RESOLVED DUPLICATE of bug 105870 208061
[ Mojave ] webaudio/audioparam-exponentialRampToValueAtTime.html is flaky crashing. 
https://bugs.webkit.org/show_bug.cgi?id=208061
Summary [ Mojave ] webaudio/audioparam-exponentialRampToValueAtTime.html is flaky cra...
Jason Lawrence
Reported 2020-02-21 09:17:59 PST
webaudio/audioparam-exponentialRampToValueAtTime.html Description: This test is flaky crashing throughout the visible history on Mojave Debug. r256085 is the oldest crash log that I'm able to load. History: https://results.webkit.org/?suite=layout-tests&test=webaudio%2Faudioparam-exponentialRampToValueAtTime.html&limit=50000&style=debug&platform=mac&version_name=Mojave Crash log: No crash log found for com.apple.WebKit.WebContent.Development:46343. stdout: stderr: ASSERTION FAILED: m_finishedNodes.isEmpty() ./Modules/webaudio/AudioContext.cpp(205) : virtual WebCore::AudioContext::~AudioContext() 1 0x7bc8e19f9 WTFCrash 2 0x7a000757b WTFCrashWithInfo(int, char const*, char const*, int) 3 0x7a1df887c WebCore::AudioContext::~AudioContext() 4 0x7a1e6f735 WebCore::OfflineAudioContext::~OfflineAudioContext() 5 0x7a1e6f565 WebCore::OfflineAudioContext::~OfflineAudioContext() 6 0x7a1e6f589 WebCore::OfflineAudioContext::~OfflineAudioContext() 7 0x7a058d682 WTF::ThreadSafeRefCounted<WebCore::AudioContext, (WTF::DestructionThread)0>::deref() const::'lambda'()::operator()() const 8 0x7a058d63d WTF::ThreadSafeRefCounted<WebCore::AudioContext, (WTF::DestructionThread)0>::deref() const 9 0x7a058d9b3 WTF::Ref<WebCore::AudioContext, WTF::DumbPtrTraits<WebCore::AudioContext> >::~Ref() 10 0x7a058d8e5 WTF::Ref<WebCore::AudioContext, WTF::DumbPtrTraits<WebCore::AudioContext> >::~Ref() 11 0x7a1df9622 WebCore::AudioContext::deleteMarkedNodes() 12 0x7a1e3519e WebCore::AudioNode::deref(WebCore::AudioNode::RefType) 13 0x7a1e01327 WebCore::AudioNode::derefEventTarget() 14 0x7a04ebd56 WebCore::EventTarget::deref() 15 0x7a04ebd0f WTF::Ref<WebCore::EventTarget, WTF::DumbPtrTraits<WebCore::EventTarget> >::~Ref() 16 0x7a04ebc65 WTF::Ref<WebCore::EventTarget, WTF::DumbPtrTraits<WebCore::EventTarget> >::~Ref() 17 0x7a098cb39 WebCore::JSDOMWrapper<WebCore::EventTarget>::~JSDOMWrapper() 18 0x7a098cb15 WebCore::JSEventTarget::~JSEventTarget() 19 0x7a093f2f5 WebCore::JSEventTarget::~JSEventTarget() 20 0x7a08fef3d WebCore::JSEventTarget::destroy(JSC::JSCell*) 21 0x7be06df6a JSC::JSDestructibleObjectDestroyFunc::operator()(JSC::VM&, JSC::JSCell*) const 22 0x7be07d8b5 void JSC::MarkedBlock::Handle::specializedSweep<false, (JSC::MarkedBlock::Handle::EmptyMode)0, (JSC::MarkedBlock::Handle::SweepMode)0, (JSC::MarkedBlock::Handle::SweepDestructionMode)0, (JSC::MarkedBlock::Handle::ScribbleMode)0, (JSC::MarkedBlock::Handle::NewlyAllocatedMode)0, (JSC::MarkedBlock::Handle::MarksMode)0, JSC::JSDestructibleObjectDestroyFunc>(JSC::FreeList*, JSC::MarkedBlock::Handle::EmptyMode, JSC::MarkedBlock::Handle::SweepMode, JSC::MarkedBlock::Handle::SweepDestructionMode, JSC::MarkedBlock::Handle::ScribbleMode, JSC::MarkedBlock::Handle::NewlyAllocatedMode, JSC::MarkedBlock::Handle::MarksMode, JSC::JSDestructibleObjectDestroyFunc const&)::'lambda'(void*)::operator()(void*) const 23 0x7be07d924 void JSC::MarkedBlock::Handle::specializedSweep<false, (JSC::MarkedBlock::Handle::EmptyMode)0, (JSC::MarkedBlock::Handle::SweepMode)0, (JSC::MarkedBlock::Handle::SweepDestructionMode)0, (JSC::MarkedBlock::Handle::ScribbleMode)0, (JSC::MarkedBlock::Handle::NewlyAllocatedMode)0, (JSC::MarkedBlock::Handle::MarksMode)0, JSC::JSDestructibleObjectDestroyFunc>(JSC::FreeList*, JSC::MarkedBlock::Handle::EmptyMode, JSC::MarkedBlock::Handle::SweepMode, JSC::MarkedBlock::Handle::SweepDestructionMode, JSC::MarkedBlock::Handle::ScribbleMode, JSC::MarkedBlock::Handle::NewlyAllocatedMode, JSC::MarkedBlock::Handle::MarksMode, JSC::JSDestructibleObjectDestroyFunc const&)::'lambda'(unsigned long)::operator()(unsigned long) const 24 0x7be07824b void JSC::MarkedBlock::Handle::specializedSweep<false, (JSC::MarkedBlock::Handle::EmptyMode)0, (JSC::MarkedBlock::Handle::SweepMode)0, (JSC::MarkedBlock::Handle::SweepDestructionMode)0, (JSC::MarkedBlock::Handle::ScribbleMode)0, (JSC::MarkedBlock::Handle::NewlyAllocatedMode)0, (JSC::MarkedBlock::Handle::MarksMode)0, JSC::JSDestructibleObjectDestroyFunc>(JSC::FreeList*, JSC::MarkedBlock::Handle::EmptyMode, JSC::MarkedBlock::Handle::SweepMode, JSC::MarkedBlock::Handle::SweepDestructionMode, JSC::MarkedBlock::Handle::ScribbleMode, JSC::MarkedBlock::Handle::NewlyAllocatedMode, JSC::MarkedBlock::Handle::MarksMode, JSC::JSDestructibleObjectDestroyFunc const&) 25 0x7be06df02 void JSC::MarkedBlock::Handle::finishSweepKnowingHeapCellType<JSC::JSDestructibleObjectDestroyFunc>(JSC::FreeList*, JSC::JSDestructibleObjectDestroyFunc const&) 26 0x7be06dde5 JSC::JSDestructibleObjectHeapCellType::finishSweep(JSC::MarkedBlock::Handle&, JSC::FreeList*) 27 0x7bdab0c45 JSC::Subspace::finishSweep(JSC::MarkedBlock::Handle&, JSC::FreeList*) 28 0x7bda90310 JSC::MarkedBlock::Handle::sweep(JSC::FreeList*) 29 0x7bda5ab78 JSC::IncrementalSweeper::sweepNextBlock(JSC::VM&) 30 0x7bda5aa2a JSC::IncrementalSweeper::doSweep(JSC::VM&, WTF::MonotonicTime) 31 0x7bda5a9ec JSC::IncrementalSweeper::doWork(JSC::VM&) LEAK: 1 WebPageProxy
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2020-02-21 09:18:30 PST
<rdar://problem/59670347>
Jason Lawrence
Comment 2 2020-02-21 09:26:51 PST
I have marked this test as crashing while the issue is investigated. https://trac.webkit.org/changeset/257140/webkit
Alexey Proskuryakov
Comment 3 2020-02-22 17:48:37 PST
*** This bug has been marked as a duplicate of bug 105870 ***
Note You need to log in before you can comment on or make changes to this bug.