RESOLVED FIXED305677
Temporarily revert assertion in VMTraps::deferTerminationSlow() to a Debug ASSERT. 
https://bugs.webkit.org/show_bug.cgi?id=305677
Summary Temporarily revert assertion in VMTraps::deferTerminationSlow() to a Debug AS...
Mark Lam
Reported 2026-01-16 16:32:28 PST
There are places in the code that are still not handling TerminationExceptions correctly, and re-entering the VM after termination. As a result, they are crashing over this RELEASE_ASSERT which was hardened from a Debug ASSERT in 298039@main. If the client re-enters the VM while the TerminationException is still in effect, without this RELEASE_ASSERT, we'll eventually exit again at the next exception check. So, the issue should be benign. This patch will temporarily revert the RELEASE_ASSERT back to a Debug ASSERT to alleviate the crashes. We still want to fix all the places that did the illegal re-entry to make the code more sane and easy to reason about, but that can be done later. We can re-enable the RELEASE_ASSERT after that. rdar://167947484
Attachments
Add attachment proposed patch, testcase, etc.
Mark Lam
Comment 1 2026-01-16 16:34:16 PST
*** Bug 305678 has been marked as a duplicate of this bug. ***
Mark Lam
Comment 2 2026-01-16 16:42:14 PST
Pull request: https://github.com/WebKit/WebKit/pull/56747
EWS
Comment 3 2026-01-16 16:46:32 PST
Committed 305748@main (e6eb222f8fed): <https://commits.webkit.org/305748@main> Reviewed commits have been landed. Closing PR #56747 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.