_desc>REGRESSION (291489@main?): [macOS Debug]: ASSERTION FAILED: from.isCell() &amp;&amp; from.asCell()-&gt;JSCell::inherits(std::remove_pointer&lt;To&gt;::type::info())</short_desc>
          <delta_ts>2025-03-03 16:07:50 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=288083</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Marta Darbinyan">darbinyan</reporter>
          <assigned_to name="Fujii Hironori">fujii.hironori</assigned_to>
          <cc>fujii</cc>
    
    <cc>webkit-bot-watchers-bugzilla</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2099986</commentid>
    <comment_count>0</comment_count>
    <who name="Marta Darbinyan">darbinyan</who>
    <bug_when>2025-03-03 12:28:06 -0800</bug_when>
    <thetext>The following tests are flaky crashes in macOS wk1 and wk2 Debug. Suspecting the tests started failing after 291488@main.

imported/w3c/web-platform-tests/encoding/api-invalid-label.any.worker.html?1001-2000
imported/w3c/web-platform-tests/encoding/api-invalid-label.any.worker.html?2001-3000


2025-03-03 08:59:46.699 WebKitTestRunner[3636:1373242] +[IMKClient subclass]: chose IMKClient_Modern
ASSERTION FAILED: from.isCell() &amp;&amp; from.asCell()-&gt;JSCell::inherits(std::remove_pointer&lt;To&gt;::type::info())
./runtime/JSCast.h(55) : To JSC::jsCast(JSValue) [To = JSC::JSPropertyNameEnumerator *]
1   0x1307b7468 JSC::JSPropertyNameEnumerator* JSC::jsCast&lt;JSC::JSPropertyNameEnumerator*&gt;(JSC::JSValue)
2   0x1307b707c slow_path_enumerator_next
3   0x1429a43b8 2   ???                                 0x00000001429a43b8 0x0 + 5412373432
4   0x142a215c8 3   ???                                 0x0000000142a215c8 0x0 + 5412885960
5   0x142a25fdc 4   ???                                 0x0000000142a25fdc 0x0 + 5412904924
6   0x142a04228 5   ???                                 0x0000000142a04228 0x0 + 5412766248
7   0x142a92bfc 6   ???                                 0x0000000142a92bfc 0x0 + 5413350396
8   0x142a7478c 7   ???                                 0x0000000142a7478c 0x0 + 5413226380
9   0x142a70538 8   ???                                 0x0000000142a70538 0x0 + 5413209400
10  0x131539254 llint_call_javascript
11  0x13046ea68 JSC::Interpreter::executeCallImpl(JSC::VM&amp;, JSC::JSObject*, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;)
12  0x13046ebac JSC::Interpreter::executeCall(JSC::JSObject*, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;)
13  0x130755004 JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;)
14  0x1307550bc JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;)
15  0x1307553a4 JSC::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;)
16  0x303d91920 WebCore::JSExecState::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&amp;, JSC::JSValue, JSC::ArgList const&amp;, WTF::NakedPtr&lt;JSC::Exception&gt;&amp;)
17  0x303e2ea20 WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext&amp;, WebCore::Event&amp;)
18  0x304c8f530 WebCore::EventTarget::innerInvokeEventListeners(WebCore::Event&amp;, WTF::Vector&lt;WTF::RefPtr&lt;WebCore::RegisteredEventListener, WTF::RawPtrTraits&lt;WebCore::RegisteredEventListener&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::RegisteredEventListener&gt;&gt;, 1ul, WTF::CrashOnOverflow, 2ul, WTF::FastMalloc&gt;, WebCore::EventTarget::EventInvokePhase)
19  0x304c8234c WebCore::EventTarget::fireEventListeners(WebCore::Event&amp;, WebCore::EventTarget::EventInvokePhase)
20  0x304c8ef74 WebCore::EventTarget::dispatchEvent(WebCore::Event&amp;)
21  0x307511eb8 WebCore::Worker::dispatchEvent(WebCore::Event&amp;)
22  0x30755032c _ZZZN7WebCore20WorkerMessagingProxy25postMessageToWorkerObjectEONS_23MessageWithMessagePortsEEN3$_0clINS_22ScriptExecutionContextEEEDaRT_ENUlvE_clEv
23  0x30754fff4 _ZN3WTF6Detail15CallableWrapperIZZN7WebCore20WorkerMessagingProxy25postMessageToWorkerObjectEONS2_23MessageWithMessagePortsEEN3$_0clINS2_22ScriptExecutionContextEEEDaRT_EUlvE_vJEE4callEv
24  0x300033e04 WTF::Function&lt;void ()&gt;::operator()() const
25  0x30751f94c void WebCore::ActiveDOMObject::queueTaskKeepingObjectAlive&lt;WebCore::Worker&gt;(WebCore::Worker&amp;, WebCore::TaskSource, WTF::Function&lt;void ()&gt;&amp;&amp;)::&apos;lambda&apos;()::operator()() const
26  0x30751f880 WTF::Detail::CallableWrapper&lt;void WebCore::ActiveDOMObject::queueTaskKeepingObjectAlive&lt;WebCore::Worker&gt;(WebCore::Worker&amp;, WebCore::TaskSource, WTF::Function&lt;void ()&gt;&amp;&amp;)::&apos;lambda&apos;(), void&gt;::call()
27  0x300033e04 WTF::Function&lt;void ()&gt;::operator()() const
28  0x304c9458c WebCore::EventLoopFunctionDispatchTask::execute()
29  0x304c878ac WebCore::EventLoop::run(std::__1::optional&lt;WTF::ApproximateTime&gt;)
30  0x304e6842c WebCore::WindowEventLoop::didReachTimeToRun()
31  0x304e6bc0c WebCore::Timer::Timer&lt;WebCore::WindowEventLoop, WebCore::WindowEventLoop&gt;(WebCore::WindowEventLoop&amp;, void (WebCore::WindowEventLoop::*)())::&apos;lambda&apos;()::operator()() const
com.apple.WebKit.WebContent.Development terminated (pid 3660) for reason: crash
LEAK: 1 WebPageProxy

I was not able to reproduce this crash locally running on Sequoia machine. 

Test results: 
https://ews-build.s3-us-west-2.amazonaws.com/macOS-Sequoia-Debug-WK2-Tests-EWS/3c96445e-14764-clean-tree/results.html

Test history:
https://results.webkit.org/?style=debug&amp;suite=layout-tests&amp;suite=layout-tests&amp;test=imported%2Fw3c%2Fweb-platform-tests%2Fencoding%2Fapi-invalid-label.any.worker.html%3F1001-2000&amp;test=imported%2Fw3c%2Fweb-platform-tests%2Fencoding%2Fapi-invalid-label.any.worker.html%3F2001-3000</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2099987</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2025-03-03 12:28:55 -0800</bug_when>
    <thetext>&lt;rdar://problem/146041975&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2100083</commentid>
    <comment_count>2</comment_count>
    <who name="Fujii Hironori">fujii</who>
    <bug_when>2025-03-03 16:07:50 -0800</bug_when>
    <thetext>291519@main reverted 291489@main.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>