Bug 277918

Summary:	[GTK][Win] ASSERTION FAILED: ptrCountWithoutThreadCheck() under RemoteWebInspectorUIProxy::frontendDidClose
Product:	WebKit	Reporter:	Fujii Hironori <fujii.hironori>
Component:	WebKit2	Assignee:	Nobody <webkit-unassigned>
Status:	NEW
Severity:	Normal	CC:	kkinnunen
Priority:	P2	Keywords:	DoNotImportToRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Fujii Hironori

Reported 2024-08-10 15:05:11 PDT

[Win] ASSERTION FAILED: ptrCountWithoutThreadCheck() under RemoteWebInspectorUIProxy::frontendDidClose 1. Start MiniBrowser.exe 2. Open a PowerShell termainal 3. $env:WEBKIT_INSPECTOR_SERVER = "0.0.0.0:8811" 4. Start another MiniBrowser.exe 5. Load inspector://localhost:8811 in the first MiniBrowser 6. Push "Inspect" button 7. Close the inspector window. 8. An assertion fails ASSERTION FAILED: ptrCountWithoutThreadCheck() ASSERTION FAILED: ptrCountWithoutThreadCheck() C:\webkit\wc\WebKitBuild\Debug\WTF\Headers\wtf/CheckedRef.h(286) : void WTF::CanMakeCheckedPtrBase<WTF::SingleThreadIntegralWrapper<unsigned int>, unsigned int>::decrementPtrCount() const [StorageType = WTF::SingleThreadIntegralWrapper<unsigned int>, PtrCounterType = unsigned int] C:\webkit\wc\WebKitBuild\Debug\WTF\Headers\wtf/CheckedRef.h(286) : void WTF::CanMakeCheckedPtrBase<WTF::SingleThreadIntegralWrapper<unsigned int>, unsigned int>::decrementPtrCount() const [StorageType = WTF::SingleThreadIntegralWrapper<unsigned int>, PtrCounterType = unsigned int] 1 00007FFBF2E14B5C WTF::CanMakeCheckedPtrBase<WTF::SingleThreadIntegralWrapper<unsigned int>,unsigned int>::decrementPtrCount 1 00007FFBF2E14B5C WTF::CanMakeCheckedPtrBase<WTF::SingleThreadIntegralWrapper<unsigned int>,unsigned int>::decrementPtrCount 2 00007FFBF42A80C0 WTF::CheckedPtr<WebKit::RemoteWebInspectorUIProxyClient,WTF::RawPtrTraits<WebKit::RemoteWebInspectorUIProxyClient> >::derefIfNotNull 2 00007FFBF42A80C0 WTF::CheckedPtr<WebKit::RemoteWebInspectorUIProxyClient,WTF::RawPtrTraits<WebKit::RemoteWebInspectorUIProxyClient> >::derefIfNotNull 3 00007FFBF42A3593 WTF::CheckedPtr<WebKit::RemoteWebInspectorUIProxyClient,WTF::RawPtrTraits<WebKit::RemoteWebInspectorUIProxyClient> >::~CheckedPtr 3 00007FFBF42A3593 WTF::CheckedPtr<WebKit::RemoteWebInspectorUIProxyClient,WTF::RawPtrTraits<WebKit::RemoteWebInspectorUIProxyClient> >::~CheckedPtr 4 00007FFBF429EF8B WebKit::RemoteWebInspectorUIProxy::frontendDidClose 4 00007FFBF429EF8B WebKit::RemoteWebInspectorUIProxy::frontendDidClose 5 00007FFBF2E4D2D9 WebKit::RemoteWebInspectorUIProxy::onClose 5 00007FFBF2E4D2D9 WebKit::RemoteWebInspectorUIProxy::onClose 6 00007FFBF2E4D177 WebKit::RemoteWebInspectorUIProxy::WndProc 6 00007FFBF2E4D177 WebKit::RemoteWebInspectorUIProxy::WndProc 7 00007FFCE70D89A1 DispatchMessageW 7 00007FFCE70D89A1 DispatchMessageW 8 00007FFCE70D81EB CallWindowProcW 8 00007FFCE70D81EB CallWindowProcW 9 00007FFBC360E6E9 WebCore::WindowMessageBroadcaster::SubclassedWndProc 9 00007FFBC360E6E9 WebCore::WindowMessageBroadcaster::SubclassedWndProc 10 00007FFCE70D89A1 DispatchMessageW 10 00007FFCE70D89A1 DispatchMessageW 11 00007FFCE70D865C DispatchMessageW 11 00007FFCE70D865C DispatchMessageW 12 00007FFCE70E3B9D GetClassLongW 12 00007FFCE70E3B9D GetClassLongW 13 00007FFCE7513FE4 KiUserCallbackDispatcher 13 00007FFCE7513FE4 KiUserCallbackDispatcher 14 00007FFCE47A1554 NtUserMessageCall 14 00007FFCE47A1554 NtUserMessageCall 15 00007FFCE70D6DB5 GetDlgCtrlID 15 00007FFCE70D6DB5 GetDlgCtrlID 16 00007FFCE70D68C2 GetDlgCtrlID 16 00007FFCE70D68C2 GetDlgCtrlID 17 00007FFCE152B4E0 Ordinal43 17 00007FFCE152B4E0 Ordinal43 18 00007FFCE1513102 GetThemeEnumValue 18 00007FFCE1513102 GetThemeEnumValue 19 00007FFCE151B73C ThemeInitApiHook 19 00007FFCE151B73C ThemeInitApiHook 20 00007FFCE151A1C1 ThemeInitApiHook 20 00007FFCE151A1C1 ThemeInitApiHook 21 00007FFCE70D6A45 GetDlgCtrlID 21 00007FFCE70D6A45 GetDlgCtrlID 22 00007FFBF2E4D19F WebKit::RemoteWebInspectorUIProxy::WndProc 22 00007FFBF2E4D19F WebKit::RemoteWebInspectorUIProxy::WndProc 23 00007FFCE70D89A1 DispatchMessageW 23 00007FFCE70D89A1 DispatchMessageW 24 00007FFCE70D81EB CallWindowProcW 24 00007FFCE70D81EB CallWindowProcW 25 00007FFBC360E6E9 WebCore::WindowMessageBroadcaster::SubclassedWndProc 25 00007FFBC360E6E9 WebCore::WindowMessageBroadcaster::SubclassedWndProc 26 00007FFCE70D89A1 DispatchMessageW 26 00007FFCE70D89A1 DispatchMessageW 27 00007FFCE70D865C DispatchMessageW 27 00007FFCE70D865C DispatchMessageW 28 00007FFCE70E3B9D GetClassLongW 28 00007FFCE70E3B9D GetClassLongW 29 00007FFCE7513FE4 KiUserCallbackDispatcher 29 00007FFCE7513FE4 KiUserCallbackDispatcher 30 00007FFCE47A1554 NtUserMessageCall 30 00007FFCE47A1554 NtUserMessageCall 31 00007FFCE70D6DB5 GetDlgCtrlID 31 00007FFCE70D6DB5 GetDlgCtrlID Exception thrown at 0x00007FFBF213E9F5 (JavaScriptCore.dll) in MiniBrowser.exe: 0xC0000005: Access violation writing location 0x00000000BBADBEEF.

Attachments
Add attachment proposed patch, testcase, etc.

Fujii Hironori

Comment 1 2024-08-12 19:25:23 PDT

This is also reproducible with GTK MiniBrowser.

Note You need to log in before you can comment on or make changes to this bug.