Bug 230518

Summary: [ Catalina wk2 Release EWS ] Flaky crash on imported/w3c/web-platform-tests/subresource-integrity/subresource-integrity.html
Product: WebKit Reporter: Eric Hutchison <ehutchison>
Component: AccessibilityAssignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal CC: andresg_22, bfulgham, cfleizach, ehutchison, webkit-bot-watchers-bugzilla, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Crash Log none

Description Eric Hutchison 2021-09-20 15:59:05 PDT 
Created attachment 438745 [details]
Crash Log

imported/w3c/web-platform-tests/subresource-integrity/subresource-integrity.html

is a flaky crash on Catalina wk2 Release - EWS.

History: https://results.webkit.org/?suite=layout-tests&test=accessibility/mac/button-shouldnot-have-axvalue.html

Results: https://ews-build.s3-us-west-2.amazonaws.com/macOS-Catalina-Release-WK2-Tests-EWS/r438702-16000/results.html

Crash Log (file attached): https://ews-build.s3-us-west-2.amazonaws.com/macOS-Catalina-Release-WK2-Tests-EWS/r438702-16000/accessibility/mac/button-shouldnot-have-axvalue-crash-log.txt

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   libobjc.A.dylib               	0x7fff66608cb8 objc_release + 24 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/objc4/objc4-787.1/runtime/objc-runtime-new.h:1312)
1   com.apple.PDFKit              	0x7fff383eabe4 -[PDFPage dealloc] + 178 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/PDFKit/PDFKit-845.4.1/PDFKit/Sources/Sources_Shared/PDFPage.m:505)
2   com.apple.CoreFoundation      	0x7fff2d633c49 __RELEASE_OBJECTS_IN_THE_ARRAY__ + 120 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/CoreFoundation/Foundation-1677.201/CoreFoundation/Collections.subproj/NSCollectionAux.h:70)
3   com.apple.CoreFoundation      	0x7fff2d633b8a -[__NSArrayM dealloc] + 280 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/CoreFoundation/Foundation-1677.201/CoreFoundation/Collections.subproj/NSArrayM.m:473)
4   com.apple.PDFKit              	0x7fff383818be -[PDFDocumentPrivate .cxx_destruct] + 352 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/PDFKit/PDFKit-845.4.1/PDFKit/Sources/Sources_Shared/PDFDocument.m:240)
5   libobjc.A.dylib               	0x7fff6660fbf1 object_cxxDestructFromClass(objc_object*, objc_class*) + 83 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/objc4/objc4-787.1/runtime/objc-class.mm:452)
6   libobjc.A.dylib               	0x7fff66608e1c objc_destructInstance + 94 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/objc4/objc4-787.1/runtime/objc-class.mm:467)
7   libobjc.A.dylib               	0x7fff66608d86 _objc_rootDealloc + 62 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/objc4/objc4-787.1/runtime/objc-runtime-new.mm:7762)
8   libobjc.A.dylib               	0x7fff6660fbf1 object_cxxDestructFromClass(objc_object*, objc_class*) + 83 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/objc4/objc4-787.1/runtime/objc-class.mm:452)
9   libobjc.A.dylib               	0x7fff66608e1c objc_destructInstance + 94 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/objc4/objc4-787.1/runtime/objc-class.mm:467)
10  libobjc.A.dylib               	0x7fff66608d86 _objc_rootDealloc + 62 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/objc4/objc4-787.1/runtime/objc-runtime-new.mm:7762)
11  com.apple.PDFKit              	0x7fff38386b51 -[PDFDocument dealloc] + 116 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/PDFKit/PDFKit-845.4.1/PDFKit/Sources/Sources_Shared/PDFDocument.m:1864)
12  com.apple.PDFKit              	0x7fff383b33d2 -[PDFLayerControllerPrivate .cxx_destruct] + 171 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/PDFKit/PDFKit-845.4.1/PDFKit/Sources/Sources_WebKit/PDFLayerController.m:187)
13  libobjc.A.dylib               	0x7fff6660fbf1 object_cxxDestructFromClass(objc_object*, objc_class*) + 83 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/objc4/objc4-787.1/runtime/objc-class.mm:452)
14  libobjc.A.dylib               	0x7fff66608e1c objc_destructInstance + 94 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/objc4/objc4-787.1/runtime/objc-class.mm:467)
15  libobjc.A.dylib               	0x7fff66608d86 _objc_rootDealloc + 62 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/objc4/objc4-787.1/runtime/objc-runtime-new.mm:7762)
16  libobjc.A.dylib               	0x7fff6660fbf1 object_cxxDestructFromClass(objc_object*, objc_class*) + 83 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/objc4/objc4-787.1/runtime/objc-class.mm:452)
17  libobjc.A.dylib               	0x7fff66608e1c objc_destructInstance + 94 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/objc4/objc4-787.1/runtime/objc-class.mm:467)
18  libobjc.A.dylib               	0x7fff66608d86 _objc_rootDealloc + 62 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/objc4/objc4-787.1/runtime/objc-runtime-new.mm:7762)
19  com.apple.PDFKit              	0x7fff383b35ed -[PDFLayerController dealloc] + 121 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/PDFKit/PDFKit-845.4.1/PDFKit/Sources/Sources_WebKit/PDFLayerController.m:242)
20  com.apple.WebKitTestRunner.InjectedBundle	0x00000005c2d68828 WTR::AccessibilityUIElement::~AccessibilityUIElement() + 14 (AccessibilityUIElementMac.mm:112)
21  com.apple.JavaScriptCore      	0x00000005bdef6a67 JSC::JSCallbackObject<JSC::JSNonFinalObject>::destroy(JSC::JSCell*) + 119
22  com.apple.JavaScriptCore      	0x00000005be4fc033 void JSC::MarkedBlock::Handle::specializedSweep<true, (JSC::MarkedBlock::Handle::EmptyMode)1, (JSC::MarkedBlock::Handle::SweepMode)1, (JSC::MarkedBlock::Handle::SweepDestructionMode)1, (JSC::MarkedBlock::Handle::ScribbleMode)0, (JSC::MarkedBlock::Handle::NewlyAllocatedMode)1, (JSC::MarkedBlock::Handle::MarksMode)1, JSC::IsoHeapCellType>(JSC::FreeList*, JSC::MarkedBlock::Handle::EmptyMode, JSC::MarkedBlock::Handle::SweepMode, JSC::MarkedBlock::Handle::SweepDestructionMode, JSC::MarkedBlock::Handle::ScribbleMode, JSC::MarkedBlock::Handle::NewlyAllocatedMode, JSC::MarkedBlock::Handle::MarksMode, JSC::IsoHeapCellType const&) + 195
23  com.apple.JavaScriptCore      	0x00000005be4fa5d1 void JSC::MarkedBlock::Handle::finishSweepKnowingHeapCellType<JSC::IsoHeapCellType>(JSC::FreeList*, JSC::IsoHeapCellType const&)::'lambda'()::operator()() const + 385
24  com.apple.JavaScriptCore      	0x00000005be4f7232 void JSC::MarkedBlock::Handle::finishSweepKnowingHeapCellType<JSC::IsoHeapCellType>(JSC::FreeList*, JSC::IsoHeapCellType const&) + 306
25  com.apple.JavaScriptCore      	0x00000005be4fea11 JSC::MarkedBlock::Handle::sweep(JSC::FreeList*) + 289
26  com.apple.JavaScriptCore      	0x00000005be4f8de0 JSC::LocalAllocator::tryAllocateIn(JSC::MarkedBlock::Handle*) + 32
27  com.apple.JavaScriptCore      	0x00000005be4f8d0c JSC::LocalAllocator::tryAllocateWithoutCollecting() + 44
28  com.apple.JavaScriptCore      	0x00000005be4f8b4c JSC::LocalAllocator::allocateSlowCase(JSC::Heap&, JSC::GCDeferralContext*, JSC::AllocationFailureMode) + 252
29  com.apple.JavaScriptCore      	0x00000005bdf03408 void* JSC::allocateCell<JSC::JSCallbackObject<JSC::JSNonFinalObject> >(JSC::Heap&, unsigned long) + 184
30  com.apple.JavaScriptCore      	0x00000005bdf0a8e3 JSObjectMake + 99
31  com.apple.WebKitTestRunner.InjectedBundle	0x00000005c2d98a9e WTR::TestRunner::makeWindowObject(OpaqueJSContext const*) + 20 (TestRunner.cpp:507)
32  com.apple.WebKitTestRunner.InjectedBundle	0x00000005c2d79fc9 WTR::InjectedBundlePage::didClearWindowForFrame(OpaqueWKBundleFrame const*, OpaqueWKBundleScriptWorld const*) + 117 (InjectedBundlePage.cpp:905)
33  com.apple.WebKit              	0x0000000103586b14 WebKit::InjectedBundlePageLoaderClient::didClearWindowObjectForFrame(WebKit::WebPage&, WebKit::WebFrame&, WebCore::DOMWrapperWorld&) + 102
34  com.apple.WebKit              	0x00000001035e3cec WebKit::WebFrameLoaderClient::dispatchDidClearWindowObjectInWorld(WebCore::DOMWrapperWorld&) + 54
35  com.apple.WebCore             	0x00000005b9a08c30 WebCore::FrameLoader::dispatchDidClearWindowObjectInWorld(WebCore::DOMWrapperWorld&) + 320
36  com.apple.WebCore             	0x00000005b99f986c WebCore::FrameLoader::dispatchDidClearWindowObjectsInAllWorlds() + 108
37  com.apple.WebCore             	0x00000005b99f962a WebCore::FrameLoader::receivedFirstData() + 42
38  com.apple.WebCore             	0x00000005b99d2da0 WebCore::DocumentLoader::commitData(unsigned char const*, unsigned long) + 1776
39  com.apple.WebKit              	0x00000001035e215e WebKit::WebFrameLoaderClient::committedLoad(WebCore::DocumentLoader*, unsigned char const*, int) + 50
40  com.apple.WebCore             	0x00000005b99d805e WebCore::DocumentLoader::commitLoad(unsigned char const*, int) + 190
41  com.apple.WebCore             	0x00000005b9a71182 WebCore::CachedRawResource::notifyClientsDataWasReceived(unsigned char const*, unsigned int) + 146
42  com.apple.WebCore             	0x00000005b9a70ed7 WebCore::CachedRawResource::updateBuffer(WebCore::SharedBuffer&) + 279
43  com.apple.WebCore             	0x00000005b9a415b7 WebCore::SubresourceLoader::didReceiveDataOrBuffer(unsigned char const*, int, WTF::RefPtr<WebCore::SharedBuffer, WTF::RawPtrTraits<WebCore::SharedBuffer>, WTF::DefaultRefDerefTraits<WebCore::SharedBuffer> >&&, long long, WebCore::DataPayloadType) + 183
44  com.apple.WebCore             	0x00000005b9a414ef WebCore::SubresourceLoader::didReceiveData(unsigned char const*, unsigned int, long long, WebCore::DataPayloadType) + 31
45  com.apple.WebKit              	0x00000001035a9bc9 WebKit::WebResourceLoader::didReceiveData(IPC::ArrayReference<unsigned char, 18446744073709551615ul> const&, long long) + 243
46  com.apple.WebKit              	0x0000000103755289 WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::Decoder&) + 281
47  com.apple.WebKit              	0x000000010359a86d WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 87
48  com.apple.WebKit              	0x0000000102fa3711 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 221
49  com.apple.WebKit              	0x0000000102fa3951 IPC::Connection::dispatchOneIncomingMessage() + 169
50  com.apple.JavaScriptCore      	0x00000005bdb2c471 WTF::RunLoop::performWork() + 513
51  com.apple.JavaScriptCore      	0x00000005bdb2cd82 WTF::RunLoop::performWork(void*) + 34
52  com.apple.CoreFoundation      	0x7fff2d696884 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/CoreFoundation/Foundation-1677.201/CoreFoundation/RunLoop.subproj/CFRunLoop.c:1922)
53  com.apple.CoreFoundation      	0x7fff2d696823 __CFRunLoopDoSource0 + 103 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/CoreFoundation/Foundation-1677.201/CoreFoundation/RunLoop.subproj/CFRunLoop.c:1956)
54  com.apple.CoreFoundation      	0x7fff2d69663d __CFRunLoopDoSources0 + 209 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/CoreFoundation/Foundation-1677.201/CoreFoundation/RunLoop.subproj/CFRunLoop.c:1992)
55  com.apple.CoreFoundation      	0x7fff2d695359 __CFRunLoopRun + 937 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/CoreFoundation/Foundation-1677.201/CoreFoundation/RunLoop.subproj/CFRunLoop.c:2882)
56  com.apple.CoreFoundation      	0x7fff2d694953 CFRunLoopRunSpecific + 466 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/CoreFoundation/Foundation-1677.201/CoreFoundation/RunLoop.subproj/CFRunLoop.c:3192)
57  com.apple.Foundation          	0x7fff2fd521d8 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 212 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/Foundation/Foundation-1677.201/Foundation/Soil.subproj/NSRunLoop.m:374)
58  com.apple.Foundation          	0x7fff2fe04c7f -[NSRunLoop(NSRunLoop) run] + 76 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/Foundation/Foundation-1677.201/Foundation/Soil.subproj/NSRunLoop.m:399)
59  libxpc.dylib                  	0x00007fff67a054ea _xpc_objc_main.cold.4 + 49
60  libxpc.dylib                  	0x7fff67a05430 _xpc_objc_main + 559 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/libxpc/libxpc-1738.140.2/src/main.m:197)
61  libxpc.dylib                  	0x7fff67a04f63 xpc_main + 377 (/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/libxpc/libxpc-1738.140.2/src/init.c:1384)
62  com.apple.WebKit              	0x00000001031757c3 WebKit::XPCServiceMain(int, char const**) + 266
63  libdyld.dylib                 	0x00007fff677b3cc9 start + 1

I don't have a platform to reproduce locally.
Comment 1 Radar WebKit Bug Importer 2021-09-20 16:01:51 PDT 
<rdar://problem/83328940>
Comment 2 Radar WebKit Bug Importer 2021-09-20 16:02:46 PDT 
<rdar://problem/83328973>
Comment 3 Radar WebKit Bug Importer 2021-09-20 16:04:33 PDT 
<rdar://problem/83329033>
Comment 4 Eric Hutchison 2021-09-20 16:09:54 PDT 
Updated test expectations at https://trac.webkit.org/changeset/282790/webkit