Bug 214322 – ASSERTION FAILED: m_wrapper on http/tests/workers/worker-importScripts-banned-mimetype.html

• Status: NEW
• Component: DOM

[Hector Lopez]

http/tests/workers/worker-importScripts-banned-mimetype.html

It looks like this test is a flakey crash. Seeing it sporadically through history.

History:
https://results.webkit.org/?suite=layout-tests&test=http%2Ftests%2Fworkers%2Fworker-importScripts-banned-mimetype.html

Crash log:
CoreSimulator 704.12 - Device: Managed 0 (55D2C54D-A8DB-485B-8ABB-513802BE7C41) - Runtime: iOS 13.4 (17E255) - DeviceType: iPhone SE
CRASHING TEST: /workers/worker-importScripts-banned-mimetype.html

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore      	0x000000046d55de5e WTFCrash + 14 (Assertions.cpp:295)
1   com.apple.WebCore             	0x0000000472d3c3eb WTFCrashWithInfo(int, char const*, char const*, int) + 27
2   com.apple.WebCore             	0x0000000474ebde5f WebCore::JSEventListener::ensureJSFunction(WebCore::ScriptExecutionContext&) const + 639 (JSEventListener.h:125)
3   com.apple.WebCore             	0x0000000474ebd1bd WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext&, WebCore::Event&) + 205 (JSEventListener.cpp:113)
4   com.apple.WebCore             	0x00000004755ab127 WebCore::EventTarget::innerInvokeEventListeners(WebCore::Event&, WTF::Vector<WTF::RefPtr<WebCore::RegisteredEventListener, WTF::DumbPtrTraits<WebCore::RegisteredEventListener> >, 1ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>, WebCore::EventTarget::EventInvokePhase) + 1063 (EventTarget.cpp:342)
5   com.apple.WebCore             	0x00000004755a7370 WebCore::EventTarget::fireEventListeners(WebCore::Event&, WebCore::EventTarget::EventInvokePhase) + 720 (EventTarget.cpp:273)

[Radar WebKit Bug Importer]

<rdar://problem/65563200>

[Hector Lopez]

Created attachment 404285 [details]
Patch

[Truitt Savell]

Comment on attachment 404285 [details]
Patch

Clearing flags on attachment: 404285

Committed r264375: <https://trac.webkit.org/changeset/264375>

[Ryan Haddad]

Created attachment 404286 [details]
crash log

ASSERTION FAILED: m_wrapper
./bindings/js/JSEventListener.h(125) : JSC::JSObject *WebCore::JSEventListener::ensureJSFunction(WebCore::ScriptExecutionContext &) const

[Alexey Proskuryakov]

It would be useful to find a repro case for this I think.

I was able to reproduce the crash on Big Sur arm64 (Remote machine) using:

run-webkit-tests --iterations 100 --exit-after-n-failures 1 --exit-after-n-crashes-or-timeouts 1 http/tests/workers/worker-importScripts-banned-mimetype.html --debug

However, no crash log was obtained with this crash.