[Webkit-unassigned] [Bug 187391] Flaky crash under WebCore::AXObjectCache::stopCachingComputedObjectAttributes()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=187391

Shawn Roberts <sroberts at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sroberts at apple.com

--- Comment #2 from Shawn Roberts <sroberts at apple.com> ---
Test recently started showing up on bots as a crash in Mac Release as well.

Probable cause:

Local testing found that running accessibility/mac/attachment-element-replacement-character.html by itself produces no failures.

However, testing accessibility/Mac/async-increment-decrement-action.html by itself will cause a crash roughly 5 times out of 500 iterations.

Also when I run accessibility/Mac/async-increment-decrement-action.html followed by accessibility/mac/attachment-element-replacement-character.html , the async-increment test will crash, and blame the attach-element test. 

Local crashes match crash logs seen here, as well as on the bots.

I tested with newest revisions, it also crashes with https://trac.webkit.org/changeset/230782/webkit when the accessibility/Mac/async-increment-decrement-action.html test was created

Also crashes with https://trac.webkit.org/changeset/230855/webkit when the test was modified.

Reproduced with :

run-webkit-tests accessibility/Mac/async-increment-decrement-action.html accessibility/Mac/attachment-element-replacement-character.html --iterations 15 --debug

- causes on average 4 in 15 crashes
rwt --root t230781 accessibility/Mac/async-increment-decrement-action.html accessibility/Mac/attachment-element-replacement-character.html --iterations 5

- causes on average 2 in 5 crashes

run-webkit-tests accessibility/mac/async-increment-decrement-action.html --iterations  500 -f

- causes on average 7 in 500 crashes 

Skipping test locally will cause crashes to stop.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190401/a8e24318/attachment.html>