REGRESSION (r286505?): Flaky crash under WebKit::ProvisionalPageProxy::cancel()

• Component: New Bugs
• Status: RESOLVED DUPLICATE

[Ryan Haddad]

Created attachment 446085 [details]
crash log

The following two tests recently became flaky crashes on macOS and iOS bots:
imported/w3c/web-platform-tests/html/cross-origin-opener-policy/iframe-popup-unsafe-none-to-same-origin.https.html
imported/w3c/web-platform-tests/html/cross-origin-opener-policy/javascript-url.https.html

https://results.webkit.org/?suite=layout-tests&suite=layout-tests&test=imported%2Fw3c%2Fweb-platform-tests%2Fhtml%2Fcross-origin-opener-policy%2Fiframe-popup-unsafe-none-to-same-origin.https.html&test=imported%2Fw3c%2Fweb-platform-tests%2Fhtml%2Fcross-origin-opener-policy%2Fjavascript-url.https.html

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebKit              	0x00000001034360a8 frameID + 0 (WebFrameProxy.h:69) [inlined]
1   com.apple.WebKit              	0x00000001034360a8 WebKit::ProvisionalPageProxy::cancel() + 304 (ProvisionalPageProxy.cpp:160)
2   com.apple.WebKit              	0x00000001034360a0 WebKit::ProvisionalPageProxy::cancel() + 296 (ProvisionalPageProxy.cpp:158)
3   com.apple.WebKit              	0x00000001034b069c WebKit::WebPageProxy::didStartProvisionalLoadForFrameShared(WTF::Ref<WebKit::WebProcessProxy, WTF::RawPtrTraits<WebKit::WebProcessProxy> >&&, WTF::ObjectIdentifier<WebCore::FrameIdentifierType>, WebKit::FrameInfoData&&, WebCore::ResourceRequest&&, unsigned long long, WTF::URL&&, WTF::URL&&, WebKit::UserData const&) + 248 (WebPageProxy.cpp:4583)
4   com.apple.WebKit              	0x00000001034b0584 WebKit::WebPageProxy::didStartProvisionalLoadForFrame(WTF::ObjectIdentifier<WebCore::FrameIdentifierType>, WebKit::FrameInfoData&&, WebCore::ResourceRequest&&, unsigned long long, WTF::URL&&, WTF::URL&&, WebKit::UserData const&) + 72 (WebPageProxy.cpp:4570)
5   com.apple.WebKit              	0x00000001037ca4c8 callMemberFunction<WebKit::WebPageProxy, void (WebKit::WebPageProxy::*)(WTF::ObjectIdentifier<WebCore::FrameIdentifierType>, WebKit::FrameInfoData &&, WebCore::ResourceRequest &&, unsigned long long, WTF::URL &&, WTF::URL &&, const WebKit::UserData &), std::__1::tuple<WTF::ObjectIdentifier<WebCore::FrameIdentifierType>, WebKit::FrameInfoData, WebCore::ResourceRequest, unsigned long long, WTF::URL, WTF::URL, WebKit::UserData>, std::__1::integer_sequence<unsigned long, 0, 1, 2, 3, 4, 5, 6> > + 20 (HandleMessage.h:131) [inlined]
6   com.apple.WebKit              	0x00000001037ca4c8 void IPC::handleMessage<Messages::WebPageProxy::DidStartProvisionalLoadForFrame, WebKit::WebPageProxy, void (WebKit::WebPageProxy::*)(WTF::ObjectIdentifier<WebCore::FrameIdentifierType>, WebKit::FrameInfoData&&, WebCore::ResourceRequest&&, unsigned long long, WTF::URL&&, WTF::URL&&, WebKit::UserData const&)>(IPC::Connection&, IPC::Decoder&, WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(WTF::ObjectIdentifier<WebCore::FrameIdentifierType>, WebKit::FrameInfoData&&, WebCore::ResourceRequest&&, unsigned long long, WTF::URL&&, WTF::URL&&, WebKit::UserData const&)) + 80 (HandleMessage.h:202)
7   com.apple.WebKit              	0x00000001037c7efc WebKit::WebPageProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 2512 (WebPageProxyMessageReceiver.cpp:1512)
8   com.apple.WebKit              	0x000000010305eca4 IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::Decoder&) + 240 (MessageReceiverMap.cpp:129)
9   com.apple.WebKit              	0x00000001034d5bc8 WebKit::WebProcessProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 32 (WebProcessProxy.cpp:854)
10  com.apple.WebKit              	0x000000010303e404 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 288 (Connection.cpp:1126)
11  com.apple.WebKit              	0x000000010303ae60 IPC::Connection::SyncMessageState::ConnectionAndIncomingMessage::dispatch() + 36 (Connection.cpp:125)
12  com.apple.WebKit              	0x000000010303b040 IPC::Connection::SyncMessageState::dispatchMessagesAndResetDidScheduleDispatchMessagesForConnection(IPC::Connection&) + 448 (Connection.cpp:241)
13  com.apple.JavaScriptCore      	0x0000000101376cbc operator() + 16 (Function.h:82) [inlined]
14  com.apple.JavaScriptCore      	0x0000000101376cbc WTF::RunLoop::performWork() + 240 (RunLoop.cpp:133)

[Ryan Haddad]

This looks like it could be related to https://trac.webkit.org/changeset/286505/webkit

[Chris Dumez]

*** This bug has been marked as a duplicate of bug 233874 ***

[Radar WebKit Bug Importer]

<rdar://problem/86123755>