RESOLVED FIXED288993
REGRESSION (291489@main?): [macOS Debug]: ASSERTION FAILED: from.isCell() && from.asCell()->JSCell::inherits(std::remove_pointer<To>::type::info()) 
https://bugs.webkit.org/show_bug.cgi?id=288993
Summary REGRESSION (291489@main?): [macOS Debug]: ASSERTION FAILED: from.isCell() && ...
Marta Darbinyan
Reported 2025-03-03 12:28:06 PST
The following tests are flaky crashes in macOS wk1 and wk2 Debug. Suspecting the tests started failing after 291488@main. imported/w3c/web-platform-tests/encoding/api-invalid-label.any.worker.html?1001-2000 imported/w3c/web-platform-tests/encoding/api-invalid-label.any.worker.html?2001-3000 2025-03-03 08:59:46.699 WebKitTestRunner[3636:1373242] +[IMKClient subclass]: chose IMKClient_Modern ASSERTION FAILED: from.isCell() && from.asCell()->JSCell::inherits(std::remove_pointer<To>::type::info()) ./runtime/JSCast.h(55) : To JSC::jsCast(JSValue) [To = JSC::JSPropertyNameEnumerator *] 1 0x1307b7468 JSC::JSPropertyNameEnumerator* JSC::jsCast<JSC::JSPropertyNameEnumerator*>(JSC::JSValue) 2 0x1307b707c slow_path_enumerator_next 3 0x1429a43b8 2 ??? 0x00000001429a43b8 0x0 + 5412373432 4 0x142a215c8 3 ??? 0x0000000142a215c8 0x0 + 5412885960 5 0x142a25fdc 4 ??? 0x0000000142a25fdc 0x0 + 5412904924 6 0x142a04228 5 ??? 0x0000000142a04228 0x0 + 5412766248 7 0x142a92bfc 6 ??? 0x0000000142a92bfc 0x0 + 5413350396 8 0x142a7478c 7 ??? 0x0000000142a7478c 0x0 + 5413226380 9 0x142a70538 8 ??? 0x0000000142a70538 0x0 + 5413209400 10 0x131539254 llint_call_javascript 11 0x13046ea68 JSC::Interpreter::executeCallImpl(JSC::VM&, JSC::JSObject*, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) 12 0x13046ebac JSC::Interpreter::executeCall(JSC::JSObject*, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) 13 0x130755004 JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) 14 0x1307550bc JSC::call(JSC::JSGlobalObject*, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) 15 0x1307553a4 JSC::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) 16 0x303d91920 WebCore::JSExecState::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) 17 0x303e2ea20 WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext&, WebCore::Event&) 18 0x304c8f530 WebCore::EventTarget::innerInvokeEventListeners(WebCore::Event&, WTF::Vector<WTF::RefPtr<WebCore::RegisteredEventListener, WTF::RawPtrTraits<WebCore::RegisteredEventListener>, WTF::DefaultRefDerefTraits<WebCore::RegisteredEventListener>>, 1ul, WTF::CrashOnOverflow, 2ul, WTF::FastMalloc>, WebCore::EventTarget::EventInvokePhase) 19 0x304c8234c WebCore::EventTarget::fireEventListeners(WebCore::Event&, WebCore::EventTarget::EventInvokePhase) 20 0x304c8ef74 WebCore::EventTarget::dispatchEvent(WebCore::Event&) 21 0x307511eb8 WebCore::Worker::dispatchEvent(WebCore::Event&) 22 0x30755032c _ZZZN7WebCore20WorkerMessagingProxy25postMessageToWorkerObjectEONS_23MessageWithMessagePortsEEN3$_0clINS_22ScriptExecutionContextEEEDaRT_ENUlvE_clEv 23 0x30754fff4 _ZN3WTF6Detail15CallableWrapperIZZN7WebCore20WorkerMessagingProxy25postMessageToWorkerObjectEONS2_23MessageWithMessagePortsEEN3$_0clINS2_22ScriptExecutionContextEEEDaRT_EUlvE_vJEE4callEv 24 0x300033e04 WTF::Function<void ()>::operator()() const 25 0x30751f94c void WebCore::ActiveDOMObject::queueTaskKeepingObjectAlive<WebCore::Worker>(WebCore::Worker&, WebCore::TaskSource, WTF::Function<void ()>&&)::'lambda'()::operator()() const 26 0x30751f880 WTF::Detail::CallableWrapper<void WebCore::ActiveDOMObject::queueTaskKeepingObjectAlive<WebCore::Worker>(WebCore::Worker&, WebCore::TaskSource, WTF::Function<void ()>&&)::'lambda'(), void>::call() 27 0x300033e04 WTF::Function<void ()>::operator()() const 28 0x304c9458c WebCore::EventLoopFunctionDispatchTask::execute() 29 0x304c878ac WebCore::EventLoop::run(std::__1::optional<WTF::ApproximateTime>) 30 0x304e6842c WebCore::WindowEventLoop::didReachTimeToRun() 31 0x304e6bc0c WebCore::Timer::Timer<WebCore::WindowEventLoop, WebCore::WindowEventLoop>(WebCore::WindowEventLoop&, void (WebCore::WindowEventLoop::*)())::'lambda'()::operator()() const com.apple.WebKit.WebContent.Development terminated (pid 3660) for reason: crash LEAK: 1 WebPageProxy I was not able to reproduce this crash locally running on Sequoia machine. Test results: https://ews-build.s3-us-west-2.amazonaws.com/macOS-Sequoia-Debug-WK2-Tests-EWS/3c96445e-14764-clean-tree/results.html Test history: https://results.webkit.org/?style=debug&suite=layout-tests&suite=layout-tests&test=imported%2Fw3c%2Fweb-platform-tests%2Fencoding%2Fapi-invalid-label.any.worker.html%3F1001-2000&test=imported%2Fw3c%2Fweb-platform-tests%2Fencoding%2Fapi-invalid-label.any.worker.html%3F2001-3000
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2025-03-03 12:28:55 PST
<rdar://problem/146041975>
Fujii Hironori
Comment 2 2025-03-03 16:07:50 PST
291519@main reverted 291489@main.
Note You need to log in before you can comment on or make changes to this bug.