Bug 156480 - imported/w3c/web-platform-tests/IndexedDB/idbindex-multientry-big.htm crashes on iOS-simulator
Summary: imported/w3c/web-platform-tests/IndexedDB/idbindex-multientry-big.htm crashes...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebCore Misc. (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-04-11 16:07 PDT by Jiewen Tan
Modified: 2016-04-11 17:45 PDT (History)
3 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jiewen Tan 2016-04-11 16:07:22 PDT
Process:               com.apple.WebKit.WebContent.Development [92975]
Path:                  /Volumes/VOLUME/*/WebKit.framework/XPCServices/com.apple.WebKit.WebContent.Development.xpc/com.apple.WebKit.WebContent.Development
Identifier:            com.apple.WebKit.WebContent.Development
Version:               602+ (602.1.22+)
Code Type:             X86-64 (Native)
Parent Process:        launchd_sim [92418]
Responsible:           com.apple.WebKit.WebContent.Development [92975]
User ID:               501

Date/Time:             2016-04-11 15:09:05.448 -0700
OS Version:            Mac OS X 10.11.3 (15D21)
Report Version:        11
Anonymous UUID:        70C19A89-C40D-2F42-6C0A-0EF8CF6D50D1


Time Awake Since Boot: 2800000 seconds

System Integrity Protection: disabled

Crashed Thread:        0  Dispatch queue: com.apple.main-thread

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x00000000bbadbeef
Exception Note:        EXC_CORPSE_NOTIFY

VM Regions Near 0xbbadbeef:
--> 
    __TEXT                 0000000100c14000-0000000100c16000 [    8K] r-x/rwx SM=COW  /Volumes/VOLUME/*/WebKit.framework/XPCServices/com.apple.WebKit.WebContent.Development.xpc/com.apple.WebKit.WebContent.Development

Application Specific Information:
CoreSimulator 179 - Device: iPhone 5s WebKit Tester10 - Runtime: iOS 9.0 (13A340) - DeviceType: iPhone 5s
CRASHING TEST: imported/w3c/html-templates/parsing-html-templates/creating-an-element-for-the-token/template-owner-document.html

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   JavaScriptCore                	0x0000000108434ad7 WTFCrash + 39 (Assertions.cpp:322)
1   JavaScriptCore                	0x0000000107fc9b97 JSC::JSValue::synthesizePrototype(JSC::ExecState*) const + 151 (JSCJSValue.cpp:115)
2   JavaScriptCore                	0x0000000107899f24 JSC::JSValue::getPropertySlot(JSC::ExecState*, JSC::PropertyName, JSC::PropertySlot&) const + 164 (JSCJSValueInlines.h:779)
3   JavaScriptCore                	0x0000000107899de5 JSC::JSValue::get(JSC::ExecState*, JSC::PropertyName, JSC::PropertySlot&) const + 53 (JSCJSValueInlines.h:767)
4   JavaScriptCore                	0x00000001081408e3 llint_slow_path_get_by_id + 243 (LLIntSlowPaths.cpp:569)
5   JavaScriptCore                	0x000000010814d5b8 llint_entry + 12020
6   JavaScriptCore                	0x000000010815142f llint_entry + 28011
7   JavaScriptCore                	0x000000010815142f llint_entry + 28011
8   JavaScriptCore                	0x000000010814a4ae vmEntryToJavaScript + 334
9   JavaScriptCore                	0x0000000107f6537a JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 218 (JITCode.cpp:80)
10  JavaScriptCore                	0x0000000107f214cc JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 1100 (Interpreter.cpp:1019)
11  JavaScriptCore                	0x00000001079407fe JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 190 (CallData.cpp:40)
12  JavaScriptCore                	0x0000000107940863 JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 83 (CallData.cpp:45)
13  JavaScriptCore                	0x0000000107940a5b JSC::profiledCall(JSC::ExecState*, JSC::ProfilingReason, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 139 (CallData.cpp:64)
14  com.apple.WebCore             	0x000000010b07234b WebCore::JSMainThreadExecState::profiledCall(JSC::ExecState*, JSC::ProfilingReason, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 139 (JSMainThreadExecState.h:75)
15  com.apple.WebCore             	0x000000010b22e980 WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext*, WebCore::Event*) + 1504 (JSEventListener.cpp:133)
16  com.apple.WebCore             	0x000000010a955f27 WebCore::EventTarget::fireEventListeners(WebCore::Event&, WebCore::EventTargetData*, WTF::Vector<WebCore::RegisteredEventListener, 1ul, WTF::CrashOnOverflow, 16ul>&) + 1463 (EventTarget.cpp:260)
17  com.apple.WebCore             	0x000000010a955758 WebCore::EventTarget::fireEventListeners(WebCore::Event&) + 312 (EventTarget.cpp:212)
18  com.apple.WebCore             	0x000000010adea6fb WebCore::IDBEventDispatcher::dispatch(WebCore::Event&, WTF::Vector<WTF::RefPtr<WebCore::EventTarget>, 0ul, WTF::CrashOnOverflow, 16ul>&) + 347 (IDBEventDispatcher.cpp:55)
19  com.apple.WebCore             	0x000000010ae05cbd WebCore::IDBRequest::dispatchEvent(WebCore::Event&) + 813 (IDBRequest.cpp:299)
20  com.apple.WebCore             	0x000000010a7b2df9 WebCore::DocumentEventQueue::dispatchEvent(WebCore::Event&) + 105 (DocumentEventQueue.cpp:151)
21  com.apple.WebCore             	0x000000010a7b2d50 WebCore::DocumentEventQueue::pendingEventTimerFired() + 512 (DocumentEventQueue.cpp:140)
22  com.apple.WebCore             	0x000000010a7b3523 WebCore::DocumentEventQueue::Timer::fired() + 99 (DocumentEventQueue.cpp:52)
23  com.apple.WebCore             	0x000000010c311b7a WebCore::ThreadTimers::sharedTimerFiredInternal() + 394 (ThreadTimers.cpp:124)
24  com.apple.WebCore             	0x000000010c312dc1 WebCore::ThreadTimers::setSharedTimer(WebCore::SharedTimer*)::$_0::operator()() const + 33 (ThreadTimers.cpp:73)
25  com.apple.WebCore             	0x000000010c312d8d void std::__1::__invoke_void_return_wrapper<void>::__call<WebCore::ThreadTimers::setSharedTimer(WebCore::SharedTimer*)::$_0&>(WebCore::ThreadTimers::setSharedTimer(WebCore::SharedTimer*)::$_0&&&) + 45 (__functional_base:441)
26  com.apple.WebCore             	0x000000010c312d2c std::__1::__function::__func<WebCore::ThreadTimers::setSharedTimer(WebCore::SharedTimer*)::$_0, std::__1::allocator<WebCore::ThreadTimers::setSharedTimer(WebCore::SharedTimer*)::$_0>, void ()>::operator()() + 44 (functional:1407)
27  com.apple.WebCore             	0x000000010a11ba7a std::__1::function<void ()>::operator()() const + 26 (functional:1793)
28  com.apple.WebCore             	0x000000010b79348f WebCore::MainThreadSharedTimer::fired() + 111 (MainThreadSharedTimer.cpp:53)
29  com.apple.WebCore             	0x000000010b793889 WebCore::timerFired(__CFRunLoopTimer*, void*) + 41 (MainThreadSharedTimerCF.cpp:74)
30  com.apple.CoreFoundation      	0x0000000103d4a364 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20
31  com.apple.CoreFoundation      	0x0000000103d49f11 __CFRunLoopDoTimer + 1089
32  com.apple.CoreFoundation      	0x0000000103d0b8b1 __CFRunLoopRun + 1937
33  com.apple.CoreFoundation      	0x0000000103d0ae98 CFRunLoopRunSpecific + 488
34  com.apple.Foundation          	0x0000000100ce6891 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 267
35  com.apple.Foundation          	0x0000000100d79221 -[NSRunLoop(NSRunLoop) run] + 74
36  libxpc.dylib                  	0x00000001051ee534 _xpc_objc_main + 400
37  libxpc.dylib                  	0x00000001051f08ee xpc_main + 189
38  com.apple.WebKit.WebContent.Development	0x0000000100c150df main + 895 (XPCServiceMain.mm:114)
39  libdyld.dylib                 	0x0000000104f2c92d start + 1
Comment 1 Jiewen Tan 2016-04-11 16:15:59 PDT
Committed r199318: <http://trac.webkit.org/changeset/199318>
Comment 2 Jiewen Tan 2016-04-11 16:16:51 PDT
Reopen to track the bug.
Comment 3 Alexey Proskuryakov 2016-04-11 17:35:39 PDT
Is this the same issue that was fixed by rollout in https://trac.webkit.org/changeset/199323 ?

Please unskip the test if so.
Comment 4 Jiewen Tan 2016-04-11 17:45:11 PDT
Committed r199324: <http://trac.webkit.org/changeset/199324>