Bug 275112

Summary: REGRESSION (279682@main): [ MacOS WK2 Debug ] 43X layout test are consistent crashes
Product: WebKit Reporter: Jay Stfleur <j_stfleur>
Component: New BugsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: webkit-bot-watchers-bugzilla, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Jay Stfleur
Reported 2024-06-04 09:08:59 PDT
Description: http/tests/inspector/target/pause-on-inline-debugger-statement.html http/tests/websocket/tests/hybi/inspector/send-and-recieve-debugger.html inspector/debugger/async-stack-trace-basic.html inspector/debugger/async-stack-trace-event-listener.html inspector/debugger/async-stack-trace-truncate.html inspector/debugger/break-in-constructor-before-super.html inspector/debugger/break-on-exception-throw-in-promise.html inspector/debugger/break-on-exception.html inspector/debugger/break-on-uncaught-exception.html inspector/debugger/breakpoint-action-detach.html inspector/debugger/breakpoint-action-emulateUserGesture-hasTransientActiviation.html inspector/debugger/breakpoint-action-emulateUserGesture-userIsInteracting.html inspector/debugger/breakpoint-action-emulateUserGesture.html inspector/debugger/breakpoint-action-eval.html inspector/debugger/breakpoint-action-log.html inspector/debugger/stepping/stepInto.html inspector/debugger/tail-deleted-frames/tail-deleted-frames-intermediate-frames.html inspector/debugger/tail-deleted-frames/tail-deleted-frames-intermediate-native-tail-deleted-calls.html inspector/debugger/tail-deleted-frames/tail-deleted-frames-intermediate-tail-deleted-frames.html inspector/debugger/tail-deleted-frames/tail-deleted-frames-scopes.html inspector/debugger/tail-deleted-frames/tail-deleted-frames-this-value.html inspector/debugger/tail-deleted-frames/tail-deleted-frames-vm-entry.html inspector/dom-debugger/attribute-modified-style.html inspector/dom-debugger/dom-breakpoint-attribute-modified.html inspector/dom-debugger/dom-breakpoint-node-removed-ancestor.html inspector/dom-debugger/dom-breakpoint-node-removed-direct.html inspector/dom-debugger/dom-breakpoint-subtree-modified-add.html inspector/dom-debugger/dom-breakpoint-subtree-modified-remove.html inspector/dom-debugger/event-animation-frame-breakpoints.html inspector/dom-debugger/event-breakpoint-with-navigation.html inspector/dom-debugger/event-interval-breakpoints.html inspector/dom-debugger/event-listener-breakpoints-all-events.html inspector/dom/breakpoint-for-event-listener.html inspector/injected-script/observable.html inspector/model/scope-chain-node.html inspector/script-profiler/event-type-API.html inspector/script-profiler/event-type-Microtask.html inspector/script-profiler/event-type-Other.html inspector/worker/debugger-multiple-targets-pause.html inspector/worker/debugger-pause.html inspector/worker/debugger-shared-breakpoint.html inspector/worker/dom-debugger-event-interval-breakpoints.html inspector/worker/dom-debugger-event-listener-breakpoints.html All test are crashing after changes on 279682@main, on Ventura+ WK2 Debug Buildbot URL: https://build.webkit.org/#/builders/933/builds/1719 History: https://results.webkit.org/?suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&suite=layout-tests&test=http%2Ftests%2Finspector%2Ftarget%2Fpause-on-inline-debugger-statement.html&test=http%2Ftests%2Fwebsocket%2Ftests%2Fhybi%2Finspector%2Fsend-and-recieve-debugger.html&test=inspector%2Fdebugger%2Fasync-stack-trace-basic.html&test=inspector%2Fdebugger%2Fasync-stack-trace-event-listener.html&test=inspector%2Fdebugger%2Fasync-stack-trace-truncate.html&test=inspector%2Fdebugger%2Fbreak-in-constructor-before-super.html&test=inspector%2Fdebugger%2Fbreak-on-exception-throw-in-promise.html&test=inspector%2Fdebugger%2Fbreak-on-exception.html&test=inspector%2Fdebugger%2Fbreak-on-uncaught-exception.html&test=inspector%2Fdebugger%2Fbreakpoint-action-detach.html&test=inspector%2Fdebugger%2Fbreakpoint-action-emulateUserGesture-hasTransientActiviation.html&test=inspector%2Fdebugger%2Fbreakpoint-action-emulateUserGesture-userIsInteracting.html&test=inspector%2Fdebugger%2Fbreakpoint-action-emulateUserGesture.html&test=inspector%2Fdebugger%2Fbreakpoint-action-eval.html&test=inspector%2Fdebugger%2Fbreakpoint-action-log.html&test=inspector%2Fdebugger%2Fstepping%2FstepInto.html&test=inspector%2Fdebugger%2Ftail-deleted-frames%2Ftail-deleted-frames-intermediate-frames.html&test=inspector%2Fdebugger%2Ftail-deleted-frames%2Ftail-deleted-frames-intermediate-native-tail-deleted-calls.html&test=inspector%2Fdebugger%2Ftail-deleted-frames%2Ftail-deleted-frames-intermediate-tail-deleted-frames.html&test=inspector%2Fdebugger%2Ftail-deleted-frames%2Ftail-deleted-frames-scopes.html&test=inspector%2Fdebugger%2Ftail-deleted-frames%2Ftail-deleted-frames-this-value.html&test=inspector%2Fdebugger%2Ftail-deleted-frames%2Ftail-deleted-frames-vm-entry.html&test=inspector%2Fdom-debugger%2Fattribute-modified-style.html&test=inspector%2Fdom-debugger%2Fdom-breakpoint-attribute-modified.html&test=inspector%2Fdom-debugger%2Fdom-breakpoint-node-removed-ancestor.html&test=inspector%2Fdom-debugger%2Fdom-breakpoint-node-removed-direct.html&test=inspector%2Fdom-debugger%2Fdom-breakpoint-subtree-modified-add.html&test=inspector%2Fdom-debugger%2Fdom-breakpoint-subtree-modified-remove.html&test=inspector%2Fdom-debugger%2Fevent-animation-frame-breakpoints.html&test=inspector%2Fdom-debugger%2Fevent-breakpoint-with-navigation.html&test=inspector%2Fdom-debugger%2Fevent-interval-breakpoints.html&test=inspector%2Fdom-debugger%2Fevent-listener-breakpoints-all-events.html&test=inspector%2Fdom%2Fbreakpoint-for-event-listener.html&test=inspector%2Finjected-script%2Fobservable.html&test=inspector%2Fmodel%2Fscope-chain-node.html&test=inspector%2Fscript-profiler%2Fevent-type-API.html&test=inspector%2Fscript-profiler%2Fevent-type-Microtask.html&test=inspector%2Fscript-profiler%2Fevent-type-Other.html&test=inspector%2Fworker%2Fdebugger-multiple-targets-pause.html&test=inspector%2Fworker%2Fdebugger-pause.html&test=inspector%2Fworker%2Fdebugger-shared-breakpoint.html&test=inspector%2Fworker%2Fdom-debugger-event-interval-breakpoints.html&test=inspector%2Fworker%2Fdom-debugger-event-listener-breakpoints.html&platform=mac&style=debug&flavor=wk2 Diff/Image Diff/Crash Log: Crash log for inspector/debugger/async-stack-trace-truncate.html Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.JavaScriptCore 0x3d6311e42 WTFCrashWithInfo(int, char const*, char const*, int) 1 com.apple.JavaScriptCore 0x3d631ad6c JSC::ExceptionOperationImplicitResult<unsigned long long> JSC::makeOperationResult<JSC::ThrowScope, unsigned long long>(JSC::ThrowScope&, unsigned long long) 2 com.apple.JavaScriptCore 0x3d692da5a operationDefaultCall 3 0x3fe86cc04016 4 com.apple.JavaScriptCore 0x3d786c41c llint_entry 5 com.apple.JavaScriptCore 0x3d7847904 vmEntryToJavaScript 6 com.apple.JavaScriptCore 0x3d684d1ee JSC::Interpreter::executeCallImpl(JSC::VM&, JSC::JSObject*, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) 7 com.apple.JavaScriptCore 0x3d684d2f0 JSC::Interpreter::executeCall(JSC::JSObject*, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) 8 com.apple.JavaScriptCore 0x3d6b0fcec JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) 9 com.apple.JavaScriptCore 0x3d6b0fdcc JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) 10 com.apple.WebCore 0x461c13b5a WebCore::JSExecState::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) 11 com.apple.WebCore 0x461c45bec WebCore::functionCallHandlerFromAnyThread(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) 12 com.apple.JavaScriptCore 0x3d67e2d62 Inspector::ScriptFunctionCall::call() 13 com.apple.JavaScriptCore 0x3d66d91be Inspector::InjectedScriptBase::callFunctionWithEvalEnabled(Inspector::ScriptFunctionCall&) const 14 com.apple.JavaScriptCore 0x3d66d8fd2 Inspector::InjectedScript::wrapCallFrames(JSC::JSValue) const 15 com.apple.JavaScriptCore 0x3d67f6b88 Inspector::InspectorDebuggerAgent::currentCallFrames(Inspector::InjectedScript const&) 16 com.apple.JavaScriptCore 0x3d67f986a Inspector::InspectorDebuggerAgent::didPause(JSC::JSGlobalObject*, JSC::DebuggerCallFrame&, JSC::JSValue) 17 com.apple.JavaScriptCore 0x3d6001430 JSC::Debugger::handlePause(JSC::JSGlobalObject*, JSC::Debugger::ReasonForPause)::$_15::operator()(JSC::Debugger::Observer&) const 18 com.apple.JavaScriptCore 0x3d6001330 WTF::Detail::CallableWrapper<JSC::Debugger::handlePause(JSC::JSGlobalObject*, JSC::Debugger::ReasonForPause)::$_15, void, JSC::Debugger::Observer&>::call(JSC::Debugger::Observer&) 19 com.apple.JavaScriptCore 0x3d5fcfb1a WTF::Function<void (JSC::Debugger::Observer&)>::operator()(JSC::Debugger::Observer&) const 20 com.apple.JavaScriptCore 0x3d5fcf698 JSC::Debugger::dispatchFunctionToObservers(WTF::Function<void (JSC::Debugger::Observer&)>) 21 com.apple.JavaScriptCore 0x3d5fd52b0 JSC::Debugger::handlePause(JSC::JSGlobalObject*, JSC::Debugger::ReasonForPause) 22 com.apple.JavaScriptCore 0x3d5fd460e JSC::Debugger::pauseIfNeeded(JSC::JSGlobalObject*) 23 com.apple.JavaScriptCore 0x3d5fd4a5e JSC::Debugger::updateCallFrame(JSC::JSGlobalObject*, JSC::CallFrame*, JSC::Debugger::CallFrameUpdateAction) 24 com.apple.JavaScriptCore 0x3d5fd66a8 JSC::Debugger::didReachDebuggerStatement(JSC::CallFrame*) 25 com.apple.JavaScriptCore 0x3d684f4ee JSC::Interpreter::debug(JSC::CallFrame*, JSC::DebugHookType) 26 com.apple.JavaScriptCore 0x3d6a04b80 llint_slow_path_debug 27 com.apple.JavaScriptCore 0x3d786f346 llint_entry
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2024-06-04 09:09:21 PDT
<rdar://problem/129222501>
Alexey Proskuryakov
Comment 2 2024-06-04 09:58:39 PDT
*** This bug has been marked as a duplicate of bug 275106 ***
Note You need to log in before you can comment on or make changes to this bug.