Bug 251187 – [ BigSur+ & iOS wk2 Debug ] imported/w3c/web-platform-tests/fetch/api/redirect/redirect-back-to-original-origin.any.html is a flaky crash.

• Status: RESOLVED
• Resolution: DUPLICATE
• Component: New Bugs

[Bri Harris]

Created attachment 464660 [details]
Crash Log

imported/w3c/web-platform-tests/fetch/api/redirect/redirect-back-to-original-origin.any.html 

is a flaky crash on iOS 16 Debug as well as Big Sur and later macOS WebKit 2 Debug platforms. 

HISTORY:

https://results.webkit.org/?suite=layout-tests&test=imported%2Fw3c%2Fweb-platform-tests%2Ffetch%2Fapi%2Fredirect%2Fredirect-back-to-original-origin.any.html&limit=50000


Crash Log will be attached. 


Test is flaky and I was not able to replicate on iOS or macOS. I attempted to reproduce on iOS and macOS as follows:

run-webkit-test --iOS-simulator imported/w3c/web-platform-tests/fetch/api/redirect/redirect-back-to-original-origin.any.html --iterations 100 --force
run-webkit-test imported/w3c/web-platform-tests/fetch/api/redirect/redirect-back-to-original-origin.any.html --iterations 100 --force


Crash Log Text:

stderr:
ASSERTION FAILED: m_normalWorld->hasOneRef()
bindings/js/WebCoreJSClientData.cpp(140) : virtual WebCore::JSVMClientData::~JSVMClientData()
1   0x14670d094 WTFCrash
2   0x10867c170 WTFCrashWithInfo(int, char const*, char const*, int)
3   0x10b0bce4c WebCore::JSVMClientData::~JSVMClientData()
4   0x10b0bd1a8 WebCore::JSVMClientData::~JSVMClientData()
5   0x10b0bd1d4 WebCore::JSVMClientData::~JSVMClientData()
6   0x14882bdb4 JSC::VM::~VM()
7   0x14882d1f0 JSC::VM::~VM()
8   0x146f9131c WTF::ThreadSafeRefCounted<JSC::VM, (WTF::DestructionThread)0>::deref() const::'lambda'()::operator()() const
9   0x148858058 WTF::ThreadSafeRefCounted<JSC::VM, (WTF::DestructionThread)0>::deref() const
10  0x148858004 WTF::DefaultRefDerefTraits<JSC::VM>::derefIfNotNull(JSC::VM*)
11  0x14882d6ec WTF::RefPtr<JSC::VM, WTF::RawPtrTraits<JSC::VM>, WTF::DefaultRefDerefTraits<JSC::VM> >::operator=(std::nullptr_t)
12  0x148538240 JSC::JSLockHolder::~JSLockHolder()
13  0x1485382b0 JSC::JSLockHolder::~JSLockHolder()
14  0x10df9cb4c WebCore::WorkerOrWorkletScriptController::~WorkerOrWorkletScriptController()
15  0x10df9cbf0 WebCore::WorkerOrWorkletScriptController::~WorkerOrWorkletScriptController()
16  0x10dfcaf54 std::__1::default_delete<WebCore::WorkerOrWorkletScriptController>::operator()(WebCore::WorkerOrWorkletScriptController*) const
17  0x10dfcaed0 std::__1::unique_ptr<WebCore::WorkerOrWorkletScriptController, std::__1::default_delete<WebCore::WorkerOrWorkletScriptController> >::reset(WebCore::WorkerOrWorkletScriptController*)
18  0x10df9c2c0 std::__1::unique_ptr<WebCore::WorkerOrWorkletScriptController, std::__1::default_delete<WebCore::WorkerOrWorkletScriptController> >::operator=(std::nullptr_t)
19  0x10df9c290 WebCore::WorkerOrWorkletGlobalScope::clearScript()
20  0x10dff34fc WebCore::WorkerOrWorkletThread::stop(WTF::Function<void ()>&&)::$_6::operator()(WebCore::ScriptExecutionContext&) const::'lambda'(WebCore::ScriptExecutionContext&)::operator()(WebCore::ScriptExecutionContext&) const
21  0x10dff349c WTF::Detail::CallableWrapper<WebCore::WorkerOrWorkletThread::stop(WTF::Function<void ()>&&)::$_6::operator()(WebCore::ScriptExecutionContext&) const::'lambda'(WebCore::ScriptExecutionContext&), void, WebCore::ScriptExecutionContext&>::call(WebCore::ScriptExecutionContext&)
22  0x10ac404f0 WTF::Function<void (WebCore::ScriptExecutionContext&)>::operator()(WebCore::ScriptExecutionContext&) const
23  0x10ac2b2b8 WebCore::ScriptExecutionContext::Task::performTask(WebCore::ScriptExecutionContext&)
24  0x10dfd6a50 WebCore::WorkerDedicatedRunLoop::Task::performTask(WebCore::WorkerOrWorkletGlobalScope*)
25  0x10dfd61f0 WebCore::WorkerDedicatedRunLoop::runCleanupTasks(WebCore::WorkerOrWorkletGlobalScope*)
26  0x10dfd45c0 WebCore::WorkerDedicatedRunLoop::run(WebCore::WorkerOrWorkletGlobalScope*)
27  0x10dfd4528 WebCore::WorkerOrWorkletThread::runEventLoop()
28  0x10e088780 WebCore::ServiceWorkerThread::runEventLoop()
29  0x10dfd48c4 WebCore::WorkerOrWorkletThread::workerOrWorkletThread()
30  0x10e001f34 WebCore::WorkerThread::createThread()::$_17::operator()() const
31  0x10e001eb8 WTF::Detail::CallableWrapper<WebCore::WorkerThread::createThread()::$_17, void>::call()
com.apple.WebKit.WebContent.Development terminated (pid 1464) for reason: crash
LEAK: 1 WebPageProxy

[Radar WebKit Bug Importer]

<rdar://problem/104674776>

[Bri Harris]

Upon taking a look at the history, I noticed the first macOS crash at 256749@main and the first iOS crash at 257175@main.

[Bri Harris]

Pull request: https://github.com/WebKit/WebKit/pull/9164

[EWS]

Committed 259399@main (94d463c4ddbb): <https://commits.webkit.org/259399@main>

Reviewed commits have been landed. Closing PR #9164 and removing active labels.

[Bri Harris]

Closed due to test gardening. Reopened.

[youenn fablet]

Crash is related to worker stuff.
imported/w3c/web-platform-tests/fetch/api/redirect/redirect-back-to-original-origin.any.html is not so it is probably one of the earlier test on the same WebKitTestRunner that is causing the issue.
Looking at the test list, it might be imported/w3c/web-platform-tests/fetch/api/abort/serviceworker-intercepted.https.html, imported/w3c/web-platform-tests/fetch/api/abort/serviceworker-intercepted.https.html or imported/w3c/web-platform-tests/fetch/api/abort/request.any.sharedworker.html

[Bri Harris]

This is a duplicate of https://bugs.webkit.org/show_bug.cgi?id=246022 
but will not allow me to mark it as such.

[Ryan Haddad]

*** This bug has been marked as a duplicate of bug 246022 ***