RESOLVED DUPLICATE of bug 181980 182078
Occasional crash in AbstractModuleRecord::resolveExport 
https://bugs.webkit.org/show_bug.cgi?id=182078
Summary Occasional crash in AbstractModuleRecord::resolveExport
Ryosuke Niwa
Reported 2018-01-24 17:33:26 PST
I've started seeing the following crash in JSC. I think this is a very recent regression. Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.JavaScriptCore 0x000000010ca310d1 JSC::AbstractModuleRecord::resolveExport(JSC::ExecState*, JSC::Identifier const&) + 33 (HashTable.h:1007) 1 com.apple.JavaScriptCore 0x000000010cb1e9c1 JSC::JSModuleRecord::instantiateDeclarations(JSC::ExecState*, JSC::ModuleProgramExecutable*, JSC::JSValue, JSC::JSValue) + 1249 (ExceptionScope.h:72) 2 com.apple.JavaScriptCore 0x000000010cb1e48e JSC::JSModuleRecord::link(JSC::ExecState*, JSC::JSValue, JSC::JSValue) + 94 (JSModuleRecord.cpp:93) 3 com.apple.JavaScriptCore 0x000000010cb98ae0 JSC::moduleLoaderPrototypeModuleDeclarationInstantiation(JSC::ExecState*) + 304 (ModuleLoaderPrototype.cpp:168) 4 ??? 0x00005beabc801178 0 + 101063742984568 5 com.apple.JavaScriptCore 0x000000010c18dbce llint_entry + 28908 (LowLevelInterpreter.asm:796) 6 com.apple.JavaScriptCore 0x000000010c18dc4d llint_entry + 29035 (LowLevelInterpreter.asm:796) 7 com.apple.JavaScriptCore 0x000000010c1868fa vmEntryToJavaScript + 304 (LowLevelInterpreter64.asm:259) 8 com.apple.JavaScriptCore 0x000000010c89a303 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 147 (JITCode.cpp:82) 9 com.apple.JavaScriptCore 0x000000010c866fbb JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 539 (Interpreter.cpp:1000) 10 com.apple.JavaScriptCore 0x000000010ca52ceb JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 59 (CallData.cpp:42) 11 com.apple.JavaScriptCore 0x000000010cb1b88a JSC::JSModuleLoader::linkAndEvaluateModule(JSC::ExecState*, JSC::JSValue, JSC::JSValue) + 314 (JSModuleLoader.cpp:162) 12 com.apple.JavaScriptCore 0x000000010ca8f662 JSC::linkAndEvaluateModule(JSC::ExecState*, JSC::Identifier const&, JSC::JSValue) + 162 (Completion.cpp:224) 13 com.apple.WebCore 0x0000000108d1fba8 WebCore::JSMainThreadExecState::linkAndEvaluateModule(JSC::ExecState&, JSC::Identifier const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&) + 88 (JSMainThreadExecState.h:111) 14 com.apple.WebCore 0x0000000108d1fac5 WebCore::ScriptController::linkAndEvaluateModuleScriptInWorld(WebCore::LoadableModuleScript&, WebCore::DOMWrapperWorld&) + 293 (ScriptController.cpp:241) 15 com.apple.WebCore 0x0000000108f9a7b3 WebCore::ScriptElement::executeModuleScript(WebCore::LoadableModuleScript&) + 147 (CurrentScriptIncrementer.h:52) 16 com.apple.WebCore 0x0000000108f9a935 WebCore::ScriptElement::executeScriptAndDispatchEvent(WebCore::LoadableScript&) + 181 (ScriptElement.cpp:427) 17 com.apple.WebCore 0x000000010917cc9c WebCore::HTMLScriptRunner::executeScriptsWaitingForParsing() + 220 (NestingLevelIncrementer.h:43) 18 com.apple.WebCore 0x00000001091724a5 WebCore::HTMLDocumentParser::notifyFinished(WebCore::PendingScript&) + 37 (HTMLDocumentParser.cpp:413) 19 com.apple.WebCore 0x0000000108f86913 WebCore::PendingScript::notifyFinished(WebCore::LoadableScript&) + 35 (PendingScript.cpp:69) 20 com.apple.WebCore 0x0000000108f6e13c WebCore::LoadableScript::notifyClientFinished() + 268 (LoadableScript.cpp:59) 21 com.apple.WebCore 0x0000000108d3ac0b std::__1::__function::__func<WebCore::ScriptController::setupModuleScriptHandlers(WebCore::LoadableModuleScript&, JSC::JSInternalPromise&, WebCore::DOMWrapperWorld&)::$_0, std::__1::allocator<WebCore::ScriptController::setupModuleScriptHandlers(WebCore::LoadableModuleScript&, JSC::JSInternalPromise&, WebCore::DOMWrapperWorld&)::$_0>, long long (JSC::ExecState*)>::operator()(JSC::ExecState*&&) + 171 (RefPtr.h:44) 22 com.apple.JavaScriptCore 0x000000010cb1f3c7 JSC::runStdFunction(JSC::ExecState*) + 39 (JSNativeStdFunction.cpp:64) 23 ??? 0x00005beabc801178 0 + 101063742984568 24 ??? 0x00005beabc8c4fb0 0 + 101063743786928 25 com.apple.JavaScriptCore 0x000000010c1868fa vmEntryToJavaScript + 304 (LowLevelInterpreter64.asm:259) 26 com.apple.JavaScriptCore 0x000000010c89a303 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 147 (JITCode.cpp:82) 27 com.apple.JavaScriptCore 0x000000010c866fbb JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 539 (Interpreter.cpp:1000) 28 com.apple.JavaScriptCore 0x000000010ca52e1f JSC::profiledCall(JSC::ExecState*, JSC::ProfilingReason, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 175 (CallData.cpp:41) 29 com.apple.JavaScriptCore 0x000000010cb15065 JSC::JSJobMicrotask::run(JSC::ExecState*) + 485 (VM.h:803) 30 com.apple.WebCore 0x0000000108d03329 WebCore::JSDOMWindowMicrotaskCallback::call() + 121 (JSMainThreadExecState.h:134) 31 com.apple.WebCore 0x0000000108ef6b4e WebCore::ActiveDOMCallbackMicrotask::run() + 46 (Function.h:56) 32 com.apple.WebCore 0x0000000108f70ada WebCore::MicrotaskQueue::performMicrotaskCheckpoint() + 138 (Microtasks.cpp:84) 33 com.apple.WebCore 0x00000001093c0ce0 WebCore::ThreadTimers::sharedTimerFiredInternal() + 176 (ThreadTimers.cpp:121) 34 com.apple.WebCore 0x000000010940091f WebCore::timerFired(__CFRunLoopTimer*, void*) + 31 (MainThreadSharedTimerCF.cpp:75) 35 com.apple.CoreFoundation 0x00007fff3f56fdd4 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 20 36 com.apple.CoreFoundation 0x00007fff3f56fa47 __CFRunLoopDoTimer + 1095 37 com.apple.CoreFoundation 0x00007fff3f56f54a __CFRunLoopDoTimers + 346 38 com.apple.CoreFoundation 0x00007fff3f566b4b __CFRunLoopRun + 2427 39 com.apple.CoreFoundation 0x00007fff3f565f43 CFRunLoopRunSpecific + 483 40 com.apple.HIToolbox 0x00007fff3e87de26 RunCurrentEventLoopInMode + 286 41 com.apple.HIToolbox 0x00007fff3e87db96 ReceiveNextEventCommon + 613 42 com.apple.HIToolbox 0x00007fff3e87d914 _BlockUntilNextEventMatchingListInModeWithFilter + 64 43 com.apple.AppKit 0x00007fff3cb48f5f _DPSNextEvent + 2085 44 com.apple.AppKit 0x00007fff3d2deb4c -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 3044 45 com.apple.AppKit 0x00007fff3cb3dd6d -[NSApplication run] + 764 46 com.apple.AppKit 0x00007fff3cb0cf1a NSApplicationMain + 804 47 libxpc.dylib 0x00007fff672ac42f _xpc_objc_main + 580 48 libxpc.dylib 0x00007fff672ab082 xpc_main + 417 49 com.apple.WebKit.WebContent 0x00000001070ad6a1 main + 490 (XPCServiceMain.mm:122) 50 libdyld.dylib 0x00007fff66fdf115 start + 1
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2018-01-24 17:34:14 PST
<rdar://problem/36847814>
Saam Barati
Comment 2 2018-01-24 17:43:01 PST
What's the crash? SEGV? If so, on what address?
Yusuke Suzuki
Comment 3 2018-01-24 18:49:26 PST
I think this is reproduced with bug 181980, I'm now investigating.
Ryosuke Niwa
Comment 4 2018-01-25 20:17:17 PST
*** This bug has been marked as a duplicate of bug 181980 ***
Note You need to log in before you can comment on or make changes to this bug.