[Webkit-unassigned] [Bug 204977] New: REGRESSION(r253231): Debug assertion failures under ~WebDeviceOrientationUpdateProvider(Proxy)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=204977

            Bug ID: 204977
           Summary: REGRESSION(r253231): Debug assertion failures under
                    ~WebDeviceOrientationUpdateProvider(Proxy)
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit2
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: david_quesada at apple.com

These new classes' destructors introduced a few debug assertion failures I've been hitting while running tests against a debug build of WebKit.

This assertion can fail in the UI process when a web view deallocates after having process swapped:

ASSERTION FAILED: m_messageReceivers.contains(std::make_pair(messageReceiverName, destinationID))
/Users/david/Source/OpenSource/Source/WebKit/Platform/IPC/MessageReceiverMap.cpp(72) : void IPC::MessageReceiverMap::removeMessageReceiver(IPC::StringReference, uint64_t)
1   0x107a6ab69 WTFCrash
2   0x10c398d9b WTFCrashWithInfo(int, char const*, char const*, int)
3   0x10c46fafa IPC::MessageReceiverMap::removeMessageReceiver(IPC::StringReference, unsigned long long)
4   0x10cc380d6 WebKit::AuxiliaryProcessProxy::removeMessageReceiver(IPC::StringReference, unsigned long long)
5   0x10cc5d910 void WebKit::AuxiliaryProcessProxy::removeMessageReceiver<WebCore::PageIdentifierType>(IPC::StringReference, WTF::ObjectIdentifier<WebCore::PageIdentifierType>)
6   0x10d66f408 WebKit::WebDeviceOrientationUpdateProviderProxy::~WebDeviceOrientationUpdateProviderProxy() ...
9   0x10cdb2355 WebKit::WebPageProxy::~WebPageProxy() ...
16  0x10cb87835 -[WKWebView .cxx_destruct]

And after fixing that, I encountered this failure in the Web process:

ASSERTION FAILED: m_globalMessageReceivers.contains(messageReceiverName)
/Users/david/Source/OpenSource/Source/WebKit/Platform/IPC/MessageReceiverMap.cpp(62) : void IPC::MessageReceiverMap::removeMessageReceiver(IPC::StringReference)
1   0x1e9924b69 WTFCrash
2   0x1d80ab4bb WTFCrashWithInfo(int, char const*, char const*, int)
3   0x1d8181ece IPC::MessageReceiverMap::removeMessageReceiver(IPC::StringReference)
4   0x1d80dcfde WebKit::AuxiliaryProcess::removeMessageReceiver(IPC::StringReference) ...
7   0x1d937cbbc WebKit::WebDeviceOrientationUpdateProvider::~WebDeviceOrientationUpdateProvider() ...
15  0x1efcde4fc WebCore::DeviceOrientationClientIOS::~DeviceOrientationClientIOS() ...
20  0x1f0892ed4 WebCore::Document::~Document()

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20191207/efb256e3/attachment-0001.htm>