Bug 93502 – [Gtk] fast/history/nested-visited-test.html crashes occasionally

• Status: RESOLVED
• Resolution: FIXED
• Component: JavaScriptCore

[Zan Dobersek]

The test flakily crashes, taking as much as 100 seconds to run.
http://test-results.appspot.com/dashboards/flakiness_dashboard.html#group=%40ToT%20-%20webkit.org&tests=fast%2Fhistory%2Fnested-visited-test

Crash log for DumpRenderTree (pid 16568):

[New LWP 16568]
[New LWP 17002]
[New LWP 16580]
[New LWP 17036]
[New LWP 16579]
[New LWP 16581]
[New LWP 16634]
[New LWP 16582]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/slave/webkitgtk/gtk-linux-64-debug/build/WebKitBuild/Debug/Programs/DumpR'.
Program terminated with signal 11, Segmentation fault.
#0  0x00007f456e869e21 in JSC::MarkedAllocator::allocateSlowCase (this=0x27b0b60) at ../../Source/JavaScriptCore/heap/MarkedAllocator.cpp:76
76	    ASSERT(m_heap->globalData()->apiLock().currentThreadIsHoldingLock());

...

Thread 1 (Thread 0x7f455e550900 (LWP 16568)):
#0  0x00007f456e869e21 in JSC::MarkedAllocator::allocateSlowCase (this=0x27b0b60) at ../../Source/JavaScriptCore/heap/MarkedAllocator.cpp:76
#1  0x00007f4569c0e07b in JSC::MarkedAllocator::allocate (this=0x27b0b60) at ../../Source/JavaScriptCore/heap/MarkedAllocator.h:83
#2  0x00007f4569c0e18a in JSC::MarkedSpace::allocateStructure (this=0x27b0160) at ../../Source/JavaScriptCore/heap/MarkedSpace.h:202
#3  0x00007f4569c0e264 in JSC::Heap::allocateStructure (this=0x27b00a0) at ../../Source/JavaScriptCore/heap/Heap.h:376
#4  0x00007f4569c0e8a2 in JSC::allocateCell<JSC::Structure> (heap=...) at ../../Source/JavaScriptCore/runtime/Structure.h:451
#5  0x00007f4569c0e97e in JSC::Structure::create (globalData=..., globalObject=0x7f451c2cd380, prototype=..., typeInfo=..., classInfo=0x7f456dc27c40) at ../../Source/JavaScriptCore/runtime/Structure.h:460
#6  0x00007f456aae3d4a in WebCore::JSCSSStyleDeclaration::createStructure (globalData=..., globalObject=0x7f451c2cd380, prototype=...) at DerivedSources/WebCore/JSCSSStyleDeclaration.h:56
#7  0x00007f456aae4cb9 in WebCore::getDOMStructure<WebCore::JSCSSStyleDeclaration> (exec=0x7f45163fd0e0, globalObject=0x7f451c2cd380) at ../../Source/WebCore/bindings/js/JSDOMBinding.h:118
#8  0x00007f456aae4f18 in WebCore::createWrapper<WebCore::JSCSSStyleDeclaration, WebCore::CSSStyleDeclaration> (exec=0x7f45163fd0e0, globalObject=0x7f451c2cd380, node=0x69d3e20) at ../../Source/WebCore/bindings/js/JSDOMBinding.h:164
#9  0x00007f456aae4c26 in WebCore::wrap<WebCore::JSCSSStyleDeclaration, WebCore::CSSStyleDeclaration> (exec=0x7f45163fd0e0, globalObject=0x7f451c2cd380, domObject=0x69d3e20) at ../../Source/WebCore/bindings/js/JSDOMBinding.h:177
#10 0x00007f456aae3c05 in WebCore::toJS (exec=0x7f45163fd0e0, globalObject=0x7f451c2cd380, impl=0x69d3e20) at DerivedSources/WebCore/JSCSSStyleDeclaration.cpp:430
#11 0x00007f4569ac9ba2 in DumpRenderTreeSupportGtk::computedStyleIncludingVisitedInfo (context=0x7f45163fd0e0, nodeObject=0x7f451c2e5ea0) at ../../Source/WebKit/gtk/WebCoreSupport/DumpRenderTreeSupportGtk.cpp:800
#12 0x0000000000480601 in LayoutTestController::computedStyleIncludingVisitedInfo (this=0x6804cf0, context=0x7f45163fd0e0, value=0x7f451c2e5ea0) at ../../Tools/DumpRenderTree/gtk/LayoutTestControllerGtk.cpp:112
#13 0x00000000004688fb in computedStyleIncludingVisitedInfoCallback (context=0x7f45163fd0e0, function=0x7f451c2e5e00, thisObject=0x7f451c2e6440, argumentCount=1, arguments=0x7fffc0940858, exception=0x7fffc09408f8) at ../../Tools/DumpRenderTree/LayoutTestController.cpp:711
#14 0x00007f456e6cbfd8 in JSC::JSCallbackFunction::call (exec=0x7f45163fd0e0) at ../../Source/JavaScriptCore/API/JSCallbackFunction.cpp:73
#15 0x00007f456e8cf4e3 in JSC::LLInt::handleHostCall (execCallee=0x7f45163fd0e0, pc=0x69dd508, callee=..., kind=JSC::CodeForCall) at ../../Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:1323
#16 0x00007f456e8d2203 in JSC::LLInt::setUpCall (execCallee=0x7f45163fd0e0, pc=0x69dd508, kind=JSC::CodeForCall, calleeAsValue=..., callLinkInfo=0x69d7cc0) at ../../Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:1367
#17 0x00007f456e8d277e in JSC::LLInt::genericCall (exec=0x7f45163fd080, pc=0x69dd508, kind=JSC::CodeForCall) at ../../Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:1423
#18 0x00007f456e8cfa46 in JSC::LLInt::llint_slow_path_call (exec=0x7f45163fd080, pc=0x69dd508) at ../../Source/JavaScriptCore/llint/LLIntSlowPaths.cpp:1429
#19 0x00007f456e8d6132 in llint_op_call () from /home/slave/webkitgtk/gtk-linux-64-debug/build/WebKitBuild/Debug/.libs/libjavascriptcoregtk-3.0.so.0
#20 0x00007fffc0940cb0 in ?? ()
#21 0x00007fffc0940ce0 in ?? ()
#22 0x00007f451c30b000 in ?? ()
#23 0x00007f456e7d6b79 in JSC::Register::Register (this=0x0) at ../../Source/JavaScriptCore/interpreter/Register.h:105
#24 0x00007f456e88319e in JSC::JITCode::execute (this=0x7f451c1c6488, registerFile=0x2137c08, callFrame=0x7f45163fd040, globalData=0x27b0050) at ../../Source/JavaScriptCore/jit/JITCode.h:133
#25 0x00007f456e87fab8 in JSC::Interpreter::executeCall (this=0x2137bf0, callFrame=0x7f451c2cd588, function=0x7f451c30b000, callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at ../../Source/JavaScriptCore/interpreter/Interpreter.cpp:1322
#26 0x00007f456e94cdbd in JSC::call (exec=0x7f451c2cd588, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at ../../Source/JavaScriptCore/runtime/CallData.cpp:39
#27 0x00007f4569c22df7 in WebCore::JSMainThreadExecState::call (exec=0x7f451c2cd588, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at ../../Source/WebCore/bindings/js/JSMainThreadExecState.h:56
#28 0x00007f4569c523c5 in WebCore::JSEventListener::handleEvent (this=0x69af4e0, scriptExecutionContext=0x697ea98, event=0x6999280) at ../../Source/WebCore/bindings/js/JSEventListener.cpp:133
#29 0x00007f4569f2cdae in WebCore::EventTarget::fireEventListeners (this=0x68f2e90, event=0x6999280, d=0x68f2fc8, entry=WTF::Vector of length 1, capacity 1 = {...}) at ../../Source/WebCore/dom/EventTarget.cpp:231
#30 0x00007f4569f2cc0c in WebCore::EventTarget::fireEventListeners (this=0x68f2e90, event=0x6999280) at ../../Source/WebCore/dom/EventTarget.cpp:198
#31 0x00007f456a393238 in WebCore::DOMWindow::dispatchEvent (this=0x68f2e90, prpEvent=..., prpTarget=...) at ../../Source/WebCore/page/DOMWindow.cpp:1665
#32 0x00007f456a392fac in WebCore::DOMWindow::dispatchLoadEvent (this=0x68f2e90) at ../../Source/WebCore/page/DOMWindow.cpp:1639
#33 0x00007f4569ec07f7 in WebCore::Document::dispatchWindowLoadEvent (this=0x697e970) at ../../Source/WebCore/dom/Document.cpp:4083
#34 0x00007f4569ebab6f in WebCore::Document::implicitClose (this=0x697e970) at ../../Source/WebCore/dom/Document.cpp:2523
#35 0x00007f456a2f15b9 in WebCore::FrameLoader::checkCallImplicitClose (this=0x2113d28) at ../../Source/WebCore/loader/FrameLoader.cpp:763
#36 0x00007f456a2f1367 in WebCore::FrameLoader::checkCompleted (this=0x2113d28) at ../../Source/WebCore/loader/FrameLoader.cpp:709
#37 0x00007f456a2f2cc8 in WebCore::FrameLoader::completed (this=0x69bf8b8) at ../../Source/WebCore/loader/FrameLoader.cpp:1049
#38 0x00007f456a2f138a in WebCore::FrameLoader::checkCompleted (this=0x69bf8b8) at ../../Source/WebCore/loader/FrameLoader.cpp:713
#39 0x00007f456a2f10bb in WebCore::FrameLoader::finishedParsing (this=0x69bf8b8) at ../../Source/WebCore/loader/FrameLoader.cpp:642
#40 0x00007f4569ec36f6 in WebCore::Document::finishedParsing (this=0x69b1340) at ../../Source/WebCore/dom/Document.cpp:4862
#41 0x00007f456a16cf55 in WebCore::HTMLTreeBuilder::finished (this=0x68ce3a0) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2792
#42 0x00007f456a141d2a in WebCore::HTMLDocumentParser::end (this=0x69cb050) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:372
#43 0x00007f456a141e31 in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x69cb050) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:381
#44 0x00007f456a140f4e in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x69cb050) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:149
#45 0x00007f456a141e76 in WebCore::HTMLDocumentParser::attemptToEnd (this=0x69cb050) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:393
#46 0x00007f456a141f2f in WebCore::HTMLDocumentParser::finish (this=0x69cb050) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:420
#47 0x00007f456a2e9bb1 in WebCore::DocumentWriter::end (this=0x69c5540) at ../../Source/WebCore/loader/DocumentWriter.cpp:241
#48 0x00007f456a2dc745 in WebCore::DocumentLoader::finishedLoading (this=0x69c5480) at ../../Source/WebCore/loader/DocumentLoader.cpp:300
#49 0x00007f456a32e328 in WebCore::MainResourceLoader::didFinishLoading (this=0x69cda00, finishTime=0) at ../../Source/WebCore/loader/MainResourceLoader.cpp:520
#50 0x00007f456a339de5 in WebCore::ResourceLoader::didFinishLoading (this=0x69cda00, finishTime=0) at ../../Source/WebCore/loader/ResourceLoader.cpp:436
#51 0x00007f456a4f8c59 in WebCore::readCallback (source=0x7f4518069580, asyncResult=0x42b3420, data=0x69c6490) at ../../Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:865
#52 0x00007f4567baead3 in async_ready_callback_wrapper () from /home/slave/webkitgtk/gtk-linux-64-debug/build/WebKitBuild/Dependencies/Root/lib64/libgio-2.0.so.0
#53 0x00007f4567bc9bc8 in g_simple_async_result_complete () from /home/slave/webkitgtk/gtk-linux-64-debug/build/WebKitBuild/Dependencies/Root/lib64/libgio-2.0.so.0
#54 0x00007f4567bc9d90 in complete_in_idle_cb_for_thread () from /home/slave/webkitgtk/gtk-linux-64-debug/build/WebKitBuild/Dependencies/Root/lib64/libgio-2.0.so.0
#55 0x00007f45679f93e9 in g_idle_dispatch () from /home/slave/webkitgtk/gtk-linux-64-debug/build/WebKitBuild/Dependencies/Root/lib64/libglib-2.0.so.0
#56 0x00007f45679f6c91 in g_main_dispatch () from /home/slave/webkitgtk/gtk-linux-64-debug/build/WebKitBuild/Dependencies/Root/lib64/libglib-2.0.so.0
#57 0x00007f45679f7956 in g_main_context_dispatch () from /home/slave/webkitgtk/gtk-linux-64-debug/build/WebKitBuild/Dependencies/Root/lib64/libglib-2.0.so.0
#58 0x00007f45679f7b39 in g_main_context_iterate () from /home/slave/webkitgtk/gtk-linux-64-debug/build/WebKitBuild/Dependencies/Root/lib64/libglib-2.0.so.0
#59 0x00007f45679f7f69 in g_main_loop_run () from /home/slave/webkitgtk/gtk-linux-64-debug/build/WebKitBuild/Dependencies/Root/lib64/libglib-2.0.so.0
#60 0x00007f45682e67de in gtk_main () from /home/slave/webkitgtk/gtk-linux-64-debug/build/WebKitBuild/Dependencies/Root/lib64/libgtk-3.so.0
#61 0x0000000000479dd5 in runTest (inputLine=...) at ../../Tools/DumpRenderTree/gtk/DumpRenderTree.cpp:752
#62 0x00000000004794a9 in runTestingServerLoop () at ../../Tools/DumpRenderTree/gtk/DumpRenderTree.cpp:539
#63 0x000000000047c434 in main (argc=2, argv=0x7fffc0942498) at ../../Tools/DumpRenderTree/gtk/DumpRenderTree.cpp:1442

[Zan Dobersek]

fast/history/sibling-visited-test.html crashes lately as well, with the same backtrace.

[Zan Dobersek]

These two tests are not crashing anymore. Closing.