Bug 207061

Summary: [ macOS wk1 ] storage/indexeddb/cursor-value-private.html is flaky crashing
Product: WebKit Reporter: Jacob Uphoff <jacob_uphoff>
Component: New BugsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED CONFIGURATION CHANGED    
Severity: Normal CC: cdumez, webkit-bot-watchers-bugzilla, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Crash log none

Jacob Uphoff
Reported 2020-01-31 11:37:16 PST
Created attachment 389385 [details] Crash log storage/indexeddb/cursor-value-private.html This has only crashed twice in all visible history, however both crashes were on Catalina wk1 I was not able to reproduce on iterations x5000 History: https://results.webkit.org/?suite=layout-tests&test=storage%2Findexeddb%2Fcursor-value-private.html&platform=ios&platform=mac Crash: Process: DumpRenderTree [49352] Path: /Volumes/VOLUME/*/DumpRenderTree Identifier: DumpRenderTree Version: 0 Code Type: X86-64 (Native) Parent Process: Python [46345] Responsible: bash [402] User ID: 501 Date/Time: 2020-01-31 11:03:11.035 -0800 OS Version: Mac OS X 10.15.1 (19B88) Report Version: 12 Bridge OS Version: 4.1 (17P1081) Anonymous UUID: 9FEF4D39-50DC-A27E-425C-CBB98DC5BCE6 Time Awake Since Boot: 1400000 seconds System Integrity Protection: enabled Crashed Thread: 30 IndexedDB Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000011850 Exception Note: EXC_CORPSE_NOTIFY Termination Signal: Segmentation fault: 11 Termination Reason: Namespace SIGNAL, Code 0xb Terminating Process: exc handler [49352] VM Regions Near 0x11850: --> __TEXT 0000000108244000-00000001082a1000 [ 372K] r-x/r-x SM=COW /Volumes/VOLUME/* Application Specific Information: CRASHING TEST: storage/indexeddb/cursor-value-private.html Thread 0:: Dispatch queue: com.apple.main-thread 0 libsystem_kernel.dylib 0x00007fff66bc7166 mach_msg_trap + 10 1 libsystem_kernel.dylib 0x00007fff66bc76cc mach_msg + 60 2 com.apple.CoreFoundation 0x00007fff2f5a536b __CFRunLoopServiceMachPort + 322 3 com.apple.CoreFoundation 0x00007fff2f5a4907 __CFRunLoopRun + 1695 4 com.apple.CoreFoundation 0x00007fff2f5a3fe3 CFRunLoopRunSpecific + 499 5 DumpRenderTree 0x00000001082586f4 runTest(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) + 2675 (DumpRenderTree.mm:2118) 6 DumpRenderTree 0x00000001082578ae dumpRenderTree(int, char const**) + 2813 (DumpRenderTree.mm:1228) 7 DumpRenderTree 0x00000001082592e1 DumpRenderTreeMain(int, char const**) + 1438 (DumpRenderTree.mm:1462) 8 libdyld.dylib 0x00007fff66a7e2e5 start + 1
Attachments
Crash log (117.28 KB, text/plain)
2020-01-31 11:37 PST, Jacob Uphoff 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2020-01-31 11:37:47 PST
<rdar://problem/59069035>
Chris Dumez
Comment 2 2020-01-31 12:06:56 PST
Thread 30 Crashed:: IndexedDB 0 com.apple.JavaScriptCore 0x0000000108586d2a WTF::equal(WTF::StringImpl const*, unsigned char const*) + 58 (StringImpl.cpp:1677) 1 com.apple.JavaScriptCore 0x000000010854624f std::__1::pair<std::__1::pair<WTF::Packed<WTF::StringImpl*>*, bool>, unsigned int> WTF::HashTable<WTF::Packed<WTF::StringImpl*>, WTF::Packed<WTF::StringImpl*>, WTF::IdentityExtractor, WTF::StringHash, WTF::HashTraits<WTF::Packed<WTF::StringImpl*> >, WTF::HashTraits<WTF::Packed<WTF::StringImpl*> > >::fullLookupForWriting<WTF::HashSetTranslatorAdapter<WTF::CStringTranslator>, unsigned char const*>(unsigned char const* const&) + 319 (HashTable.h:805) 2 com.apple.JavaScriptCore 0x0000000108545f9a WTF::HashTableAddResult<WTF::HashTableIterator<WTF::Packed<WTF::StringImpl*>, WTF::Packed<WTF::StringImpl*>, WTF::IdentityExtractor, WTF::StringHash, WTF::HashTraits<WTF::Packed<WTF::StringImpl*> >, WTF::HashTraits<WTF::Packed<WTF::StringImpl*> > > > WTF::HashTable<WTF::Packed<WTF::StringImpl*>, WTF::Packed<WTF::StringImpl*>, WTF::IdentityExtractor, WTF::StringHash, WTF::HashTraits<WTF::Packed<WTF::StringImpl*> >, WTF::HashTraits<WTF::Packed<WTF::StringImpl*> > >::addPassingHashCode<WTF::HashSetTranslatorAdapter<WTF::CStringTranslator>, unsigned char const* const&, unsigned char const* const&>(unsigned char const* const&, unsigned char const* const&) + 218 (HashTable.h:1001) 3 com.apple.JavaScriptCore 0x00000001085435c2 WTF::AtomStringImpl::add(unsigned char const*) + 82 (AtomStringImpl.cpp:93) 4 com.apple.JavaScriptCore 0x00000001089d4ece JSC::BuiltinExecutables::functionPrototypeSymbolHasInstanceCodeExecutable() + 78 (IdentifierInlines.h:126) 5 com.apple.JavaScriptCore 0x0000000108856b8c JSC::functionPrototypeSymbolHasInstanceCodeGenerator(JSC::VM&) + 28 (JSCBuiltins.cpp:1763) 6 com.apple.JavaScriptCore 0x0000000109112cbd JSC::FunctionPrototype::addFunctionProperties(JSC::VM&, JSC::JSGlobalObject*, JSC::JSFunction**, JSC::JSFunction**, JSC::JSFunction**) + 301 (FunctionPrototype.cpp:68) 7 com.apple.JavaScriptCore 0x000000010916e63f JSC::JSGlobalObject::init(JSC::VM&) + 1183 (JSGlobalObject.cpp:554) 8 com.apple.JavaScriptCore 0x000000010917a1b9 JSC::JSGlobalObject::finishCreation(JSC::VM&) + 121 (JSCellInlines.h:129) 9 com.apple.JavaScriptCore 0x000000010917a04c JSC::JSGlobalObject::create(JSC::VM&, JSC::Structure*) + 60 (JSGlobalObject.cpp:2129) 10 com.apple.WebCore 0x000000010d549a78 WebCore::IDBServer::IDBSerializationContext::initializeVM() + 264 (IDBSerializationContext.cpp:81) 11 com.apple.WebCore 0x000000010d549bbe WebCore::IDBServer::IDBSerializationContext::vm() + 14 (IDBSerializationContext.cpp:87) 12 com.apple.WebCore 0x000000010d571da0 WebCore::IDBServer::MemoryObjectStore::updateIndexesForPutRecord(WebCore::IDBKeyData const&, WebCore::ThreadSafeDataBuffer const&) + 48 13 com.apple.WebCore 0x000000010d567ddc WebCore::IDBServer::MemoryObjectStore::addRecord(WebCore::IDBServer::MemoryBackingStoreTransaction&, WebCore::IDBKeyData const&, WebCore::IDBValue const&) + 236 (MemoryObjectStore.cpp:275) 14 com.apple.WebCore 0x000000010d56ad61 WebCore::IDBServer::MemoryIDBBackingStore::addRecord(WebCore::IDBResourceIdentifier const&, WebCore::IDBObjectStoreInfo const&, WebCore::IDBKeyData const&, WebCore::IDBValue const&) + 305 15 com.apple.WebCore 0x000000010d599407 WebCore::IDBServer::UniqueIDBDatabase::putOrAdd(WebCore::IDBRequestData const&, WebCore::IDBKeyData const&, WebCore::IDBValue const&, WebCore::IndexedDB::ObjectStoreOverwriteMode, WTF::Function<void (WebCore::IDBError const&, WebCore::IDBKeyData const&)>) + 2807 (IDBError.h:36) 16 com.apple.WebCore 0x000000010d59da3c WebCore::IDBServer::UniqueIDBDatabaseTransaction::putOrAdd(WebCore::IDBRequestData const&, WebCore::IDBKeyData const&, WebCore::IDBValue const&, WebCore::IndexedDB::ObjectStoreOverwriteMode) + 140 (UniqueIDBDatabaseTransaction.cpp:263) 17 com.apple.WebCore 0x000000010d54b11f WebCore::IDBServer::IDBServer::putOrAdd(WebCore::IDBRequestData const&, WebCore::IDBKeyData const&, WebCore::IDBValue const&, WebCore::IndexedDB::ObjectStoreOverwriteMode) + 95 (IDBServer.cpp:309) 18 com.apple.WebKitLegacy 0x000000010c05fc3c WTF::Detail::CallableWrapper<InProcessIDBServer::putOrAdd(WebCore::IDBRequestData const&, WebCore::IDBKeyData const&, WebCore::IDBValue const&, WebCore::IndexedDB::ObjectStoreOverwriteMode)::$_33, void>::call() + 76 (Locker.h:69) 19 com.apple.WebKitLegacy 0x000000010c07f575 WebCore::StorageThread::threadEntryPoint() + 101 (StorageThread.cpp:79) 20 com.apple.JavaScriptCore 0x000000010858eb3c WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*) + 124 (Threading.cpp:149) 21 com.apple.JavaScriptCore 0x0000000108590f79 WTF::wtfThreadEntryPoint(void*) + 9 (ThreadingPOSIX.cpp:201) 22 libsystem_pthread.dylib 0x00007fff66c8ad36 _pthread_start + 125 23 libsystem_pthread.dylib 0x00007fff66c8758f thread_start + 15
Alexey Proskuryakov
Comment 3 2020-02-03 22:23:35 PST
Is this a duplicate of bug 207137?
Ryan Haddad
Comment 4 2020-07-01 15:40:16 PDT
Closing since we don’t have any test expectations in place and it doesn’t repro.
Note You need to log in before you can comment on or make changes to this bug.