Bug 274549 – REGRESSION(279097@main): [Win GTK WPE] ASSERTION FAILED: isASCII(characters[i]) in WTF::StringLiterals::operator""_span under WebCore::ICOImageDecoder::imageTypeAtIndex

• Status: RESOLVED
• Resolution: FIXED
• Component: Images

[Fujii Hironori]

After 279097@main (bug#274401), Windows, GTK and WPE Debug is crashing for the following tests.

Regressions: Unexpected crashes (5)
  fast/events/mouse-cursor-image-set.html [ Crash ]
  fast/events/mouse-cursor-multiframecur.html [ Crash ]
  fast/events/mouse-cursor.html [ Crash ]
  fast/images/icon-decoding.html [ Crash ]
  http/tests/misc/favicon-as-image.html [ Crash ]

ASSERTION FAILED: isASCII(characters[i])
C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WTF\Headers\wtf/text/ASCIILiteral.h(146) : std::span<const LChar> WTF::operator""_span(const char *, size_t)

00 00000041`3adf9170 00007ffc`f23c52da WebCore!WTF::StringLiterals::operator""_span(char * characters = 0x00007ffc`f7155945 "???", unsigned int64 n = 4)+0x78 [C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WTF\Headers\wtf\text\ASCIILiteral.h @ 146]
01 00000041`3adf91d0 00007ffc`f23c48be WebCore!WebCore::ICOImageDecoder::imageTypeAtIndex(unsigned int64 index = 0)+0x11a [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\image-decoders\ico\ICOImageDecoder.cpp @ 320]
02 00000041`3adf9270 00007ffc`f23c4422 WebCore!WebCore::ICOImageDecoder::decodeAtIndex(unsigned int64 index = 0)+0xbe [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\image-decoders\ico\ICOImageDecoder.cpp @ 190]
03 00000041`3adf9350 00007ffc`f23c45b7 WebCore!WebCore::ICOImageDecoder::decode(unsigned int64 index = 0, bool onlySize = false, bool allDataReceived = true)+0x72 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\image-decoders\ico\ICOImageDecoder.cpp @ 159]
04 00000041`3adf93a0 00007ffc`f23b0d3f WebCore!WebCore::ICOImageDecoder::frameBufferAtIndex(unsigned int64 index = 0)+0x97 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\image-decoders\ico\ICOImageDecoder.cpp @ 103]
05 00000041`3adf9400 00007ffc`f6081986 WebCore!WebCore::ScalableImageDecoder::createFrameImageAtIndex(unsigned int64 index = 0)+0xaf [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\image-decoders\ScalableImageDecoder.cpp @ 249]
06 00000041`3adf9490 00007ffc`f6081e6d WebCore!WebCore::BitmapImageSource::nativeImageAtIndexCacheIfNeeded(unsigned int index = 0, WebCore::SubsamplingLevel subsamplingLevel = First (0n0), class WebCore::DecodingOptions * options = 0x00000041`3adf97b0)+0x216 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\graphics\BitmapImageSource.cpp @ 555]
07 00000041`3adf95c0 00007ffc`f6081efa WebCore!WebCore::BitmapImageSource::nativeImageAtIndexForDrawing(unsigned int index = 0, WebCore::SubsamplingLevel subsamplingLevel = First (0n0), class WebCore::DecodingOptions * options = 0x00000041`3adf97b0)+0x9d [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\graphics\BitmapImageSource.cpp @ 589]
08 00000041`3adf9620 00007ffc`f607e194 WebCore!WebCore::BitmapImageSource::currentNativeImageForDrawing(WebCore::SubsamplingLevel subsamplingLevel = First (0n0), class WebCore::DecodingOptions * options = 0x00000041`3adf97b0)+0x7a [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\graphics\BitmapImageSource.cpp @ 594]
09 00000041`3adf96a0 00007ffc`f618704b WebCore!WebCore::BitmapImage::draw(class WebCore::GraphicsContext * context = 0x00000232`978aeb90, class WebCore::FloatRect * destinationRect = 0x00000041`3adf9948, class WebCore::FloatRect * sourceRect = 0x00000041`3adf996c, struct WebCore::ImagePaintingOptions * options = 0x00000041`3adf98ad)+0x2e4 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\graphics\BitmapImage.cpp @ 101]
0a 00000041`3adf9840 00007ffc`f6186e73 WebCore!WebCore::GraphicsContext::drawImage(class WebCore::Image * image = 0x00000232`978a2500, class WebCore::FloatRect * destination = 0x00000041`3adf9948, class WebCore::FloatRect * source = 0x00000041`3adf996c, struct WebCore::ImagePaintingOptions * options = 0x00000041`3adf997d)+0x9b [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\graphics\GraphicsContext.cpp @ 319]
0b 00000041`3adf98d0 00007ffc`f61b0c5f WebCore!WebCore::GraphicsContext::drawImage(class WebCore::Image * image = 0x00000232`978a2500, class WebCore::FloatPoint * destination = 0x00000041`3adf99f8, struct WebCore::ImagePaintingOptions * imagePaintingOptions = 0x00000041`3adf9a15)+0x133 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\graphics\GraphicsContext.cpp @ 307]
0c 00000041`3adf9990 00007ffd`082db1b7 WebCore!WebCore::Image::toShareableBitmap(void)+0x18f [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\graphics\Image.cpp @ 397]
0d 00000041`3adf9a70 00007ffd`0846ffa2 WebKit2!IPC::ArgumentCoder<WebCore::Image,void>::encode(class IPC::Encoder * encoder = 0x00000232`945605a0, class WebCore::Image * instance = 0x00000232`978a2500)+0x37 [C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WebKit\DerivedSources\GeneratedSerializers.cpp @ 43446]
0e 00000041`3adf9ac0 00007ffd`08544cef WebKit2!IPC::Encoder::operator<<<WebCore::Image &>(class WebCore::Image * t = 0x00000232`978a2500)+0x22 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Encoder.h @ 80]
0f 00000041`3adf9b00 00007ffd`08339872 WebKit2!IPC::ArgumentCoder<WTF::Ref<WebCore::Image,WTF::RawPtrTraits<WebCore::Image>,WTF::DefaultRefDerefTraits<WebCore::Image> >,void>::encode<IPC::Encoder,WebCore::Image>(class IPC::Encoder * encoder = 0x00000232`945605a0, class WTF::Ref<WebCore::Image,WTF::RawPtrTraits<WebCore::Image>,WTF::DefaultRefDerefTraits<WebCore::Image> > * object = 0x00000041`3adf9e18)+0x2f [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\ArgumentCoders.h @ 286]
10 00000041`3adf9b40 00007ffd`082da4fd WebKit2!IPC::Encoder::operator<<<const WTF::Ref<WebCore::Image,WTF::RawPtrTraits<WebCore::Image>,WTF::DefaultRefDerefTraits<WebCore::Image> > &>(class WTF::Ref<WebCore::Image,WTF::RawPtrTraits<WebCore::Image>,WTF::DefaultRefDerefTraits<WebCore::Image> > * t = 0x00000041`3adf9e18)+0x22 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Encoder.h @ 80]
11 00000041`3adf9b80 00007ffd`085451b2 WebKit2!IPC::ArgumentCoder<WebCore::Cursor::CustomCursorIPCData,void>::encode(class IPC::Encoder * encoder = 0x00000232`945605a0, struct WebCore::Cursor::CustomCursorIPCData * instance = 0x00000041`3adf9e18)+0x1d [C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WebKit\DerivedSources\GeneratedSerializers.cpp @ 43233]
12 00000041`3adf9bc0 00007ffd`0854517d WebKit2!IPC::Encoder::operator<<<WebCore::Cursor::CustomCursorIPCData>(struct WebCore::Cursor::CustomCursorIPCData * t = 0x00000041`3adf9e18)+0x22 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Encoder.h @ 80]
13 00000041`3adf9c00 00007ffd`08545082 WebKit2!IPC::ArgumentCoder<std::optional<WebCore::Cursor::CustomCursorIPCData>,void>::encode<IPC::Encoder,std::optional<WebCore::Cursor::CustomCursorIPCData> >(class IPC::Encoder * encoder = 0x00000232`945605a0, class std::optional<WebCore::Cursor::CustomCursorIPCData> * optional = 0x00000041`3adf9e18)+0x7d [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\ArgumentCoders.h @ 186]
14 00000041`3adf9c50 00007ffd`08544f62 WebKit2!IPC::Encoder::operator<<<std::optional<WebCore::Cursor::CustomCursorIPCData> >(class std::optional<WebCore::Cursor::CustomCursorIPCData> * t = 0x00000041`3adf9e18)+0x22 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Encoder.h @ 80]
15 00000041`3adf9c90 00007ffd`08544e8d WebKit2!IPC::ArgumentCoder<std::variant<WebCore::PlatformCursorType,std::optional<WebCore::Cursor::CustomCursorIPCData> >,void>::encode<IPC::Encoder,std::variant<WebCore::PlatformCursorType,std::optional<WebCore::Cursor::CustomCursorIPCData> >,0>(class IPC::Encoder * encoder = 0x00000232`945605a0, class std::variant<WebCore::PlatformCursorType,std::optional<WebCore::Cursor::CustomCursorIPCData> > * variant = 0x00000041`3adf9e18, unsigned int64 i = 1)+0x52 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\ArgumentCoders.h @ 735]
16 00000041`3adf9cf0 00007ffd`08544e06 WebKit2!IPC::ArgumentCoder<std::variant<WebCore::PlatformCursorType,std::optional<WebCore::Cursor::CustomCursorIPCData> >,void>::encode<IPC::Encoder,std::variant<WebCore::PlatformCursorType,std::optional<WebCore::Cursor::CustomCursorIPCData> > >(class IPC::Encoder * encoder = 0x00000232`945605a0, class std::variant<WebCore::PlatformCursorType,std::optional<WebCore::Cursor::CustomCursorIPCData> > * variant = 0x00000041`3adf9e18, unsigned int64 i = 1)+0x6d [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\ArgumentCoders.h @ 739]
17 00000041`3adf9d50 00007ffd`08339ba2 WebKit2!IPC::ArgumentCoder<std::variant<WebCore::PlatformCursorType,std::optional<WebCore::Cursor::CustomCursorIPCData> >,void>::encode<IPC::Encoder,std::variant<WebCore::PlatformCursorType,std::optional<WebCore::Cursor::CustomCursorIPCData> > >(class IPC::Encoder * encoder = 0x00000232`945605a0, class std::variant<WebCore::PlatformCursorType,std::optional<WebCore::Cursor::CustomCursorIPCData> > * variant = 0x00000041`3adf9e18)+0x56 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\ArgumentCoders.h @ 725]
18 00000041`3adf9da0 00007ffd`082da765 WebKit2!IPC::Encoder::operator<<<std::variant<WebCore::PlatformCursorType,std::optional<WebCore::Cursor::CustomCursorIPCData> > >(class std::variant<WebCore::PlatformCursorType,std::optional<WebCore::Cursor::CustomCursorIPCData> > * t = 0x00000041`3adf9e18)+0x22 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Encoder.h @ 80]
19 00000041`3adf9de0 00007ffd`095ab5e2 WebKit2!IPC::ArgumentCoder<WebCore::Cursor,void>::encode(class IPC::Encoder * encoder = 0x00000232`945605a0, class WebCore::Cursor * instance = 0x00000232`944f24c0)+0x45 [C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WebKit\DerivedSources\GeneratedSerializers.cpp @ 43268]
1a 00000041`3adf9e50 00007ffd`095ab5b4 WebKit2!IPC::Encoder::operator<<<const WebCore::Cursor &>(class WebCore::Cursor * t = 0x00000232`944f24c0)+0x22 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Encoder.h @ 80]
1b 00000041`3adf9e90 00007ffd`095ab572 WebKit2!IPC::ArgumentCoder<std::tuple<const WebCore::Cursor &>,void>::encode<IPC::Encoder,std::tuple<const WebCore::Cursor &>,0>(class IPC::Encoder * encoder = 0x00000232`945605a0, class std::tuple<const WebCore::Cursor &> * tuple = 0x00000041`3adfa080)+0x34 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\ArgumentCoders.h @ 359]
1c 00000041`3adf9ee0 00007ffd`095ab532 WebKit2!IPC::ArgumentCoder<std::tuple<const WebCore::Cursor &>,void>::encode<IPC::Encoder,std::tuple<const WebCore::Cursor &> >(class IPC::Encoder * encoder = 0x00000232`945605a0, class std::tuple<const WebCore::Cursor &> * tuple = 0x00000041`3adfa080)+0x22 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\ArgumentCoders.h @ 352]
1d 00000041`3adf9f20 00007ffd`095ab4b5 WebKit2!IPC::Encoder::operator<<<std::tuple<const WebCore::Cursor &> >(class std::tuple<const WebCore::Cursor &> * t = 0x00000041`3adfa080)+0x22 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Encoder.h @ 80]
1e 00000041`3adf9f60 00007ffd`095997c5 WebKit2!IPC::MessageSender::send<Messages::WebPageProxy::SetCursor>(class Messages::WebPageProxy::SetCursor * message = 0x00000041`3adfa080, unsigned int64 destinationID = 0xa, class WTF::OptionSet<IPC::SendOption> options = class WTF::OptionSet<IPC::SendOption>)+0x75 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\MessageSenderInlines.h @ 37]
1f 00000041`3adf9fe0 00007ffd`0959128d WebKit2!IPC::MessageSender::send<Messages::WebPageProxy::SetCursor>(class Messages::WebPageProxy::SetCursor * message = 0x00000041`3adfa080)+0x65 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\MessageSenderInlines.h @ 88]
20 00000041`3adfa040 00007ffc`f5cc1c0d WebKit2!WebKit::WebChromeClient::setCursor(class WebCore::Cursor * cursor = 0x00000232`944f24c0)+0x5d [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\WebProcess\WebCoreSupport\WebChromeClient.cpp @ 909]
21 00000041`3adfa0a0 00007ffc`f6044221 WebCore!WebCore::Chrome::setCursor(class WebCore::Cursor * cursor = 0x00000232`944f24c0)+0x2d [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\page\Chrome.cpp @ 547]
22 00000041`3adfa0e0 00007ffc`f5d24b3e WebCore!WebCore::Widget::setCursor(class WebCore::Cursor * cursor = 0x00000232`944f24c0)+0x41 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\platform\Widget.cpp @ 84]
23 00000041`3adfa120 00007ffc`f5d29773 WebCore!WebCore::EventHandler::updateCursor(class WebCore::LocalFrameView * view = 0x00000232`945620c0, class WebCore::HitTestResult * result = 0x00000041`3adfa450, bool shiftKey = false)+0x9e [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\page\EventHandler.cpp @ 1509]
24 00000041`3adfa1b0 00007ffc`f5d28af0 WebCore!WebCore::EventHandler::handleMouseMoveEvent(class WebCore::PlatformMouseEvent * platformMouseEvent = 0x00000041`3adfa6e0, class WebCore::HitTestResult * hitTestResult = 0x00000041`3adfa580, bool onlyUpdateScrollbars = false)+0xb73 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\page\EventHandler.cpp @ 2195]
25 00000041`3adfa4f0 00007ffd`0965cc86 WebCore!WebCore::EventHandler::mouseMoved(class WebCore::PlatformMouseEvent * event = 0x00000041`3adfa6e0)+0x190 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebCore\page\EventHandler.cpp @ 2040]
26 00000041`3adfa640 00007ffd`096b30c6 WebKit2!WebKit::WebFrame::handleMouseEvent(class WebKit::WebMouseEvent * mouseEvent = 0x00000041`3adfac10)+0x236 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\WebProcess\WebPage\WebFrame.cpp @ 1336]
27 00000041`3adfa770 00007ffd`081c1b83 WebKit2!WebKit::WebPage::mouseEvent(class WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> > * frameID = 0x00000041`3adfa9c0, class WebKit::WebMouseEvent * mouseEvent = 0x00000041`3adfac10, class std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > * sandboxExtensions = 0x00000041`3adfabf0, class WTF::CompletionHandler<void (std::optional<WebKit::WebEventType>, bool, std::optional<WebCore::RemoteUserInputEventData>)> * completionHandler = 0x00000041`3adfabd0)+0x2a6 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\WebProcess\WebPage\WebPage.cpp @ 3539]
28 00000041`3adfa970 00007ffd`081c1ac1 WebKit2!IPC::callMemberFunction<WebKit::WebPage,WebKit::WebPage,void (class WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> > * args = 0x00000041`3adfac80, class WebKit::WebMouseEvent * args = 0x00000041`3adfac10, class std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > * args = 0x00000041`3adfabf0)+0x73 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\HandleMessage.h @ 146]
29 00000041`3adfa9e0 00007ffd`081c1a82 WebKit2!std::invoke<`lambda at C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\HandleMessage.h:145:9',WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > >(class IPC::callMemberFunction<WebKit::WebPage,WebKit::WebPage,void (WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >, const WebKit::WebMouseEvent &, std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > &&, WTF::CompletionHandler<void (std::optional<WebKit::WebEventType>, bool, std::optional<WebCore::RemoteUserInputEventData>)> &&),std::tuple<WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > >,void (std::optional<WebKit::WebEventType>, bool, std::optional<WebCore::RemoteUserInputEventData>)>::<lambda_1> * _Obj = 0x00000041`3adfaaf0, class WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> > * _Arg1 = 0x00000041`3adfac80, class WebKit::WebMouseEvent * _Args2 = 0x00000041`3adfac10, class std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > * _Args2 = 0x00000041`3adfabf0)+0x31 [C:\MSVS\VC\Tools\MSVC\14.39.33519\include\type_traits @ 1739]
2a 00000041`3adfaa30 00007ffd`081c1a22 WebKit2!std::_Apply_impl<`lambda at C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\HandleMessage.h:145:9',std::tuple<WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > >,0,1,2>(class IPC::callMemberFunction<WebKit::WebPage,WebKit::WebPage,void (WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >, const WebKit::WebMouseEvent &, std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > &&, WTF::CompletionHandler<void (std::optional<WebKit::WebEventType>, bool, std::optional<WebCore::RemoteUserInputEventData>)> &&),std::tuple<WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > >,void (std::optional<WebKit::WebEventType>, bool, std::optional<WebCore::RemoteUserInputEventData>)>::<lambda_1> * _Obj = 0x00000041`3adfaaf0, class std::tuple<WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > > * _Tpl = 0x00000041`3adfabf0)+0x52 [C:\MSVS\VC\Tools\MSVC\14.39.33519\include\tuple @ 1077]
2b 00000041`3adfaa80 00007ffd`081bf35e WebKit2!std::apply<`lambda at C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\HandleMessage.h:145:9',std::tuple<WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > > >(class IPC::callMemberFunction<WebKit::WebPage,WebKit::WebPage,void (WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >, const WebKit::WebMouseEvent &, std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > &&, WTF::CompletionHandler<void (std::optional<WebKit::WebEventType>, bool, std::optional<WebCore::RemoteUserInputEventData>)> &&),std::tuple<WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > >,void (std::optional<WebKit::WebEventType>, bool, std::optional<WebCore::RemoteUserInputEventData>)>::<lambda_1> * _Obj = 0x00000041`3adfaaf0, class std::tuple<WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > > * _Tpl = 0x00000041`3adfabf0)+0x22 [C:\MSVS\VC\Tools\MSVC\14.39.33519\include\tuple @ 1088]
2c 00000041`3adfaac0 00007ffd`0819e0b4 WebKit2!IPC::callMemberFunction<WebKit::WebPage,WebKit::WebPage,void (class WebKit::WebPage * object = 0x00000232`91c888e0, <function> * function = 0x00007ffd`096b2e20, class std::tuple<WebCore::ProcessQualified<WTF::ObjectIdentifierGeneric<WebCore::FrameIdentifierType,WTF::ObjectIdentifierMainThreadAccessTraits> >,WebKit::WebMouseEvent,std::optional<WTF::Vector<WebKit::SandboxExtensionHandle,0,WTF::CrashOnOverflow,16,WTF::FastMalloc> > > * tuple = 0x00000041`3adfabf0, class WTF::CompletionHandler<void (std::optional<WebKit::WebEventType>, bool, std::optional<WebCore::RemoteUserInputEventData>)> * completionHandler = 0x00000041`3adfabd0)+0x5e [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\HandleMessage.h @ 144]
2d 00000041`3adfab30 00007ffd`08195684 WebKit2!IPC::handleMessageAsync<Messages::WebPage::MouseEvent,WebKit::WebPage,WebKit::WebPage,void (class IPC::Connection * connection = 0x00000232`91c164e0, class IPC::Decoder * decoder = 0x00000232`97921890, class WebKit::WebPage * object = 0x00000232`91c888e0, <function> * function = 0x00007ffd`096b2e20)+0x194 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\HandleMessage.h @ 337]
2e 00000041`3adfacb0 00007ffd`096bb8cc WebKit2!WebKit::WebPage::didReceiveWebPageMessage(class IPC::Connection * connection = 0x00000232`91c164e0, class IPC::Decoder * decoder = 0x00000232`97921890)+0x814 [C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WebKit\DerivedSources\WebPageMessageReceiver.cpp @ 365]
2f 00000041`3adfbec0 00007ffd`08c493c6 WebKit2!WebKit::WebPage::didReceiveMessage(class IPC::Connection * connection = 0x00000232`91c164e0, class IPC::Decoder * decoder = 0x00000232`97921890)+0x17c [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\WebProcess\WebPage\WebPage.cpp @ 6076]
30 00000041`3adfbf30 00007ffd`091969f9 WebKit2!IPC::MessageReceiverMap::dispatchMessage(class IPC::Connection * connection = 0x00000232`91c164e0, class IPC::Decoder * decoder = 0x00000232`97921890)+0x1c6 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\MessageReceiverMap.cpp @ 130]
31 00000041`3adfbfe0 00007ffd`08c1dfda WebKit2!WebKit::WebProcess::didReceiveMessage(class IPC::Connection * connection = 0x00000232`91c164e0, class IPC::Decoder * decoder = 0x00000232`97921890)+0x49 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\WebProcess\WebProcess.cpp @ 972]
32 00000041`3adfc080 00007ffd`08c1e252 WebKit2!IPC::Connection::dispatchMessage(class IPC::Decoder * decoder = 0x00000232`97921890)+0x16a [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Connection.cpp @ 1327]
33 00000041`3adfc0f0 00007ffd`08c233ad WebKit2!IPC::Connection::dispatchMessage(class WTF::UniqueRef<IPC::Decoder> * message = 0x00000041`3adfc1d0)+0x262 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Connection.cpp @ 1376]
34 00000041`3adfc190 00007ffd`08c17ead WebKit2!IPC::Connection::SyncMessageState::ConnectionAndIncomingMessage::dispatch(void)+0x5d [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Connection.cpp @ 147]
35 00000041`3adfc1f0 00007ffd`08c1d958 WebKit2!IPC::Connection::SyncMessageState::dispatchMessages(class WTF::Function<void (IPC::MessageName, unsigned long long)> * willDispatchMessage = 0x00000041`3adfc318)+0x1cd [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Connection.cpp @ 256]
36 00000041`3adfc2d0 00007ffd`08c1e236 WebKit2!IPC::Connection::dispatchSyncMessage(class IPC::Decoder * decoder = 0x00000232`976c4ad0)+0x238 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Connection.cpp @ 1198]
37 00000041`3adfc380 00007ffd`08c233ad WebKit2!IPC::Connection::dispatchMessage(class WTF::UniqueRef<IPC::Decoder> * message = 0x00000041`3adfc460)+0x246 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Connection.cpp @ 1372]
38 00000041`3adfc420 00007ffd`08c17ead WebKit2!IPC::Connection::SyncMessageState::ConnectionAndIncomingMessage::dispatch(void)+0x5d [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Connection.cpp @ 147]
39 00000041`3adfc480 00007ffd`08c1bdbd WebKit2!IPC::Connection::SyncMessageState::dispatchMessages(class WTF::Function<void (IPC::MessageName, unsigned long long)> * willDispatchMessage = 0x00000041`3adfc628)+0x1cd [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Connection.cpp @ 256]
3a 00000041`3adfc560 00007ffd`08c1a684 WebKit2!IPC::Connection::waitForSyncReply(class WTF::ObjectIdentifierGeneric<IPC::ConnectionSyncRequestIDType,WTF::ObjectIdentifierThreadSafeAccessTraits> syncRequestID = class WTF::ObjectIdentifierGeneric<IPC::ConnectionSyncRequestIDType,WTF::ObjectIdentifierThreadSafeAccessTraits>, IPC::MessageName messageName = WebPageProxy_HandleSynchronousMessage (0n2638), class IPC::Timeout timeout = class IPC::Timeout, class WTF::OptionSet<IPC::SendSyncOption> sendSyncOptions = class WTF::OptionSet<IPC::SendSyncOption>)+0xfd [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Connection.cpp @ 887]
3b 00000041`3adfc660 00007ffd`0970827a WebKit2!IPC::Connection::sendSyncMessage(class WTF::ObjectIdentifierGeneric<IPC::ConnectionSyncRequestIDType,WTF::ObjectIdentifierThreadSafeAccessTraits> syncRequestID = class WTF::ObjectIdentifierGeneric<IPC::ConnectionSyncRequestIDType,WTF::ObjectIdentifierThreadSafeAccessTraits>, class WTF::UniqueRef<IPC::Encoder> * encoder = 0x00000041`3adfc800, class IPC::Timeout timeout = class IPC::Timeout, class WTF::OptionSet<IPC::SendSyncOption> sendSyncOptions = class WTF::OptionSet<IPC::SendSyncOption>)+0x324 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Connection.cpp @ 863]
3c 00000041`3adfc740 00007ffd`097080ce WebKit2!IPC::Connection::sendSync<Messages::WebPageProxy::HandleSynchronousMessage>(class Messages::WebPageProxy::HandleSynchronousMessage * message = 0x00000041`3adfc9e8, unsigned int64 destinationID = 0xa, class IPC::Timeout timeout = class IPC::Timeout, class WTF::OptionSet<IPC::SendSyncOption> sendSyncOptions = class WTF::OptionSet<IPC::SendSyncOption>)+0x17a [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\Connection.h @ 735]
3d 00000041`3adfc830 00007ffd`096db6d0 WebKit2!IPC::MessageSender::sendSync<Messages::WebPageProxy::HandleSynchronousMessage>(class Messages::WebPageProxy::HandleSynchronousMessage * message = 0x00000041`3adfc9e8, unsigned int64 destinationID = 0xa, class IPC::Timeout timeout = class IPC::Timeout, class WTF::OptionSet<IPC::SendSyncOption> options = class WTF::OptionSet<IPC::SendSyncOption>)+0xae [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\MessageSenderInlines.h @ 45]
3e 00000041`3adfc8c0 00007ffd`096c0664 WebKit2!IPC::MessageSender::sendSync<Messages::WebPageProxy::HandleSynchronousMessage>(class Messages::WebPageProxy::HandleSynchronousMessage * message = 0x00000041`3adfc9e8, class IPC::Timeout timeout = class IPC::Timeout, class WTF::OptionSet<IPC::SendSyncOption> options = class WTF::OptionSet<IPC::SendSyncOption>)+0x90 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\Platform\IPC\MessageSenderInlines.h @ 123]
3f 00000041`3adfc950 00007ffd`09476dd7 WebKit2!WebKit::WebPage::postSynchronousMessageForTesting(class WTF::String * messageName = 0x00000041`3adfca80, class API::Object * messageBody = 0x00000232`978ef220, class WTF::RefPtr<API::Object,WTF::RawPtrTraits<API::Object>,WTF::DefaultRefDerefTraits<API::Object> > * returnData = 0x00000041`3adfca88)+0xf4 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\WebProcess\WebPage\WebPage.cpp @ 7986]
40 00000041`3adfca30 00007ffd`19556740 WebKit2!WKBundlePagePostSynchronousMessageForTesting(struct OpaqueWKBundlePage * pageRef = 0x00000232`91c888e0, struct OpaqueWKString * messageNameRef = 0x00000232`9788a330, void * messageBodyRef = 0x00000232`978ef220, void ** returnRetainedDataRef = 0x00000000`00000000)+0x77 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\WebKit\WebProcess\InjectedBundle\API\c\WKBundlePage.cpp @ 831]
41 00000041`3adfcaa0 00007ffd`195541fd TestRunnerInjectedBundle!WTR::postSynchronousPageMessage<OpaqueWKDictionary *>(char * name = 0x00007ffd`19a164b8 "EventSender", class WebKit::WKRetainPtr<OpaqueWKDictionary *> * value = 0x00000041`3adfcb68)+0xa0 [C:\BW\WinCairo-64-bit-Debug-Build\build\Tools\WebKitTestRunner\InjectedBundle\InjectedBundle.h @ 269]
42 00000041`3adfcb00 00007ffd`195d272c TestRunnerInjectedBundle!WTR::EventSendingController::mouseMoveTo(int x = 0n11, int y = 0n64, struct OpaqueJSString * pointerType = 0x00000000`00000000)+0x12d [C:\BW\WinCairo-64-bit-Debug-Build\build\Tools\WebKitTestRunner\InjectedBundle\EventSendingController.cpp @ 238]
43 00000041`3adfcb80 00007ffd`195d26a1 TestRunnerInjectedBundle!WTR::callFunction<WTR::EventSendingController,WTR::EventSendingController,void (int * args = 0x00000041`3adfccf8, int * args = 0x00000041`3adfccf0, struct OpaqueJSString ** args = 0x00000041`3adfcce8)+0x4c [C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WebKitTestRunner\DerivedSources\InjectedBundle\JSEventSendingController.cpp @ 69]
44 00000041`3adfcbd0 00007ffd`195d2662 TestRunnerInjectedBundle!std::invoke<`lambda at C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WebKitTestRunner\DerivedSources\InjectedBundle\JSEventSendingController.cpp:68:27',int,int,OpaqueJSString *>(class WTR::callFunction<WTR::EventSendingController,WTR::EventSendingController,void (int, int, OpaqueJSString *),int,int,OpaqueJSString *>::<lambda_1> * _Obj = 0x00000041`3adfccd8, int * _Arg1 = 0x00000041`3adfccf8, int * _Args2 = 0x00000041`3adfccf0, struct OpaqueJSString ** _Args2 = 0x00000041`3adfcce8)+0x31 [C:\MSVS\VC\Tools\MSVC\14.39.33519\include\type_traits @ 1739]
45 00000041`3adfcc20 00007ffd`195d25c2 TestRunnerInjectedBundle!std::_Apply_impl<`lambda at C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WebKitTestRunner\DerivedSources\InjectedBundle\JSEventSendingController.cpp:68:27',std::tuple<int,int,OpaqueJSString *>,0,1,2>(class WTR::callFunction<WTR::EventSendingController,WTR::EventSendingController,void (int, int, OpaqueJSString *),int,int,OpaqueJSString *>::<lambda_1> * _Obj = 0x00000041`3adfccd8, class std::tuple<int,int,OpaqueJSString *> * _Tpl = 0x00000041`3adfcce8)+0x52 [C:\MSVS\VC\Tools\MSVC\14.39.33519\include\tuple @ 1077]
46 00000041`3adfcc70 00007ffd`195d1684 TestRunnerInjectedBundle!std::apply<`lambda at C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WebKitTestRunner\DerivedSources\InjectedBundle\JSEventSendingController.cpp:68:27',std::tuple<int,int,OpaqueJSString *> >(class WTR::callFunction<WTR::EventSendingController,WTR::EventSendingController,void (int, int, OpaqueJSString *),int,int,OpaqueJSString *>::<lambda_1> * _Obj = 0x00000041`3adfccd8, class std::tuple<int,int,OpaqueJSString *> * _Tpl = 0x00000041`3adfcce8)+0x22 [C:\MSVS\VC\Tools\MSVC\14.39.33519\include\tuple @ 1088]
47 00000041`3adfccb0 00007ffd`195cf5df TestRunnerInjectedBundle!WTR::callFunction<WTR::EventSendingController,WTR::EventSendingController,void (struct OpaqueJSContext * context = 0x00000232`91c4f918, class WTR::EventSendingController * object = 0x00000232`9769d0b0, <function> * function = 0x00007ffd`195540d0, int args = 0n11, int args = 0n64, struct OpaqueJSString * args = 0x00000000`00000000)+0x84 [C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WebKitTestRunner\DerivedSources\InjectedBundle\JSEventSendingController.cpp @ 68]
48 00000041`3adfcd30 00007ffd`0e683c21 TestRunnerInjectedBundle!WTR::JSEventSendingController::mouseMoveTo(struct OpaqueJSContext * context = 0x00000232`91c4f918, struct OpaqueJSValue * thisObject = 0x00000232`946e8200, unsigned int64 argumentCount = 2, struct OpaqueJSValue ** arguments = 0x00000041`3adfcf50, struct OpaqueJSValue ** exception = 0x00000041`3adfcea0)+0x1df [C:\BW\WinCairo-64-bit-Debug-Build\build\WebKitBuild\Debug\WebKitTestRunner\DerivedSources\InjectedBundle\JSEventSendingController.cpp @ 177]
49 00000041`3adfcde0 00007ffd`0e65bbad JavaScriptCore!JSC::APICallbackFunction::callImpl<JSC::JSCallbackFunction>(class JSC::JSGlobalObject * globalObject = 0x00000232`91c4f918, class JSC::CallFrame * callFrame = 0x00000041`3adfd020)+0x1d1 [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\JavaScriptCore\API\APICallbackFunction.h @ 60]
4a 00000041`3adfcfe0 00007ffd`0e608242 JavaScriptCore!JSC::callJSCallbackFunction(class JSC::JSGlobalObject * globalObject = 0x00000232`91c4f918, class JSC::CallFrame * callFrame = 0x00000041`3adfd020)+0x1d [C:\BW\WinCairo-64-bit-Debug-Build\build\Source\JavaScriptCore\API\JSCallbackFunction.cpp @ 42]
4b 00000041`3adfd020 00000041`3adfd0b0 JavaScriptCore!llint_entry+0x26f56
4c 00000041`3adfd028 00007ffd`0e60602b 0x00000041`3adfd0b0
4d 00000041`3adfd030 00000000`00000000 JavaScriptCore!llint_entry+0x24d3f

[Chris Dumez]

Pull request: https://github.com/WebKit/WebKit/pull/28946

[Fujii Hironori]

Pull request: https://github.com/WebKit/WebKit/pull/28947

[EWS]

Committed 279167@main (298b67cd8c41): <https://commits.webkit.org/279167@main>

Reviewed commits have been landed. Closing PR #28946 and removing active labels.

[Radar WebKit Bug Importer]

<rdar://problem/128578440>