Bug 213375

Summary: [Mac wk2 Debug] ASSERTION FAILED: m_finishedNodes.isEmpty() in WebCore::WebKitAudioContext::~WebKitAudioContext()
Product: WebKit Reporter: Jason Lawrence <Lawrence.j>
Component: Web AudioAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: cdumez, webkit-bot-watchers-bugzilla, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Mac   
OS: macOS 10.14   
Attachments:
Description Flags
biquad-bandpass-crash-log none

Jason Lawrence
Reported 2020-06-19 07:29:33 PDT
webaudio/biquad-bandpass.html Description: This test is flaky crashing on Mac wk2 Debug. The flaky crashes are apparent throughout most of, if not all of, the visual history (earliest on 11/20/2019). History: https://results.webkit.org/?suite=layout-tests&test=webaudio%2Fbiquad-bandpass.html&flavor=wk2&platform=mac&style=debug&limit=50000 Crash log: Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.JavaScriptCore 0x0000000130c5041e WTFCrash + 14 (Assertions.cpp:295) 1 com.apple.WebCore 0x0000000112ff83ab WTFCrashWithInfo(int, char const*, char const*, int) + 27 2 com.apple.WebCore 0x0000000115086a4e WebCore::WebKitAudioContext::~WebKitAudioContext() + 654 (WebKitAudioContext.cpp:209) 3 com.apple.WebCore 0x00000001150958c8 WebCore::WebKitOfflineAudioContext::~WebKitOfflineAudioContext() + 24 (WebKitOfflineAudioContext.h:31) 4 com.apple.WebCore 0x00000001150956f5 WebCore::WebKitOfflineAudioContext::~WebKitOfflineAudioContext() + 21 (WebKitOfflineAudioContext.h:31) 5 com.apple.WebCore 0x000000011509571c WebCore::WebKitOfflineAudioContext::~WebKitOfflineAudioContext() + 28 (WebKitOfflineAudioContext.h:31) 6 com.apple.WebCore 0x00000001135e19c4 WTF::ThreadSafeRefCounted<WebCore::AudioContext, (WTF::DestructionThread)0>::deref() const::'lambda'()::operator()() const + 52 (ThreadSafeRefCounted.h:118) 7 com.apple.WebCore 0x00000001135e197d WTF::ThreadSafeRefCounted<WebCore::AudioContext, (WTF::DestructionThread)0>::deref() const + 61 (ThreadSafeRefCounted.h:136) 8 com.apple.WebCore 0x000000011476cc75 WTF::Ref<WebCore::WebKitAudioContext, WTF::DumbPtrTraits<WebCore::WebKitAudioContext> >::~Ref() + 53 (Ref.h:62) 9 com.apple.WebCore 0x00000001146ed1a5 WTF::Ref<WebCore::WebKitAudioContext, WTF::DumbPtrTraits<WebCore::WebKitAudioContext> >::~Ref() + 21 (Ref.h:62) 10 com.apple.WebCore 0x000000011508747c WebCore::WebKitAudioContext::deleteMarkedNodes() + 428 (WebKitAudioContext.cpp:985) 11 com.apple.WebCore 0x0000000114ff8d68 WebCore::AudioNode::deref(WebCore::AudioNode::RefType) + 456 (AudioNode.cpp:532) 12 com.apple.WebCore 0x0000000114fe3b27 WebCore::AudioNode::derefEventTarget() + 23 (AudioNode.h:238) 13 com.apple.WebCore 0x000000011355c7fc WebCore::EventTarget::deref() + 28 (EventTarget.h:60) 14 com.apple.WebCore 0x000000011355c7af WTF::Ref<WebCore::EventTarget, WTF::DumbPtrTraits<WebCore::EventTarget> >::~Ref() + 47 (Ref.h:62) 15 com.apple.WebCore 0x000000011355c715 WTF::Ref<WebCore::EventTarget, WTF::DumbPtrTraits<WebCore::EventTarget> >::~Ref() + 21 (Ref.h:62) 16 com.apple.WebCore 0x0000000113a2cdfe WebCore::JSDOMWrapper<WebCore::EventTarget>::~JSDOMWrapper() + 30 (JSDOMWrapper.h:72) 17 com.apple.WebCore 0x0000000113a2cdd8 WebCore::JSEventTarget::~JSEventTarget() + 24 (JSEventTarget.h:30) 18 com.apple.WebCore 0x00000001139dec75 WebCore::JSEventTarget::~JSEventTarget() + 21 (JSEventTarget.h:30) 19 com.apple.WebCore 0x000000011399ad2d WebCore::JSEventTarget::destroy(JSC::JSCell*) + 29 (JSEventTarget.cpp:263) 20 com.apple.JavaScriptCore 0x000000013251cf1a JSC::JSDestructibleObjectDestroyFunc::operator()(JSC::VM&, JSC::JSCell*) const + 42 (JSDestructibleObjectHeapCellType.cpp:39) 21 com.apple.JavaScriptCore 0x000000013252b258 void JSC::MarkedBlock::Handle::specializedSweep<false, (JSC::MarkedBlock::Handle::EmptyMode)0, (JSC::MarkedBlock::Handle::SweepMode)0, (JSC::MarkedBlock::Handle::SweepDestructionMode)0, (JSC::MarkedBlock::Handle::ScribbleMode)0, (JSC::MarkedBlock::Handle::NewlyAllocatedMode)0, (JSC::MarkedBlock::Handle::MarksMode)0, JSC::JSDestructibleObjectDestroyFunc>(JSC::FreeList*, JSC::MarkedBlock::Handle::EmptyMode, JSC::MarkedBlock::Handle::SweepMode, JSC::MarkedBlock::Handle::SweepDestructionMode, JSC::MarkedBlock::Handle::ScribbleMode, JSC::MarkedBlock::Handle::NewlyAllocatedMode, JSC::MarkedBlock::Handle::MarksMode, JSC::JSDestructibleObjectDestroyFunc const&)::'lambda'(void*)::operator()(void*) const + 72 (MarkedBlockInlines.h:261)
Attachments
biquad-bandpass-crash-log (117.50 KB, text/plain)
2020-06-19 07:32 PDT, Jason Lawrence 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2020-06-19 07:29:56 PDT
<rdar://problem/64531020>
Jason Lawrence
Comment 2 2020-06-19 07:32:02 PDT
Created attachment 402281 [details] biquad-bandpass-crash-log
Jason Lawrence
Comment 3 2020-06-19 08:30:24 PDT
I have marked this test as flaky crashing while this issue is investigated. https://trac.webkit.org/changeset/263266/webkit
Ryan Haddad
Comment 4 2020-06-19 09:37:10 PDT
ASSERTION FAILED: m_finishedNodes.isEmpty() ./Modules/webaudio/WebKitAudioContext.cpp(209) : virtual WebCore::WebKitAudioContext::~WebKitAudioContext()
Alexey Proskuryakov
Comment 5 2020-06-19 17:19:38 PDT
*** This bug has been marked as a duplicate of bug 105870 ***
Note You need to log in before you can comment on or make changes to this bug.