Bug 288646

Summary: REGRESSION(291031@main?): ASSERT NOT REACHED in WebKit::IPCTestingAPI::JSIPCStreamClientConnection::MessageReceiver::didReceiveMessage
Product: WebKit Reporter: Ryan Haddad <ryanhaddad>
Component: New BugsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: gavin.p, p_choudhury, sabouhallawa, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
See Also: https://bugs.webkit.org/show_bug.cgi?id=285726
Attachments:
Description Flags
full backtrace none

Ryan Haddad
Reported 2025-02-26 13:34:18 PST
Created attachment 474359 [details] full backtrace After https://commits.webkit.org/291032@main landed, ipc/large-vector-allocate-failure-crash.html appears to be asserting on iOS and macOS debug bots SHOULD NEVER BE REACHED /Volumes/Data/worker/Apple-Sonoma-Debug-Build/build/Source/WebKit/WebProcess/WebPage/IPCTestingAPI.cpp(259) : virtual void WebKit::IPCTestingAPI::JSIPCStreamClientConnection::MessageReceiver::didReceiveMessage(IPC::Connection &, IPC::Decoder &) 1 0x36239d56c WTF::MainThreadAccessTraits::assertAccess() 2 0x3687437bc WTF::NeverDestroyed<WTF::RefPtr<WebCore::ControlFactory, WTF::RawPtrTraits<WebCore::ControlFactory>, WTF::DefaultRefDerefTraits<WebCore::ControlFactory>>, WTF::MainThreadAccessTraits>::NeverDestroyed<WTF::RefPtr<WebCore::ControlFactory, WTF::RawPtrTraits<WebCore::ControlFactory>, WTF::DefaultRefDerefTraits<WebCore::ControlFactory>>>(WTF::RefPtr<WebCore::ControlFactory, WTF::RawPtrTraits<WebCore::ControlFactory>, WTF::DefaultRefDerefTraits<WebCore::ControlFactory>>&&) 3 0x368737d48 WTF::NeverDestroyed<WTF::RefPtr<WebCore::ControlFactory, WTF::RawPtrTraits<WebCore::ControlFactory>, WTF::DefaultRefDerefTraits<WebCore::ControlFactory>>, WTF::MainThreadAccessTraits>::NeverDestroyed<WTF::RefPtr<WebCore::ControlFactory, WTF::RawPtrTraits<WebCore::ControlFactory>, WTF::DefaultRefDerefTraits<WebCore::ControlFactory>>>(WTF::RefPtr<WebCore::ControlFactory, WTF::RawPtrTraits<WebCore::ControlFactory>, WTF::DefaultRefDerefTraits<WebCore::ControlFactory>>&&) 4 0x368737cf0 WebCore::ControlFactory::shared() 5 0x3687c6f00 WebCore::DisplayList::Replayer::Replayer(WebCore::GraphicsContext&, WebCore::DisplayList::DisplayList const&) 6 0x368769704 WebCore::DisplayList::DrawingContext::replayDisplayList(WebCore::GraphicsContext&) 7 0x36850abbc WebCore::ImageBufferDisplayListBackend::sinkIntoPDFDocument() 1 0x1468cbc14 WebKit::IPCTestingAPI::JSIPCStreamClientConnection::MessageReceiver::didReceiveMessage(IPC::Connection&, IPC::Decoder&) 8 0x3684ff398 WebCore::ImageBuffer::sinkIntoPDFDocument() https://results.webkit.org/?suite=layout-tests&test=ipc%2Flarge-vector-allocate-failure-crash.html&platform=ios&platform=mac&style=debug
Attachments
full backtrace (18.45 KB, text/plain)
2025-02-26 13:34 PST, Ryan Haddad 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2025-02-26 13:34:45 PST
<rdar://problem/145688874>
Ryan Haddad
Comment 2 2025-02-26 13:38:42 PST
Actually, though the first crash appeared with https://commits.webkit.org/291032@main, this might be related to https://commits.webkit.org/291031@main
Ryan Haddad
Comment 3 2025-02-26 13:51:26 PST
Yep, I can repro by running these two tests back to back, but not when run individually: ./run-webkit-tests --debug --no-retry ipc/invalid-path-segments-crash.html ipc/large-vector-allocate-failure-crash.html the crash is attributed to ipc/large-vector-allocate-failure-crash.html
Ryan Haddad
Comment 4 2025-02-26 14:29:45 PST
*** This bug has been marked as a duplicate of bug 288620 ***
Note You need to log in before you can comment on or make changes to this bug.