Summary: | platform/mac/editing/attributed-string tests all flakily assert | ||
---|---|---|---|
Product: | WebKit | Reporter: | Alexey Proskuryakov <ap> |
Component: | WebCore Misc. | Assignee: | Nobody <webkit-unassigned> |
Status: | NEW --- | ||
Severity: | Normal | CC: | darin, ggaren, mhahnenberg, rniwa, simon.fraser, thorton |
Priority: | P2 | Keywords: | InRadar, LayoutTestFailure |
Version: | 528+ (Nightly build) | ||
Hardware: | Unspecified | ||
OS: | Unspecified |
Description
Alexey Proskuryakov
2013-10-18 10:56:34 PDT
It was very difficult for me to reproduce this locally. I managed to hit it once with run-webkit-tests platform/mac/editing/attributed-string/ --iter 1000 -v -gf This isn't this the same assertion we're hitting on other layout tests? I don't know which assertion you have in mind, but the answer is likely no. It's only a small subset of tests that have a code path through ObjcInstance::invokeMethod. Still seeing this quite often http://build.webkit.org/results/Apple%20MountainLion%20Debug%20WK1%20(Tests)/r158041%20(10993)/platform/mac/editing/attributed-string/font-size-crash-log.txt Still seeing it a few times a day: http://build.webkit.org/results/Apple%20Mavericks%20Debug%20WK1%20(Tests)/r158194%20(146)/platform/mac/editing/attributed-string/font-size-crash-log.txt And still! Looks like there are at least two problems here: - Somehow, s_instanceWrapperCache contains an entry with an invalidated root object, which makes no sense. - The cache should not be global, because Objective C instances can be used in multiple pages at once, and they need separate ObjcInstances then. Both are pretty bad bugs I think. This was failing extremely frequently lately - most of the time, multiple bots were red because of this issue alone. Marked as flakily crashing in debug in <http://trac.webkit.org/r160840>. Looks like this is a bug in Objective-C binding code? This lurked for four years before we noticed!? Yes, it appears so. These attributed string tests were added this August, and I guess we didn't cover this aspect of Objective-C bindings in tests before. Also, these crashes became more frequent over the last few months, presumably because of some timing differences in loading, GC, or just different hardware on bots. platform/mac/plugins/jsobjc-simple.html is affected too. |