Bug 270339 – REGRESSION(275267@main): [WPE][GTK][Debug] SHOULD NEVER BE REACHED in JSC::JSValue WebCore::toJSNewlyCreated()

• Component: DOM
• Status: RESOLVED FIXED

[Vitaly Dyackhov]

Test:
imported/w3c/web-platform-tests/dom/nodes/Document-createEvent.https.html

Stack trace:
#0  WTFCrash() () at /app/webkit/Source/WTF/wtf/Assertions.cpp:351
#1  0x00007f9afbf50710 in WTFCrashWithInfo(int, char const*, char const*, int) () at /app/webkit/WebKitBuild/WPE/Debug/WTF/Headers/wtf/Assertions.h:780
#2  0x00007f9b00293c71 in WebCore::toJSNewlyCreated(JSC::JSGlobalObject*, WebCore::JSDOMGlobalObject*, WTF::Ref<WebCore::Event, WTF::RawPtrTraits<WebCore::Event>, WTF::DefaultRefDerefTraits<WebCore::Event> >&&) (globalObject=0x7f98375f56c0, impl=...) at /app/webkit/WebKitBuild/WPE/Debug/WebCore/DerivedSources/EventFactory.cpp:40
#3  0x00007f9b0083ab64 in WebCore::JSConverter<WebCore::IDLInterface<WebCore::Event> >::convertNewlyCreated<WTF::Ref<WebCore::Event, WTF::RawPtrTraits<WebCore::Event>, WTF::DefaultRefDerefTraits<WebCore::Event> > >(JSC::JSGlobalObject&, WebCore::JSDOMGlobalObject&, WTF::Ref<WebCore::Event, WTF::RawPtrTraits<WebCore::Event>, WTF::DefaultRefDerefTraits<WebCore::Event> >&&) (lexicalGlobalObject=..., globalObject=..., value=...) at /app/webkit/Source/WebCore/bindings/js/JSDOMConvertInterface.h:88
#4  0x00007f9b00836127 in WebCore::toJSNewlyCreated<WebCore::IDLInterface<WebCore::Event>, WTF::Ref<WebCore::Event, WTF::RawPtrTraits<WebCore::Event>, WTF::DefaultRefDerefTraits<WebCore::Event> > >(JSC::JSGlobalObject&, WebCore::JSDOMGlobalObject&, WTF::Ref<WebCore::Event, WTF::RawPtrTraits<WebCore::Event>, WTF::DefaultRefDerefTraits<WebCore::Event> >&&) (lexicalGlobalObject=..., globalObject=..., value=...) at /app/webkit/Source/WebCore/bindings/js/JSDOMConvertBase.h:156
#5  0x00007f9b00830ef4 in WebCore::toJSNewlyCreated<WebCore::IDLInterface<WebCore::Event>, WebCore::ExceptionOr<WTF::Ref<WebCore::Event, WTF::RawPtrTraits<WebCore::Event>, WTF::DefaultRefDerefTraits<WebCore::Event> > > >(JSC::JSGlobalObject&, WebCore::JSDOMGlobalObject&, JSC::ThrowScope&, WebCore::ExceptionOr<WTF::Ref<WebCore::Event, WTF::RawPtrTraits<WebCore::Event>, WTF::DefaultRefDerefTraits<WebCore::Event> > >&&) (lexicalGlobalObject=..., globalObject=..., throwScope=..., valueOrFunctor=...) at /app/webkit/Source/WebCore/bindings/js/JSDOMConvertBase.h:244
#6  0x00007f9b007f9c7f in WebCore::jsDocumentPrototypeFunction_createEventBody(JSC::JSGlobalObject*, JSC::CallFrame*, WebCore::IDLOperation<WebCore::JSDocument>::ClassParameter) (lexicalGlobalObject=0x7f98375f56c0, callFrame=0x7ffd2e957e90, castedThis=0x7f9a8e9f0190) at /app/webkit/WebKitBuild/WPE/Debug/WebCore/DerivedSources/JSDocument.cpp:6067
#7  0x00007f9b0082322f in WebCore::IDLOperation<WebCore::JSDocument>::call<WebCore::jsDocumentPrototypeFunction_createEventBody>(JSC::JSGlobalObject&, JSC::CallFrame&, char const*) (lexicalGlobalObject=..., callFrame=..., operationName=0x7f9af41c696c "createEvent") at /app/webkit/Source/WebCore/bindings/js/JSDOMOperation.h:63
#8  0x00007f9b007f9d07 in WebCore::jsDocumentPrototypeFunction_createEvent(JSC::JSGlobalObject*, JSC::CallFrame*) (lexicalGlobalObject=0x7f98375f56c0, callFrame=0x7ffd2e957e90) at /app/webkit/WebKitBuild/WPE/Debug/WebCore/DerivedSources/JSDocument.cpp:6072
#9  0x00007f9a9e9d8038 in  ()
#10 0x00007ffd2e957f00 in  ()
#11 0x00007f9b05edf712 in op_call_ignore_result_return_location () at /app/webkit/Source/JavaScriptCore/llint/LowLevelInterpreter.asm:1172
#12 0x0000000000000000 in  ()

[Vitaly Dyackhov]

Pull request: https://github.com/WebKit/WebKit/pull/25345

[EWS]

Committed 275561@main (872748a67495): <https://commits.webkit.org/275561@main>

Reviewed commits have been landed. Closing PR #25345 and removing active labels.

[Radar WebKit Bug Importer]

<rdar://problem/123907120>