[Webkit-unassigned] [Bug 189523] New: Layout Test imported/w3c/web-platform-tests/shadow-dom/layout-slot-no-longer-assigned.html is Crashing

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=189523

            Bug ID: 189523
           Summary: Layout Test
                    imported/w3c/web-platform-tests/shadow-dom/layout-slot
                    -no-longer-assigned.html is Crashing
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Tools / Tests
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: tsavell at apple.com
                CC: lforschler at apple.com

The following layout test is Crashing on Mac

imported/w3c/web-platform-tests/shadow-dom/layout-slot-no-longer-assigned.html

Probable cause:

Newly added imported test is flakey from introduction.

Flakiness Dashboard:

https://webkit-test-results.webkit.org/dashboards/flakiness_dashboard.html#showAllRuns=true&tests=imported%2Fw3c%2Fweb-platform-tests%2Fshadow-dom%2Flayout-slot-no-longer-assigned.html

Crash Log:
https://build.webkit.org/results/Apple%20High%20Sierra%20Release%20WK2%20(Tests)/r235882%20(6679)/imported/w3c/web-platform-tests/shadow-dom/layout-slot-no-longer-assigned-crash-log.txt

Excerpt:

Application Specific Information:
CRASHING TEST: /xmlhttprequest/zero-length-response.html

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                   0x0000000109f4cbf1 WebCore::DocumentMarkerController::detach() + 17 (DocumentMarkerController.cpp:59)
1   com.apple.WebCore                   0x0000000109f4ca52 WebCore::Document::removedLastRef() + 866 (HashTable.h:1232)
2   com.apple.JavaScriptCore            0x000000010df6f96f void JSC::MarkedBlock::Handle::specializedSweep<true, (JSC::MarkedBlock::Handle::EmptyMode)1, (JSC::MarkedBlock::Handle::SweepMode)0, (JSC::MarkedBlock::Handle::SweepDestructionMode)1, (JSC::MarkedBlock::Handle::ScribbleMode)0, (JSC::MarkedBlock::Handle::NewlyAllocatedMode)1, (JSC::MarkedBlock::Handle::MarksMode)1, JSC::JSDestructibleObjectDestroyFunc>(JSC::FreeList*, JSC::MarkedBlock::Handle::EmptyMode, JSC::MarkedBlock::Handle::SweepMode, JSC::MarkedBlock::Handle::SweepDestructionMode, JSC::MarkedBlock::Handle::ScribbleMode, JSC::MarkedBlock::Handle::NewlyAllocatedMode, JSC::MarkedBlock::Handle::MarksMode, JSC::JSDestructibleObjectDestroyFunc const&) + 159 (MarkedBlockInlines.h:341)
3   com.apple.JavaScriptCore            0x000000010df6e413 void JSC::MarkedBlock::Handle::finishSweepKnowingHeapCellType<JSC::JSDestructibleObjectDestroyFunc>(JSC::FreeList*, JSC::JSDestructibleObjectDestroyFunc const&)::'lambda'()::operator()() const + 243 (MarkedBlockInlines.h:413)
4   com.apple.JavaScriptCore            0x000000010df4d6d8 void JSC::MarkedBlock::Handle::finishSweepKnowingHeapCellType<JSC::JSDestructibleObjectDestroyFunc>(JSC::FreeList*, JSC::JSDestructibleObjectDestroyFunc const&) + 312 (MarkedBlockInlines.h:435)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180911/1661b7b7/attachment.html>