Bug 31461

Summary: REGRESSION(??? - 50919): various layout tests crashing on build and commit bots during JSC::Heap::collect()
Product: WebKit Reporter: Eric Seidel (no email) <eric>
Component: New BugsAssignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal CC: darin, ddkilzer, ggaren, oliver, tonikitoo, zoltan
Priority: P1    
Version: 528+ (Nightly build)   
Hardware: PC   
OS: OS X 10.5   
Bug Depends on: 31453    
Bug Blocks:    
Attachments:
Description Flags
Crash report from bug 31366
none
crash report from bug 31406
none
crash report from trying to land bug 31213
none
crash report from access-control-basic-allow-access-control-origin-header-data-url.html while trying to land bug 31468
none
crash report from fast/workers/worker-terminate.html while trying to land bug
none
Another crash, seen while trying to land bug 31468
none
crash report from http/tests/xmlhttprequest/access-control-basic-allow-access-control-origin-header.html trying to land bug 31504
none
Crash report for repeated http/tests/xmlhttprequest/workers/shared-worker-methods.html runs
none
different crash report from repeated http/tests/xmlhttprequest/workers/shared-worker-methods.html runs none

Description Eric Seidel (no email) 2009-11-12 23:58:42 PST
http/tests/xmlhttprequest/access-control-and-redirects.html crashed on Leopard Commit Bot

https://bugs.webkit.org/show_bug.cgi?id=31366#c5
I'll attach a crash report tomorrow.

I expect this is related to, if not the same as bug 31453.
Comment 1 Eric Seidel (no email) 2009-11-13 11:51:31 PST
Another crash, same test:
https://bugs.webkit.org/show_bug.cgi?id=31406#c7
Comment 2 Eric Seidel (no email) 2009-11-13 11:53:09 PST
Created attachment 43180 [details]
Crash report from bug 31366
Comment 3 Eric Seidel (no email) 2009-11-13 11:53:51 PST
Created attachment 43181 [details]
crash report from bug 31406
Comment 4 Eric Seidel (no email) 2009-11-13 12:08:36 PST
Created attachment 43187 [details]
crash report from trying to land bug 31213

https://bugs.webkit.org/show_bug.cgi?id=31213#c5 also crashed on the same test!
Comment 5 Eric Seidel (no email) 2009-11-13 12:17:12 PST
The first recorded crash of this type was from 11/12/09 at 17:12 PST.  r50919 was the last change before that date.
Comment 6 Eric Seidel (no email) 2009-11-13 13:52:09 PST
Created attachment 43193 [details]
crash report from access-control-basic-allow-access-control-origin-header-data-url.html while trying to land bug 31468

Another failure.  Different test.  I dont' think we need a 7th but on the subject though, so adding it to this one.
https://bugs.webkit.org/show_bug.cgi?id=31468#c6
http/tests/xmlhttprequest/access-control-basic-allow-access-control-origin-header-data-url.html
Comment 7 Eric Seidel (no email) 2009-11-13 14:01:50 PST
Created attachment 43194 [details]
crash report from fast/workers/worker-terminate.html while trying to land bug 

fast/workers/worker-terminate.html
https://bugs.webkit.org/show_bug.cgi?id=31454#c6

This looks to be the same bug. :(
Comment 8 Eric Seidel (no email) 2009-11-13 14:03:14 PST
*** Bug 31453 has been marked as a duplicate of this bug. ***
Comment 9 Eric Seidel (no email) 2009-11-13 14:03:20 PST
*** Bug 31460 has been marked as a duplicate of this bug. ***
Comment 10 Eric Seidel (no email) 2009-11-13 14:03:26 PST
*** Bug 31480 has been marked as a duplicate of this bug. ***
Comment 11 Eric Seidel (no email) 2009-11-13 14:03:30 PST
*** Bug 31481 has been marked as a duplicate of this bug. ***
Comment 12 Eric Seidel (no email) 2009-11-13 15:52:04 PST
Created attachment 43208 [details]
Another crash, seen while trying to land bug 31468
Comment 13 Eric Seidel (no email) 2009-11-13 18:13:12 PST
This has exhibited similar symptoms to bug 30835.  Defining COLLECT_ON_EVERY_ALLOCATION did not cause this to crash more reliably.  The crash point is not the same as bug 30835, but it's similarly difficult to reproduce.
Comment 14 Eric Seidel (no email) 2009-11-16 18:17:56 PST
The bots look less crashy today.  I'll try re-enabling the commit-queue tomorrow and see if the crashiness has stopped.
Comment 15 Eric Seidel (no email) 2009-11-17 12:09:52 PST
Created attachment 43376 [details]
crash report from http/tests/xmlhttprequest/access-control-basic-allow-access-control-origin-header.html trying to land bug 31504

I tried to turn on the commit-queue again this morning.  Looks like this is still with us:
https://bugs.webkit.org/show_bug.cgi?id=31504#c8
Comment 16 Darin Adler 2009-11-17 12:31:28 PST
Oliver Hunt told me he is investigating this and thinks it may have something to do with JavaScript wrappers for worker thread objects.
Comment 17 Oliver Hunt 2009-11-17 12:38:18 PST
(In reply to comment #16)
> Oliver Hunt told me he is investigating this and thinks it may have something
> to do with JavaScript wrappers for worker thread objects.

I was looking at the older random crash.
Comment 18 Eric Seidel (no email) 2009-11-17 16:01:21 PST
Created attachment 43385 [details]
Crash report for repeated http/tests/xmlhttprequest/workers/shared-worker-methods.html runs

Actually, the reduced command I posted above seems to be crashing at a different place.  We may be chasing a red herring.
Comment 19 Eric Seidel (no email) 2009-11-17 16:02:57 PST
Created attachment 43386 [details]
different crash report from repeated http/tests/xmlhttprequest/workers/shared-worker-methods.html runs

Nevermind.  I'm seeing multiple crashes by running http/tests/xmlhttprequest/workers/shared-worker-methods.html repeatedly.  One of which is a crash under Heap::collect() as expected.
Comment 20 Eric Seidel (no email) 2009-11-17 16:08:35 PST
Comment on attachment 43385 [details]
Crash report for repeated http/tests/xmlhttprequest/workers/shared-worker-methods.html runs

Sorry, both of those crash reports were destined for bug 30835.