Bug 290942 – REGRESSION(290131@main - 290177@main): [ iOS Debug ] Flaky ASSERTION FAILED: m_frame->view() == this on fast/viewport/ios/width-is-device-width-overflowing-body-overflow-hidden.html

• Component: Scrolling
• Status: NEW

[Yasmin Karimi]

Created attachment 474809 [details]
width-is-device-width-overflowing-body-overflow-hidden-crash-log

fast/viewport/ios/width-is-device-width-overflowing-body-overflow-hidden.html

This test is a flaky crash on iOS Debug.

HISTORY:

https://results.webkit.org/?suite=layout-tests&test=fast%2Fviewport%2Fios%2Fwidth-is-device-width-overflowing-body-overflow-hidden.html

STDERR:

Attached

REPRODUCIBILITY:

I was able to reproduce this issue on the iOS 18.2 simulator at ToT using the following command:

run-webkit-tests --ios-simulator fast/viewport/ios/width-is-device-width-overflowing-body-overflow-hidden.html --iterations 10

REGRESSION:

According to the results dashboard the regression range appears to be 290131@main - 290177@main. However, I was unable to produce a passing result locally, within or before this range.

[Radar WebKit Bug Importer]

<rdar://problem/148465112>

[EWS]

Test gardening commit 293129@main (be7d0a35dd87): <https://commits.webkit.org/293129@main>

Reviewed commits have been landed. Closing PR #43493 and removing active labels.

[Alexey Proskuryakov]

ASSERTION FAILED: m_frame->view() == this
/Volumes/Data/worker/Apple-iOS-18-Simulator-Debug-Build/build/Source/WebCore/page/LocalFrameView.cpp(4350) : virtual IntRect WebCore::LocalFrameView::windowClipRect() const
1   0x14c1eecbc WebCore::LocalFrameView::windowClipRect() const
2   0x14c1e90c0 WebCore::LocalFrameView::applyRecursivelyWithVisibleRect(WTF::Function<void (WebCore::LocalFrameView&, WebCore::IntRect const&)> const&)
3   0x14c1dd4d8 WebCore::LocalFrameView::viewportContentsChanged()
4   0x14c1eebe8 WebCore::LocalFrameView::scrollPositionChanged(WebCore::IntPoint const&, WebCore::IntPoint const&)
5   0x14c1f59d0 WebCore::LocalFrameView::scrollTo(WebCore::IntPoint const&)
6   0x14c5376f4 WebCore::ScrollView::setScrollOffset(WebCore::IntPoint const&)
7   0x14c53e9b4 WebCore::ScrollableArea::scrollPositionChanged(WebCore::IntPoint const&)
8   0x14c53eec0 WebCore::ScrollableArea::setScrollPositionFromAnimation(WebCore::IntPoint const&)
9   0x14c52af50 WebCore::ScrollAnimator::notifyPositionChanged(WebCore::FloatSize const&)
10  0x14c52a548 WebCore::ScrollAnimator::setCurrentPosition(WebCore::FloatPoint const&, WebCore::ScrollAnimator::NotifyScrollableArea)
11  0x14c52a494 WebCore::ScrollAnimator::scrollToPositionWithoutAnimation(WebCore::FloatPoint const&, WebCore::ScrollClamping)
12  0x14c53e3c4 WebCore::ScrollableArea::scrollToPositionWithoutAnimation(WebCore::FloatPoint const&, WebCore::ScrollClamping)
13  0x14c538e88 WebCore::ScrollView::updateScrollbars(WebCore::IntPoint const&)::$_0::operator()(WebCore::IntPoint) const
14  0x14c5349b4 WebCore::ScrollView::updateScrollbars(WebCore::IntPoint const&)
15  0x14c534800 WebCore::ScrollView::setScrollbarModes(WebCore::ScrollbarMode, WebCore::ScrollbarMode, bool, bool)
16  0x14c1dc48c WebCore::LocalFrameView::resetScrollbars()
17  0x14c1dbf54 WebCore::LocalFrameView::~LocalFrameView()
18  0x14c1dc6f4 WebCore::LocalFrameView::~LocalFrameView()
19  0x14c1dc7d8 WebCore::LocalFrameView::operator delete(WebCore::LocalFrameView*, std::destroying_delete_t, unsigned long)
20  0x14c1dc73c WebCore::LocalFrameView::~LocalFrameView()
21  0x1310b1b74 WTF::RefCounted<WebCore::Widget>::deref() const
22  0x1310b1ae4 WTF::DefaultRefDerefTraits<WebCore::LocalFrameView>::derefIfNotNull(WebCore::LocalFrameView*)
23  0x1310b1aa4 WTF::RefPtr<WebCore::LocalFrameView, WTF::RawPtrTraits<WebCore::LocalFrameView>, WTF::DefaultRefDerefTraits<WebCore::LocalFrameView>>::~RefPtr()
24  0x1310a9398 WTF::RefPtr<WebCore::LocalFrameView, WTF::RawPtrTraits<WebCore::LocalFrameView>, WTF::DefaultRefDerefTraits<WebCore::LocalFrameView>>::~RefPtr()
25  0x13436cfcc WebKit::WebLocalFrameLoaderClient::transitionToCommittedForNewPage(WebCore::LocalFrameLoaderClient::InitializingIframe)
26  0x14be6f148 WebCore::FrameLoader::transitionToCommitted(WebCore::CachedPage*)
27  0x14be6daa0 WebCore::FrameLoader::commitProvisionalLoad()
28  0x14bdea6e4 WebCore::DocumentLoader::commitIfReady()
29  0x14bdead84 WebCore::DocumentLoader::finishedLoading()
30  0x14bdf977c WebCore::DocumentLoader::maybeLoadEmpty()
31  0x14bdf9b98 WebCore::DocumentLoader::startLoadingMainResource()
com.apple.WebKit.WebContent.Development terminated (pid 45820) for reason: crash
LEAK: 2 WebPageProxy

[Alexey Proskuryakov]

Seeing that this happens when navigating to a blank document, this may be caused by a preceding test. I checked a recent run, and WKTR was restarted shortly before this, there were only two tests before it:

20:58:51.541 39062 worker/3 fast/viewport/ios/wide-desktop-viewport-in-enhanced-windowing-mode.html passed
20:58:52.223 39062 worker/3 fast/viewport/ios/width-is-device-width-overflowing-body-overflow-hidden-tall.html passed
20:58:52.573 39062 worker/3 com.apple.WebKit.WebContent.Development crash, pid = 45820

[Simon Fraser (smfr)]

Range is https://commits.webkit.org/compare/290131@main...290177@main