RESOLVED DUPLICATE of bug 307794307835
REGRESSION(307241@main?): [macOS iOS] ASSERTION FAILED: m_ptr /Volumes/Data/worker/Apple-Tahoe-Debug-Build/build/WebKitBuild/Debug/usr/local/include/wtf/RefPtr. 
https://bugs.webkit.org/show_bug.cgi?id=307835
Summary REGRESSION(307241@main?): [macOS iOS] ASSERTION FAILED: m_ptr /Volumes/Data/w...
Marta Darbinyan
Reported 2026-02-13 12:19:42 PST
The following crash is occurring on macOS and iOS after 307241@main on streams/blob-and-tee.html. The test is crashing on EWS bots and triggering re-tries. ASSERTION FAILED: m_ptr /Volumes/Data/worker/Apple-Tahoe-Debug-Build/build/WebKitBuild/Debug/usr/local/include/wtf/RefPtr.h(79) : T &WTF::RefPtr<WebCore::ReadableStream>::operator*() const [T = WebCore::ReadableStream, _PtrTraits = WTF::RawPtrTraits<WebCore::ReadableStream>, _RefDerefTraits = WTF::DefaultRefDerefTraits<WebCore::ReadableStream>] 1 0x34b84615c WTF::RefPtr<WebCore::ReadableStream, WTF::RawPtrTraits<WebCore::ReadableStream>, WTF::DefaultRefDerefTraits<WebCore::ReadableStream>>::operator*() const 2 0x34ce138d8 WTF::RefPtr<WebCore::ReadableStream, WTF::RawPtrTraits<WebCore::ReadableStream>, WTF::DefaultRefDerefTraits<WebCore::ReadableStream>>::operator->() const 3 0x34d6e94d4 WebCore::TeeBYOBReadRequest::runChunkStepsInMicrotask(JSC::JSValue) 4 0x34d6e905c auto WebCore::TeeBYOBReadRequest::runChunkSteps(JSC::JSValue)::'lambda'(auto)::operator()<JSC::JSValue>(auto) const 5 0x34d6e8dd0 WTF::Detail::CallableWrapper<WebCore::TeeBYOBReadRequest::runChunkSteps(JSC::JSValue)::'lambda'(auto), void, JSC::JSValue>::call(JSC::JSValue) 6 0x34d6e3958 WTF::Function<void (JSC::JSValue)>::operator()(JSC::JSValue) const 7 0x34d6e38a8 WebCore::StreamTeeState::queueMicrotaskWithValue(JSC::JSValue, WTF::Function<void (JSC::JSValue)>&&)::'lambda'()::operator()() const 8 0x34d6e37d8 WTF::Detail::CallableWrapper<WebCore::StreamTeeState::queueMicrotaskWithValue(JSC::JSValue, WTF::Function<void (JSC::JSValue)>&&)::'lambda'(), void>::call() 9 0x349437180 WTF::Function<void ()>::operator()() const 10 0x34ee05a50 WebCore::EventLoopFunctionMicrotaskDispatcher::run(JSC::QueuedTask&) 11 0x34ee9ca6c WebCore::MicrotaskQueue::performMicrotaskCheckpoint()::$_0::operator()(JSC::QueuedTask&) const 12 0x34ee7be64 void JSC::MicrotaskQueue::performMicrotaskCheckpoint<false, WebCore::MicrotaskQueue::performMicrotaskCheckpoint()::$_0>(JSC::VM&, WebCore::MicrotaskQueue::performMicrotaskCheckpoint()::$_0 const&) 13 0x34ee7bac8 WebCore::MicrotaskQueue::performMicrotaskCheckpoint() 14 0x34edf8c54 WebCore::EventLoop::performMicrotaskCheckpoint() 15 0x34edf9aa8 WebCore::EventLoop::run(std::__1::optional<WTF::ApproximateTime>) 16 0x34f01495c WebCore::WindowEventLoop::didReachTimeToRun() 17 0x34f01ae24 WebCore::Timer::Timer<WebCore::WindowEventLoop, WebCore::WindowEventLoop>(WebCore::WindowEventLoop&, void (WebCore::WindowEventLoop::*)())::'lambda'()::operator()() const 18 0x34f01ac7c WTF::Detail::CallableWrapper<WebCore::Timer::Timer<WebCore::WindowEventLoop, WebCore::WindowEventLoop>(WebCore::WindowEventLoop&, void (WebCore::WindowEventLoop::*)())::'lambda'(), void>::call() 19 0x349437180 WTF::Function<void ()>::operator()() const 20 0x349588094 WebCore::Timer::fired() 21 0x3503e1bc0 WebCore::ThreadTimers::sharedTimerFiredInternal() 22 0x3503ebef4 WebCore::ThreadTimers::setSharedTimer(WebCore::SharedTimer*)::$_0::operator()() const 23 0x3503ebea0 WTF::Detail::CallableWrapper<WebCore::ThreadTimers::setSharedTimer(WebCore::SharedTimer*)::$_0, void>::call() 24 0x349437180 WTF::Function<void ()>::operator()() const 25 0x35037644c WebCore::MainThreadSharedTimer::fired() 26 0x3504f7368 WebCore::timerFired(__CFRunLoopTimer*, void*) 27 0x182a0f18c __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ 28 0x182a0ee4c __CFRunLoopDoTimer 29 0x182a0e9c4 __CFRunLoopDoTimers 30 0x1829ff76c __CFRunLoopRun 31 0x182ab9e34 _CFRunLoopRunSpecificWithOptions com.apple.WebKit.WebContent.Development terminated (pid 31163) for reason: crash Test results: https://build.webkit.org/results/Apple-Tahoe-Debug-AppleSilicon-WK2-Tests/307467@main%20(845)/results.html Test history: https://results.webkit.org/?suite=layout-tests&test=streams%2Fblob-and-tee.html&flavor=wk2
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2026-02-13 12:20:17 PST
<rdar://problem/170338139>
EWS
Comment 2 2026-02-13 13:16:53 PST
Test gardening commit 307509@main (5b4d8ee94b08): <https://commits.webkit.org/307509@main> Reviewed commits have been landed. Closing PR #58660 and removing active labels.
youenn fablet
Comment 3 2026-02-13 14:45:41 PST
*** This bug has been marked as a duplicate of bug 307794 ***
Note You need to log in before you can comment on or make changes to this bug.