Bug 239095 – REGRESSION (249029@main): http/wpt/cache-storage/cache-storage-networkprocess-crash.html is a flaky CRASH with ASSERTION FAILED: m_pageMap.isEmpty()

• Status: RESOLVED
• Resolution: FIXED
• Component: Service Workers

[Truitt Savell]

Created attachment 457298 [details]
crash log

Hardware:     	Macmini9,1
Architecture: 	arm64
OS:           	Monterey E
Style:        	debug
Flavor        	wk2
SDK:          	None
-----------------------------
Most recent failures:
249029: https://commits.webkit.org/249029@main
-----------------------------
Last success:
249027: https://commits.webkit.org/249027@main

http/wpt/cache-storage/cache-storage-networkprocess-crash.html

History:
https://results.webkit.org/?suite=layout-tests&test=http%2Fwpt%2Fcache-storage%2Fcache-storage-networkprocess-crash.html

log:
stderr:
MessageReceiveQueueMap::addImpl - adding duplicate any id receiver 20
ASSERTION FAILED: m_pageMap.isEmpty()
/Volumes/Data/worker/monterey-debug/build/Source/WebKit/WebProcess/WebProcess.cpp(877) : virtual bool WebKit::WebProcess::shouldTerminate()
1   0x152bd9ab4 WTFCrash
2   0x12bb55a60 std::__1::optional<std::__1::tuple<WTF::ObjectIdentifier<WebCore::PageIdentifierType>, WebKit::WebWheelEvent, WebCore::RectEdges<bool> > > IPC::Decoder::decode<std::__1::tuple<WTF::ObjectIdentifier<WebCore::PageIdentifierType>, WebKit::WebWheelEvent, WebCore::RectEdges<bool> > >()
3   0x12daae81c WebKit::WebProcess::shouldTerminate()
4   0x12d0694f0 WebKit::AuxiliaryProcess::enableTermination()

results:

[Radar WebKit Bug Importer]

<rdar://problem/91595784>

[Truitt Savell]

https://github.com/WebKit/WebKit/commit/47d33678ceceb0b0d38b8fda2d6ad7c7ba5aa266

this commit is close to the regression point for this test and seems like I could be related.

[Truitt Savell]

Marked this test as failing while it is investigated.

[Truitt Savell]

https://trac.webkit.org/changeset/292739/webkit

[Ryan Haddad]

(In reply to Truitt Savell from comment #2)
> https://github.com/WebKit/WebKit/commit/
> 47d33678ceceb0b0d38b8fda2d6ad7c7ba5aa266
> 
> this commit is close to the regression point for this test and seems like I
> could be related.

https://commits.webkit.org/249022@main seems slightly more related, but I haven't tried to repro.

[Alexey Proskuryakov]

The full crash log shows that it's in service worker code, so I'm going with https://commits.webkit.org/249029@main

[youenn fablet]

It seems we are now calling WebSWContextManagerConnection::close multiple times, which  we should probably not.

[youenn fablet]

Created attachment 457537 [details]
Patch

[youenn fablet]

Created attachment 457596 [details]
Patch

[EWS]

Committed r292869 (249640@main): <https://commits.webkit.org/249640@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 457537 [details].