NEW310310
REGRESSION(309217@main): [iOS] ASSERTION FAILED: m_ptr in editing/input/cocoa/extended-proofreading.html 
https://bugs.webkit.org/show_bug.cgi?id=310310
Summary REGRESSION(309217@main): [iOS] ASSERTION FAILED: m_ptr in editing/input/cocoa...
Marta Darbinyan
Reported 2026-03-19 14:34:43 PDT
The following test is crashing with assertion error on iOS after 309217@main. The test is flaky failure across different EWS runs. editing/input/cocoa/extended-proofreading.html ASSERTION FAILED: m_ptr /Volumes/Data/worker/Apple-iOS-26-Simulator-Debug-Build/build/WebKitBuild/Debug-iphonesimulator/usr/local/include/wtf/Ref.h(182) : T &WTF::Ref<WebKit::TextCheckerCompletion>::leakRef() [T = WebKit::TextCheckerCompletion, _PtrTraits = WTF::RawPtrTraits<WebKit::TextCheckerCompletion>, RefDerefTraits = WTF::DefaultRefDerefTraits<WebKit::TextCheckerCompletion>] 1 0x1527d800c WTF::Ref<WebKit::TextCheckerCompletion, WTF::RawPtrTraits<WebKit::TextCheckerCompletion>, WTF::DefaultRefDerefTraits<WebKit::TextCheckerCompletion>>::leakRef() 2 0x1527d7f38 WTF::Ref<WebKit::TextCheckerCompletion, WTF::RawPtrTraits<WebKit::TextCheckerCompletion>, WTF::DefaultRefDerefTraits<WebKit::TextCheckerCompletion>>::Ref(WTF::Ref<WebKit::TextCheckerCompletion, WTF::RawPtrTraits<WebKit::TextCheckerCompletion>, WTF::DefaultRefDerefTraits<WebKit::TextCheckerCompletion>>&&) 3 0x1527ba094 WTF::Ref<WebKit::TextCheckerCompletion, WTF::RawPtrTraits<WebKit::TextCheckerCompletion>, WTF::DefaultRefDerefTraits<WebKit::TextCheckerCompletion>>::Ref(WTF::Ref<WebKit::TextCheckerCompletion, WTF::RawPtrTraits<WebKit::TextCheckerCompletion>, WTF::DefaultRefDerefTraits<WebKit::TextCheckerCompletion>>&&) 4 0x1527d13cc WebKit::TextChecker::requestExtendedCheckingOfString(WTF::Ref<WebKit::TextCheckerCompletion, WTF::RawPtrTraits<WebKit::TextCheckerCompletion>, WTF::DefaultRefDerefTraits<WebKit::TextCheckerCompletion>>&&, int)::$_0::operator()(NSArray<NSTextCheckingResult*>*) 5 0x1527d16c0 WTF::BlockPtr<void (NSArray<NSTextCheckingResult*>*)> WTF::BlockPtr<void (NSArray<NSTextCheckingResult*>*)>::fromCallable<WebKit::TextChecker::requestExtendedCheckingOfString(WTF::Ref<WebKit::TextCheckerCompletion, WTF::RawPtrTraits<WebKit::TextCheckerCompletion>, WTF::DefaultRefDerefTraits<WebKit::TextCheckerCompletion>>&&, int)::$_0>(WebKit::TextChecker::requestExtendedCheckingOfString(WTF::Ref<WebKit::TextCheckerCompletion, WTF::RawPtrTraits<WebKit::TextCheckerCompletion>, WTF::DefaultRefDerefTraits<WebKit::TextCheckerCompletion>>&&, int)::$_0)::'lambda'(void*, NSArray<NSTextCheckingResult*>*)::operator()(void*, NSArray<NSTextCheckingResult*>*) const 6 0x1527d168c WTF::BlockPtr<void (NSArray<NSTextCheckingResult*>*)> WTF::BlockPtr<void (NSArray<NSTextCheckingResult*>*)>::fromCallable<WebKit::TextChecker::requestExtendedCheckingOfString(WTF::Ref<WebKit::TextCheckerCompletion, WTF::RawPtrTraits<WebKit::TextCheckerCompletion>, WTF::DefaultRefDerefTraits<WebKit::TextCheckerCompletion>>&&, int)::$_0>(WebKit::TextChecker::requestExtendedCheckingOfString(WTF::Ref<WebKit::TextCheckerCompletion, WTF::RawPtrTraits<WebKit::TextCheckerCompletion>, WTF::DefaultRefDerefTraits<WebKit::TextCheckerCompletion>>&&, int)::$_0)::'lambda'(void*, NSArray<NSTextCheckingResult*>*)::__invoke(void*, NSArray<NSTextCheckingResult*>*) 7 0x24e3b7ba0 _TCSmartRepliesOSLogFacility 8 0x18672f058 -[UITextChecker requestProofreadingReviewOfString:range:language:options:completionHandler:] 9 0x104579fb8 -[LayoutTestSpellChecker requestProofreadingReviewOfString:range:language:options:completionHandler:] 10 0x1527b9ee4 WebKit::TextChecker::requestExtendedCheckingOfString(WTF::Ref<WebKit::TextCheckerCompletion, WTF::RawPtrTraits<WebKit::TextCheckerCompletion>, WTF::DefaultRefDerefTraits<WebKit::TextCheckerCompletion>>&&, int) 11 0x152e29828 WebKit::WebPageProxy::requestExtendedCheckingOfString(WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData const&, int) 12 0x151872f28 auto void IPC::callMemberFunction<WebKit::WebPageProxy, WebKit::WebPageProxy, void (WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData const&, int), std::__1::tuple<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>>(WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData const&, int), std::__1::tuple<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>&&)::'lambda'(auto&&...)::operator()<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>(auto&&...) const 13 0x151872e04 decltype(std::declval<WebKit::WebPageProxy>()(std::declval<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>>(), std::declval<WebCore::TextCheckingRequestData>(), std::declval<int>())) std::__1::__invoke[abi:sn200100]<void IPC::callMemberFunction<WebKit::WebPageProxy, WebKit::WebPageProxy, void (WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData const&, int), std::__1::tuple<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>>(WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData const&, int), std::__1::tuple<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>&&)::'lambda'(auto&&...), WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>(WebKit::WebPageProxy&&, WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>&&, WebCore::TextCheckingRequestData&&, int&&) 14 0x151872dc8 decltype(auto) std::__1::__apply_tuple_impl[abi:sn200100]<void IPC::callMemberFunction<WebKit::WebPageProxy, WebKit::WebPageProxy, void (WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData const&, int), std::__1::tuple<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>>(WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData const&, int), std::__1::tuple<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>&&)::'lambda'(auto&&...), std::__1::tuple<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>, 0ul, 1ul, 2ul>(WebKit::WebPageProxy&&, WebKit::WebPageProxy&&, std::__1::__tuple_indices<0ul, 1ul, 2ul>) 15 0x151872d6c decltype(auto) std::__1::apply[abi:sn200100]<void IPC::callMemberFunction<WebKit::WebPageProxy, WebKit::WebPageProxy, void (WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData const&, int), std::__1::tuple<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>>(WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData const&, int), std::__1::tuple<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>&&)::'lambda'(auto&&...), std::__1::tuple<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>>(WebKit::WebPageProxy&&, WebKit::WebPageProxy&&) 16 0x151871ecc void IPC::callMemberFunction<WebKit::WebPageProxy, WebKit::WebPageProxy, void (WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData const&, int), std::__1::tuple<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>>(WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData const&, int), std::__1::tuple<WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData, int>&&) 17 0x1515aa9cc void IPC::handleMessage<Messages::WebPageProxy::RequestExtendedCheckingOfString, IPC::Connection, WebKit::WebPageProxy, WebKit::WebPageProxy, void (WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData const&, int)>(IPC::Connection&, IPC::Decoder&, WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(WTF::ObjectIdentifierGeneric<WebKit::TextCheckerRequestType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long long>, unsigned long long>, WebCore::TextCheckingRequestData const&, int)) 18 0x15159b0e8 WebKit::WebPageProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&) 19 0x1543c8670 IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::Decoder&) 20 0x152c5edb8 WebKit::AuxiliaryProcessProxy::dispatchMessage(IPC::Connection&, IPC::Decoder&) 21 0x15300005c WebKit::WebProcessProxy::dispatchMessage(IPC::Connection&, IPC::Decoder&) 22 0x1519f77f0 WebKit::WebProcessProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&) 23 0x15435cd28 IPC::Connection::dispatchMessage(IPC::Decoder&) 24 0x15435d228 IPC::Connection::dispatchMessage(WTF::UniqueRef<IPC::Decoder>) 25 0x15435d9f8 IPC::Connection::dispatchIncomingMessages() 26 0x1543b8444 IPC::Connection::enqueueIncomingMessage(WTF::UniqueRef<IPC::Decoder>)::$_0::operator()() const 27 0x1543b83a0 WTF::Detail::CallableWrapper<IPC::Connection::enqueueIncomingMessage(WTF::UniqueRef<IPC::Decoder>)::$_0, void>::call() 28 0x1196eff28 WTF::Function<void ()>::operator()() const 29 0x1197d07e0 WTF::RunLoop::performWork() 30 0x1197d8368 WTF::RunLoop::performWork(void*) 31 0x1804563a4 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ Test history: https://results.webkit.org/?suite=layout-tests&test=editing%2Finput%2Fcocoa%2Fextended-proofreading.html Test results: https://build.webkit.org/results/Apple-iOS-26-Simulator-Debug-WK2-Tests/309483@main%20(895)/results.html
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2026-03-19 14:35:12 PDT
<rdar://problem/172949195>
EWS
Comment 2 2026-03-19 15:00:32 PDT
Test gardening commit 309581@main (2bd2a8b5979c): <https://commits.webkit.org/309581@main> Reviewed commits have been landed. Closing PR #60962 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.