<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>312903</bug_id>
          
          <creation_ts>2026-04-21 09:12:54 -0700</creation_ts>
          <short_desc>REGRESSION(302256@main): [Tahoe] TestWebKitAPI.WebKitLegacy.IsNavigationActionTrusted is a flaky CRASH</short_desc>
          <delta_ts>2026-04-23 11:14:07 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit API</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Karl Rackler">rackler</reporter>
          <assigned_to name="Karl Rackler">rackler</assigned_to>
          <cc>jbedard</cc>
    
    <cc>webkit-bot-watchers-bugzilla</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>yijia_huang</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2202771</commentid>
    <comment_count>0</comment_count>
    <who name="Karl Rackler">rackler</who>
    <bug_when>2026-04-21 09:12:54 -0700</bug_when>
    <thetext>Description:
TestWebKitAPI.WebKitLegacy.IsNavigationActionTrusted is a flaky CRASH on mac Tahoe Debug

Regression = https://commits.webkit.org/compare/302255@main...302256@main

This issue can be bisected to 302256@main using the command:
run-api-tests --no-build TestWebKitAPI.WebKitLegacy.IsNavigationActionTrusted

------------- BISECTION AUDIT TRAIL -------------
301908@main, 9b69b5c0d700 --&gt; Passed
302098@main, 52a11367f75d --&gt; Passed
302187@main, 3fe300f248f3 --&gt; Passed
302212@main, 0a3e9f018b73 --&gt; Passed
302236@main, 9c4db04c6d43 --&gt; Passed
302245@main, 499bd04b16d5 --&gt; Passed
302251@main, b82e1a6452a2 --&gt; Passed
302253@main, b6c95d8926c1 --&gt; Passed
302255@main, ec36c242bdff --&gt; Passed
302256@main, ec36c242bdff --&gt; CRASH
302559@main, a9b314dc9b8b --&gt; CRASH
303173@main, 4563dd18bbd7 --&gt; CRASH
303184@main, 837ec25d19ea --&gt; CRASH
304514@main, 06dac8476dd8 --&gt; CRASH
304606@main, f8b2fc6d3b89 --&gt; CRASH
306270@main, e74549085e7d --&gt; CRASH
306855@main, 5ba368beb476 --&gt; CRASH
307688@main, 0758ca716825 --&gt; CRASH
308955@main, 76c33ceda510 --&gt; CRASH
310268@main, 80ff50d0abd0 --&gt; CRASH
311638@main, 0da44e0e68a6 --&gt; CRASH
------------- BISECTION AUDIT TRAIL END -------------

History:
https://results.webkit.org/?version_name=Tahoe&amp;suite=api-tests&amp;test=TestWebKitAPI.WebKitLegacy.IsNavigationActionTrusted

Crash Log:
ASSERTION FAILED: osVersionSupports(os_script_config_storage)
/System/Volumes/Data/otmp/case-sensitive/od.luxon/lw.luxon/sandbox-0/workspace/OpenSource/Source/JavaScriptCore/llint/LLIntData.cpp(129) : void JSC::LLInt::initialize()
1   0x117d72c08 JSC::LLInt::initialize()
2   0x11a26c1bc JSC::initializeWithOptionsCustomization(WTF::ScopedLambda&lt;void ()&gt; const&amp;)::$_0::operator()() const
3   0x11a26c0bc std::__1::__invoke_result_impl&lt;void, JSC::initializeWithOptionsCustomization(WTF::ScopedLambda&lt;void ()&gt; const&amp;)::$_0&gt;::type std::__1::__invoke[abi:sqn210106]&lt;JSC::initializeWithOptionsCustomization(WTF::ScopedLambda&lt;void ()&gt; const&amp;)::$_0&gt;(JSC::initializeWithOptionsCustomization(WTF::ScopedLambda&lt;void ()&gt; const&amp;)::$_0&amp;&amp;)
4   0x11a26c094 void std::__1::__call_once_param&lt;std::__1::tuple&lt;JSC::initializeWithOptionsCustomization(WTF::ScopedLambda&lt;void ()&gt; const&amp;)::$_0&amp;&amp;&gt;&gt;::__execute[abi:sqn210106]&lt;&gt;(std::__1::__tuple_indices&lt;&gt;)
5   0x11a26c064 std::__1::__call_once_param&lt;std::__1::tuple&lt;JSC::initializeWithOptionsCustomization(WTF::ScopedLambda&lt;void ()&gt; const&amp;)::$_0&amp;&amp;&gt;&gt;::operator()[abi:sqn210106]()
6   0x11a26bf54 void std::__1::__call_once_proxy[abi:sqn210106]&lt;std::__1::tuple&lt;JSC::initializeWithOptionsCustomization(WTF::ScopedLambda&lt;void ()&gt; const&amp;)::$_0&amp;&amp;&gt;&gt;(void*)
7   0x1908344e4 std::__1::__call_once(unsigned long volatile&amp;, void*, void (*)(void*))
8   0x11a22fa38 void std::__1::call_once[abi:sqn210106]&lt;JSC::initializeWithOptionsCustomization(WTF::ScopedLambda&lt;void ()&gt; const&amp;)::$_0&gt;(std::__1::once_flag&amp;, JSC::initializeWithOptionsCustomization(WTF::ScopedLambda&lt;void ()&gt; const&amp;)::$_0&amp;&amp;)
9   0x11a22f9c0 JSC::initializeWithOptionsCustomization(WTF::ScopedLambda&lt;void ()&gt; const&amp;)
10  0x11a22f968 void JSC::initialize&lt;JSC::initialize()::$_0&gt;(JSC::initialize()::$_0 const&amp;)
11  0x11a22f920 JSC::initialize()
12  0x1285685ac WebCore::initializeMainThreadWebCore()
13  0x128568590 WebCore::initializeMainThreadIfNeeded()
14  0x107fad964 +[WebView initialize]
15  0x1904ceb9c CALLING_SOME_+initialize_METHOD
16  0x1904ce844 initializeNonMetaClass
17  0x1904ea0ac initializeAndMaybeRelock(objc_class*, objc_object*, locker_mixin&lt;lockdebug::lock_mixin&lt;objc_lock_base_t&gt;&gt;&amp;, bool)
18  0x1904cdf8c lookUpImpOrForward
19  0x1904cdb84 _objc_msgSend_uncached
20  0x190504a54 objc_alloc_init
21  0x1034b17c4 TestWebKitAPI::WebKitLegacy_IsNavigationActionTrusted_Test::TestBody()
22  0x103b8089c void testing::internal::HandleSehExceptionsInMethodIfSupported&lt;testing::Test, void&gt;(testing::Test*, void (testing::Test::*)(), char const*)
23  0x103b37b2c void testing::internal::HandleExceptionsInMethodIfSupported&lt;testing::Test, void&gt;(testing::Test*, void (testing::Test::*)(), char const*)
24  0x103b37a68 testing::Test::Run()
25  0x103b38b88 testing::TestInfo::Run()
26  0x103b39e84 testing::TestSuite::Run()
27  0x103b482a0 testing::internal::UnitTestImpl::RunAllTests()
28  0x103b8595c bool testing::internal::HandleSehExceptionsInMethodIfSupported&lt;testing::internal::UnitTestImpl, bool&gt;(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*)
29  0x103b47be0 bool testing::internal::HandleExceptionsInMethodIfSupported&lt;testing::internal::UnitTestImpl, bool&gt;(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*)
30  0x103b47ad0 testing::UnitTest::Run()
31  0x103afba04 RUN_ALL_TESTS()

Test Run:
https://build.webkit.org/#/builders/1692/builds/3072</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2202772</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2026-04-21 09:15:23 -0700</bug_when>
    <thetext>&lt;rdar://problem/175258056&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2202825</commentid>
    <comment_count>2</comment_count>
    <who name="Karl Rackler">rackler</who>
    <bug_when>2026-04-21 10:26:13 -0700</bug_when>
    <thetext>Test gardening pull request: https://github.com/WebKit/WebKit/pull/63241</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2202827</commentid>
    <comment_count>3</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2026-04-21 10:28:35 -0700</bug_when>
    <thetext>Test gardening commit 311701@main (3819a6d06a09): &lt;https://commits.webkit.org/311701@main&gt;

Reviewed commits have been landed. Closing PR #63241 and removing active labels.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2203766</commentid>
    <comment_count>4</comment_count>
    <who name="Karl Rackler">rackler</who>
    <bug_when>2026-04-23 11:01:38 -0700</bug_when>
    <thetext>I had to retry bisection due to an error in the original reproduction setup; disregard the crash assertion above, it was because of that.
I have had to rely on the results database mostly for bisection.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2203769</commentid>
    <comment_count>5</comment_count>
    <who name="Jonathan Bedard">jbedard</who>
    <bug_when>2026-04-23 11:08:04 -0700</bug_when>
    <thetext>I believe this was 311244@main, which was reverted in 311280@main and then re-landed in 311330@main</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2203772</commentid>
    <comment_count>6</comment_count>
    <who name="Jonathan Bedard">jbedard</who>
    <bug_when>2026-04-23 11:11:20 -0700</bug_when>
    <thetext>Recent run from CI:
https://s3-us-west-2.amazonaws.com/archives.webkit.org/mac-tahoe-x86_64-arm64-debug-run-api-tests/311687@main-1391.txt

We don&apos;t have a crash log, though. However this test is &quot;crashing&quot;, it doesn&apos;t actually generate a crash-log. It also looks to be a flakey crash, I&apos;m suspicious of timing issues (possibly about test parallelism?)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2203776</commentid>
    <comment_count>7</comment_count>
    <who name="Jonathan Bedard">jbedard</who>
    <bug_when>2026-04-23 11:14:07 -0700</bug_when>
    <thetext>Note that the crashlog Karl has here isn&apos;t actually from this test. We still haven&apos;t been able to extract a real crashlog.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>