Bug 249673 – REGRESSION(257982@main) [ iOS ] "ASSERTION FAILED: handleArray.size()... /WebProcessProxyCocoa.mm(253) : void WebKit::WebProcessProxy::unblockAccessibilityServerIfNeeded()\n1

• Status: RESOLVED
• Resolution: FIXED
• Component: WebKit Misc.

[Robert Jenner]

We have over 1900 API-tests are are crashing/ hitting the following assert on ALL debug iOS platforms:

"ASSERTION FAILED: handleArray.size() == 2\n/Volumes/Data/worker/Apple-iOS-16-Simulator-Debug-Build/build/Source/WebKit/UIProcess/Cocoa/WebProcessProxyCocoa.mm(253) : void WebKit::WebProcessProxy::unblockAccessibilityServerIfNeeded()\n1   0x12339ea49 WTFCrash\n2   0x1425a3ebb WTFCrashWithInfo(int, char const*, char const*, int)\n3   0x143b98f08 WebKit::WebProcessProxy::unblockAccessibilityServerIfNeeded()\n4   0x144243068 WebKit::WebProcessProxy::didFinishLaunching(WebKit::ProcessLauncher*, IPC::Connection::Identifier)\n5   0x142c2e1a7 WebKit::ProcessLauncher::didFinishLaunchingProcess(int, IPC::Connection::Identifier)\n6   0x143c51e29 invocation function for block in WebKit::ProcessLauncher::launchProcess()\n7   0x1194a0ea8 _xpc_connection_reply_callout\n8   0x119495ff5 _xpc_connection_call_reply_async\n9   0x1171a3aa0 _dispatch_client_callout3\n10  0x1171c375e _dispatch_mach_msg_async_reply_invoke\n11  0x1171b31e9 _dispatch_main_queue_drain\n12  0x1171b2de4 _dispatch_main_queue_callback_4CF\n13  0x118c0a9f7 __CFRUNLOOP_IS_SERVICING_THE_MAIN_DISPATCH_QUEUE__\n14  0x118c053c6 __CFRunLoopRun\n15  0x118c04637 CFRunLoopRunSpecific\n16  0x11cea39fc -[NSRunLoop(NSRunLoop) runMode:beforeDate:]\n17  0x1107c84b3 TestWebKitAPI::Util::run(bool*)\n18  0x1107b6d73 -[TestNavigationDelegate waitForDidFinishNavigation]\n19  0x1107b8702 -[WKWebView(TestWebKitAPIExtras) _test_waitForDidFinishNavigation]\n20  0x1107ba6f2 -[WKWebView(TestWebKitAPI) synchronouslyLoadHTMLString:baseURL:]\n21  0x1107ba777 -[WKWebView(TestWebKitAPI) synchronouslyLoadHTMLString:]\n22  0x11079705a iOSMouseSupport_TrackButtonMaskFromTouchStart_Test::TestBody()\n23  0x11086597b void testing::internal::HandleSehExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*)\n24  0x11083c48a void testing::internal::HandleExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*)\n25  0x11083c3d3 testing::Test::Run()\n26  0x11083d411 testing::TestInfo::Run()\n27  0x11083e494 testing::TestSuite::Run()\n28  0x11084cb8c testing::internal::UnitTestImpl::RunAllTests()\n29  0x110869d2b bool testing::internal::HandleSehExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*)\n30  0x11084c56a bool testing::internal::HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*)\n31  0x11084c455 testing::UnitTest::Run()\nChild process terminated with signal 11: Segmentation fault\n"
        },
        {


HISTORY:
https://results.webkit.org/suites?platform=ios

[Robert Jenner]

I was able to reproduce the assert running tests as follows:

run-api-tests --verbose --no-build --ios-simulator TestWebKitAPI.iOSMouseSupport.TrackButtonMaskFromTouchStart   


I was able to see in the history that the last passes occurred at 257978@main and the first crashes/asserts appeared at 257982@main.

I was able to reproduce the assert/crashes at 257984@main, but not at 257981@main. While there is a gap in built products for testing, our history indicates that the first time this occurred was 257982@main. So with everything passing at 257981@main it appears that 257982@main is our regression point.

[Radar WebKit Bug Importer]

<rdar://problem/103568827>

[Robert Jenner]

Reverted the original commit here:

https://commits.webkit.org/258162@main

[Alexey Proskuryakov]

Marked RESOLVED/FIXED per the above.