Bug 229244 - [Mac Debug] ASSERTION FAILED: node->enumeratorMetadata() == JSPropertyNameEnumerator::IndexedMode under JSC::DFG::AbstractInterpreter
Summary: [Mac Debug] ASSERTION FAILED: node->enumeratorMetadata() == JSPropertyNameEnu...
Status: RESOLVED CONFIGURATION CHANGED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Sihui Liu
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2021-08-18 11:59 PDT by Eric Hutchison
Modified: 2022-03-07 15:09 PST (History)
7 users (show)

See Also:

Attachments
Crash Log (146.72 KB, text/plain)
2021-08-18 11:59 PDT, Eric Hutchison 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Eric Hutchison 2021-08-18 11:59:05 PDT 
Created attachment 435787 [details]
Crash Log

imported/w3c/web-platform-tests/IndexedDB/key-generators/reading-autoincrement-indexes-cursors.any.worker.html

is a flaky crash on Mac Debug.

History: https://results.webkit.org/?suite=layout-tests&test=imported%2Fw3c%2Fweb-platform-tests%2FIndexedDB%2Fkey-generators%2Freading-autoincrement-indexes-cursors.any.worker.html

Results: https://build.webkit.org/results/Apple-BigSur-Debug-AppleSilicon-WK1-Tests/r281175%20(3110)/results.html

Crash Log: Attached
Comment 1 Radar WebKit Bug Importer 2021-08-18 11:59:47 PDT 
<rdar://problem/82087869>
Comment 2 Eric Hutchison 2021-08-18 12:05:47 PDT 
Updated test expectations at http://trac.webkit.org/changeset/281205/webkit.
Comment 3 Ryan Haddad 2021-08-18 12:44:52 PDT 
ASSERTION FAILED: node->enumeratorMetadata() == JSPropertyNameEnumerator::IndexedMode
/Volumes/Data/worker/bigsur-debug/build/Source/JavaScriptCore/dfg/DFGAbstractInterpreterInlines.h(4284) : bool JSC::DFG::AbstractInterpreter<JSC::DFG::InPlaceAbstractState>::executeEffects(unsigned int, JSC::DFG::Node *) [AbstractStateType = JSC::DFG::InPlaceAbstractState]
1   0x101f4ebcc WTFCrash
2   0x103214470 JSC::CallFrame* WTF::bitwise_cast<JSC::CallFrame*, void*>(void*)
3   0x102438b04 JSC::DFG::AbstractInterpreter<JSC::DFG::InPlaceAbstractState>::executeEffects(unsigned int, JSC::DFG::Node*)
4   0x103005c54 JSC::DFG::AbstractInterpreter<JSC::DFG::InPlaceAbstractState>::execute(unsigned int)
5   0x103004400 JSC::DFG::CFAPhase::performBlockCFA(JSC::DFG::BasicBlock*)
6   0x103003f44 JSC::DFG::CFAPhase::performForwardCFA()
7   0x103003c08 JSC::DFG::CFAPhase::run()
8   0x10300324c bool JSC::DFG::runAndLog<JSC::DFG::CFAPhase>(JSC::DFG::CFAPhase&)
9   0x102fcafe4 bool JSC::DFG::runPhase<JSC::DFG::CFAPhase>(JSC::DFG::Graph&)
10  0x102fcafa4 JSC::DFG::performCFA(JSC::DFG::Graph&)
11  0x103249640 JSC::DFG::Plan::compileInThreadImpl()
12  0x1037b40c0 JSC::JITPlan::compileInThread(JSC::JITWorklistThread*)
13  0x103849f30 JSC::JITWorklistThread::work()
14  0x101f63b18 WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0::operator()() const
15  0x101f636fc WTF::Detail::CallableWrapper<WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0, void>::call()
16  0x101f78aa0 WTF::Function<void ()>::operator()() const
17  0x1020492ec WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*)
18  0x102057b08 WTF::wtfThreadEntryPoint(void*)
19  0x18aa3b878 _pthread_start
20  0x18aa365e0 thread_start
Comment 4 Ryan Haddad 2021-08-18 12:45:07 PDT 
Maybe related to https://trac.webkit.org/changeset/280760/webkit?
Comment 6 Mark Lam 2022-03-07 15:09:25 PST 
Removed TestExpectation in r290959: <http://trac.webkit.org/r290959>.