Bug 278343

Summary:	[ iOS iPhone Debug ] editing/inserting/insert-composition-whitespace.html is a constant crash
Product:	WebKit	Reporter:	Dawn Morningstar <Morningstar>
Component:	HTML Editing	Assignee:	Wenson Hsieh <wenson_hsieh>
Status:	NEW
Severity:	Normal	CC:	ap, keith_miller, megan_gardner, webkit-bot-watchers-bugzilla, webkit-bug-importer, wenson_hsieh
Priority:	P2	Keywords:	InRadar
Version:	Other
Hardware:	Unspecified
OS:	Unspecified

Dawn Morningstar

Reported 2024-08-19 13:54:01 PDT

editing/inserting/insert-composition-whitespace.html [ Crash ] This test is a constant crash on iOS Debug on iPhone. History: https://results.webkit.org/?platform=ios&suite=layout-tests&test=editing%2Finserting%2Finsert-composition-whitespace.html stderr: ASSERTION FAILED: m_positionEndOffset - offsetInNode <= static_cast<int>(text.length()) /Volumes/Data/worker/Apple-iOS-17-Simulator-Debug-Build/build/Source/WebCore/editing/TextIterator.cpp(1360) : bool WebCore::SimplifiedBackwardsTextIterator::handleTextNode() 1 0x3590561a0 WebCore::SimplifiedBackwardsTextIterator::handleTextNode() 2 0x3590558d0 WebCore::SimplifiedBackwardsTextIterator::advance() 3 0x3590556cc WebCore::SimplifiedBackwardsTextIterator::SimplifiedBackwardsTextIterator(WebCore::SimpleRange const&) 4 0x359055de0 WebCore::SimplifiedBackwardsTextIterator::SimplifiedBackwardsTextIterator(WebCore::SimpleRange const&) 5 0x3590933e4 WebCore::previousBoundary(WebCore::VisiblePosition const&, unsigned int (*)(WTF::StringView, unsigned int, WebCore::BoundarySearchContextAvailability, bool&), WebCore::NeedsContextAtParagraphStart) 6 0x35908ef98 WebCore::startOfSentence(WebCore::VisiblePosition const&) 7 0x3590982a0 WebCore::withinTextUnitOfGranularity(WebCore::VisiblePosition const&, WebCore::TextGranularity, WebCore::SelectionDirection) 8 0x359098ed8 WebCore::nextSentenceBoundaryInDirection(WebCore::VisiblePosition const&, WebCore::SelectionDirection) 9 0x359098648 WebCore::positionOfNextBoundaryOfGranularity(WebCore::VisiblePosition const&, WebCore::TextGranularity, WebCore::SelectionDirection) 10 0x145a7d180 WebKit::moveByGranularityRespectingWordBoundary(WebCore::VisiblePosition const&, WebCore::TextGranularity, unsigned long long, WebCore::SelectionDirection) 11 0x145a7bf74 WebKit::WebPage::requestDocumentEditingContext(WebKit::DocumentEditingContextRequest&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&) 12 0x146d063d0 auto void IPC::callMemberFunction<WebKit::WebPage, WebKit::WebPage, void (WebKit::DocumentEditingContextRequest&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&), std::__1::tuple<WebKit::DocumentEditingContextRequest>, void (WebKit::DocumentEditingContext&&)>(WebKit::WebPage*, void (WebKit::WebPage::*)(WebKit::DocumentEditingContextRequest&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&), std::__1::tuple<WebKit::DocumentEditingContextRequest>&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&)::'lambda'(auto&&...)::operator()<WebKit::DocumentEditingContextRequest>(auto&&...) const 13 0x146d06318 decltype(std::declval<WebKit::WebPage>()(std::declval<WebKit::DocumentEditingContextRequest>())) std::__1::__invoke[abi:sn170006]<void IPC::callMemberFunction<WebKit::WebPage, WebKit::WebPage, void (WebKit::DocumentEditingContextRequest&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&), std::__1::tuple<WebKit::DocumentEditingContextRequest>, void (WebKit::DocumentEditingContext&&)>(WebKit::WebPage*, void (WebKit::WebPage::*)(WebKit::DocumentEditingContextRequest&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&), std::__1::tuple<WebKit::DocumentEditingContextRequest>&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&)::'lambda'(auto&&...), WebKit::DocumentEditingContextRequest>(WebKit::WebPage&&, WebKit::DocumentEditingContextRequest&&) 14 0x146d062ec decltype(auto) std::__1::__apply_tuple_impl[abi:sn170006]<void IPC::callMemberFunction<WebKit::WebPage, WebKit::WebPage, void (WebKit::DocumentEditingContextRequest&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&), std::__1::tuple<WebKit::DocumentEditingContextRequest>, void (WebKit::DocumentEditingContext&&)>(WebKit::WebPage*, void (WebKit::WebPage::*)(WebKit::DocumentEditingContextRequest&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&), std::__1::tuple<WebKit::DocumentEditingContextRequest>&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&)::'lambda'(auto&&...), std::__1::tuple<WebKit::DocumentEditingContextRequest>, 0ul>(WebKit::WebPage&&, WebKit::WebPage&&, std::__1::__tuple_indices<0ul>) 15 0x146d062b0 decltype(auto) std::__1::apply[abi:sn170006]<void IPC::callMemberFunction<WebKit::WebPage, WebKit::WebPage, void (WebKit::DocumentEditingContextRequest&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&), std::__1::tuple<WebKit::DocumentEditingContextRequest>, void (WebKit::DocumentEditingContext&&)>(WebKit::WebPage*, void (WebKit::WebPage::*)(WebKit::DocumentEditingContextRequest&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&), std::__1::tuple<WebKit::DocumentEditingContextRequest>&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&)::'lambda'(auto&&...), std::__1::tuple<WebKit::DocumentEditingContextRequest>>(WebKit::WebPage&&, WebKit::WebPage&&) 16 0x146d04d60 void IPC::callMemberFunction<WebKit::WebPage, WebKit::WebPage, void (WebKit::DocumentEditingContextRequest&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&), std::__1::tuple<WebKit::DocumentEditingContextRequest>, void (WebKit::DocumentEditingContext&&)>(WebKit::WebPage*, void (WebKit::WebPage::*)(WebKit::DocumentEditingContextRequest&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&), std::__1::tuple<WebKit::DocumentEditingContextRequest>&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&) 17 0x146c92e2c void IPC::handleMessageAsync<Messages::WebPage::RequestDocumentEditingContext, WebKit::WebPage, WebKit::WebPage, void (WebKit::DocumentEditingContextRequest&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&)>(IPC::Connection&, IPC::Decoder&, WebKit::WebPage*, void (WebKit::WebPage::*)(WebKit::DocumentEditingContextRequest&&, WTF::CompletionHandler<void (WebKit::DocumentEditingContext&&)>&&)) 18 0x146c85ef4 WebKit::WebPage::didReceiveWebPageMessage(IPC::Connection&, IPC::Decoder&) 19 0x146bfb0e0 WebKit::WebPage::didReceiveMessage(IPC::Connection&, IPC::Decoder&) 20 0x14738c880 IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::Decoder&) 21 0x145d70410 WebKit::WebProcess::didReceiveMessage(IPC::Connection&, IPC::Decoder&) 22 0x147359d9c IPC::Connection::dispatchMessage(IPC::Decoder&) 23 0x14735a1ec IPC::Connection::dispatchMessage(WTF::UniqueRef<IPC::Decoder>) 24 0x14735a52c IPC::Connection::dispatchOneIncomingMessage() 25 0x14737c0cc IPC::Connection::enqueueIncomingMessage(WTF::UniqueRef<IPC::Decoder>)::$_17::operator()() const 26 0x14737c028 WTF::Detail::CallableWrapper<IPC::Connection::enqueueIncomingMessage(WTF::UniqueRef<IPC::Decoder>)::$_17, void>::call() 27 0x10a67e178 WTF::Function<void ()>::operator()() const 28 0x10a7325a4 WTF::RunLoop::performWork() 29 0x10a736ff0 WTF::RunLoop::performWork(void*) 30 0x10469de48 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ 31 0x10469dd90 __CFRunLoopDoSource0 com.apple.WebKit.WebContent.Development terminated (pid 34204) for reason: crash LEAK: 2 WebPageProxy Url: https://build.webkit.org/results/Apple-iOS-17-Simulator-Debug-WK2-Tests/282418@main%20(2330)/editing/inserting/insert-composition-whitespace-crash-log.txt Test-run: https://build.webkit.org/results/Apple-iOS-17-Simulator-Debug-WK2-Tests/282418@main%20(2330)/results.html

Attachments
Add attachment proposed patch, testcase, etc.

Radar WebKit Bug Importer

Comment 1 2024-08-19 13:55:17 PDT

<rdar://problem/134288648>

Dawn Morningstar

Comment 2 2024-08-19 13:56:37 PDT

This was first noticed at 279787@main which also modifies assertions

Dawn Morningstar

Comment 3 2024-08-19 14:05:35 PDT

Pull request: https://github.com/WebKit/WebKit/pull/32417

EWS

Comment 4 2024-08-19 14:07:57 PDT

Test gardening commit 282460@main (61fe9c9cd04c): <https://commits.webkit.org/282460@main> Reviewed commits have been landed. Closing PR #32417 and removing active labels.

Note You need to log in before you can comment on or make changes to this bug.