Bug 229244

Summary:

[Mac Debug] ASSERTION FAILED: node->enumeratorMetadata() == JSPropertyNameEnumerator::IndexedMode under JSC::DFG::AbstractInterpreter

Product:

WebKit

Reporter:

Eric Hutchison <ehutchison>

Component:

JavaScriptCore

Assignee:

Sihui Liu <sihui_liu>

Status:

RESOLVED CONFIGURATION CHANGED

Severity:

Normal

CC:

ehutchison, keith_miller, kkinnunen, mark.lam, sihui_liu, webkit-bot-watchers-bugzilla, webkit-bug-importer

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Crash Log	none

Description Eric Hutchison 2021-08-18 11:59:05 PDT

Created attachment 435787 [details]
Crash Log

imported/w3c/web-platform-tests/IndexedDB/key-generators/reading-autoincrement-indexes-cursors.any.worker.html

is a flaky crash on Mac Debug.

History: https://results.webkit.org/?suite=layout-tests&test=imported%2Fw3c%2Fweb-platform-tests%2FIndexedDB%2Fkey-generators%2Freading-autoincrement-indexes-cursors.any.worker.html

Results: https://build.webkit.org/results/Apple-BigSur-Debug-AppleSilicon-WK1-Tests/r281175%20(3110)/results.html

Crash Log: Attached

Comment 1 Radar WebKit Bug Importer 2021-08-18 11:59:47 PDT

<rdar://problem/82087869>

Comment 2 Eric Hutchison 2021-08-18 12:05:47 PDT

Updated test expectations at http://trac.webkit.org/changeset/281205/webkit.

Comment 3 Ryan Haddad 2021-08-18 12:44:52 PDT

ASSERTION FAILED: node->enumeratorMetadata() == JSPropertyNameEnumerator::IndexedMode
/Volumes/Data/worker/bigsur-debug/build/Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h(4284) : bool JSC::DFG::AbstractInterpreter<JSC::DFG::InPlaceAbstractState>::executeEffects(unsigned int, JSC::DFG::Node *) [AbstractStateType = JSC::DFG::InPlaceAbstractState]
1   0x101f4ebcc WTFCrash
2   0x103214470 JSC::CallFrame* WTF::bitwise_cast<JSC::CallFrame*, void*>(void*)
3   0x102438b04 JSC::DFG::AbstractInterpreter<JSC::DFG::InPlaceAbstractState>::executeEffects(unsigned int, JSC::DFG::Node*)
4   0x103005c54 JSC::DFG::AbstractInterpreter<JSC::DFG::InPlaceAbstractState>::execute(unsigned int)
5   0x103004400 JSC::DFG::CFAPhase::performBlockCFA(JSC::DFG::BasicBlock*)
6   0x103003f44 JSC::DFG::CFAPhase::performForwardCFA()
7   0x103003c08 JSC::DFG::CFAPhase::run()
8   0x10300324c bool JSC::DFG::runAndLog<JSC::DFG::CFAPhase>(JSC::DFG::CFAPhase&)
9   0x102fcafe4 bool JSC::DFG::runPhase<JSC::DFG::CFAPhase>(JSC::DFG::Graph&)
10  0x102fcafa4 JSC::DFG::performCFA(JSC::DFG::Graph&)
11  0x103249640 JSC::DFG::Plan::compileInThreadImpl()
12  0x1037b40c0 JSC::JITPlan::compileInThread(JSC::JITWorklistThread*)
13  0x103849f30 JSC::JITWorklistThread::work()
14  0x101f63b18 WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0::operator()() const
15  0x101f636fc WTF::Detail::CallableWrapper<WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0, void>::call()
16  0x101f78aa0 WTF::Function<void ()>::operator()() const
17  0x1020492ec WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*)
18  0x102057b08 WTF::wtfThreadEntryPoint(void*)
19  0x18aa3b878 _pthread_start
20  0x18aa365e0 thread_start

Comment 4 Ryan Haddad 2021-08-18 12:45:07 PDT

Maybe related to https://trac.webkit.org/changeset/280760/webkit?

Comment 5 Mark Lam 2022-03-07 15:08:39 PST

According to https://results.webkit.org/?suite=layout-tests&test=imported%2Fw3c%2Fweb-platform-tests%2FIndexedDB%2Fkey-generators%2Freading-autoincrement-indexes-cursors.any.worker.html, this test hasn't crashed in a long time.

Comment 6 Mark Lam 2022-03-07 15:09:25 PST

Removed TestExpectation in r290959: <http://trac.webkit.org/r290959>.