[Webkit-unassigned] [Bug 220450] [WinCairo][curl] ASSERT(!m_channel) failed in WebSocket::contextDestroyed

Thu Jan 7 17:45:42 PST 2021

https://bugs.webkit.org/show_bug.cgi?id=220450

--- Comment #1 from Fujii Hironori <Hironori.Fujii at sony.com> ---
Created attachment 417233

  --> https://bugs.webkit.org/attachment.cgi?id=417233&action=review

construct-in-detached-frame-crash-log.txt

 # Child-SP          RetAddr           Call Site
00 000000df`99cfd730 00007fff`6030db31 WTF!WTFCrash(void)+0x1f [C:\home\webkit\gc\Source\WTF\wtf\Assertions.cpp @ 295]
01 000000df`99cfd760 00007fff`623983fe WebKit!WTFCrashWithInfo(int __formal = 0n509, char * __formal = 0x00007fff`6b69f9a0 "C:\home\webkit\gc\Source\WebCore\Modules/websockets/WebSocket.cpp", char * __formal = 0x00007fff`6b69f418 "WebCore::WebSocket::contextDestroyed", int __formal = 0n2370)+0x31 [C:\home\webkit\gc\WebKitBuild\Debug\WTF\Headers\wtf\Assertions.h @ 672]
02 000000df`99cfd790 00007fff`62dbb292 WebKit!WebCore::WebSocket::contextDestroyed(void)+0x9e [C:\home\webkit\gc\Source\WebCore\Modules\websockets\WebSocket.cpp @ 509]
03 000000df`99cfd7c0 00007fff`62b9504c WebKit!WebCore::ScriptExecutionContext::~ScriptExecutionContext(void)+0x152 [C:\home\webkit\gc\Source\WebCore\dom\ScriptExecutionContext.cpp @ 175]
04 000000df`99cfd840 00007fff`63098fb9 WebKit!WebCore::Document::~Document(void)+0x154c [C:\home\webkit\gc\Source\WebCore\dom\Document.cpp @ 724]
05 000000df`99cfd8e0 00007fff`630a416c WebKit!WebCore::HTMLDocument::~HTMLDocument(void)+0xb9 [C:\home\webkit\gc\Source\WebCore\html\HTMLDocument.cpp @ 99]
06 000000df`99cfd910 00007fff`62c51687 WebKit!WebCore::HTMLDocument::`scalar deleting destructor'(void)+0x2c
07 000000df`99cfd940 00007fff`62b9531d WebKit!WebCore::Document::decrementReferencingNodeCount(void)+0x107 [C:\home\webkit\gc\Source\WebCore\dom\Document.h @ 375]
08 000000df`99cfd990 00007fff`62d34ca0 WebKit!WebCore::Document::removedLastRef(void)+0x29d [C:\home\webkit\gc\Source\WebCore\dom\Document.cpp @ 777]
09 000000df`99cfd9e0 00007fff`603a792d WebKit!WebCore::Node::removedLastRef(void)+0xa0 [C:\home\webkit\gc\Source\WebCore\dom\Node.cpp @ 2551]
0a 000000df`99cfda30 00007fff`60d4f66e WebKit!WebCore::Node::deref(void)+0x22d [C:\home\webkit\gc\WebKitBuild\Debug\WebCore\PrivateHeaders\WebCore\Node.h @ 801]
0b 000000df`99cfda70 00007fff`62c24910 WebKit!WTF::Ref<WebCore::Document,WTF::RawPtrTraits<WebCore::Document> >::~Ref<WebCore::Document,WTF::RawPtrTraits<WebCore::Document> >(void)+0x3e [C:\home\webkit\gc\WebKitBuild\Debug\WTF\Headers\wtf\Ref.h @ 62]
0c 000000df`99cfdaa0 00007fff`62c2502f WebKit!<lambda_4e22691d599e3c2bc2e871e79055c6a5>::~<lambda_4e22691d599e3c2bc2e871e79055c6a5>(void)+0x40
0d 000000df`99cfdad0 00007fff`62c3e30c WebKit!WTF::Detail::CallableWrapper<<lambda_4e22691d599e3c2bc2e871e79055c6a5>,void>::~CallableWrapper<<lambda_4e22691d599e3c2bc2e871e79055c6a5>,void>(void)+0x2f
0e 000000df`99cfdb00 00007fff`60309d33 WebKit!WTF::Detail::CallableWrapper<<lambda_4e22691d599e3c2bc2e871e79055c6a5>,void>::`scalar deleting destructor'(void)+0x2c
0f 000000df`99cfdb30 00007fff`60301ed7 WebKit!std::default_delete<WTF::Detail::CallableWrapperBase<void> >::operator()(class WTF::Detail::CallableWrapperBase<void> * _Ptr = 0x00000213`dc5c5a40)+0x53 [C:\Program Files (x86)\Microsoft Visual Studio\2019\Professional\VC\Tools\MSVC\14.28.29333\include\memory @ 2537]
10 000000df`99cfdb80 00007fff`602fe7eb WebKit!std::unique_ptr<WTF::Detail::CallableWrapperBase<void>,std::default_delete<WTF::Detail::CallableWrapperBase<void> > >::~unique_ptr<WTF::Detail::CallableWrapperBase<void>,std::default_delete<WTF::Detail::CallableWrapperBase<void> > >(void)+0x57 [C:\Program Files (x86)\Microsoft Visual Studio\2019\Professional\VC\Tools\MSVC\14.28.29333\include\memory @ 2649]
11 000000df`99cfdbc0 00007fff`62cdc01f WebKit!WTF::Function<void __cdecl(void)+0x2b
12 000000df`99cfdbf0 00007fff`62cddadc WebKit!WebCore::EventLoopFunctionDispatchTask::~EventLoopFunctionDispatchTask(void)+0x2f
13 000000df`99cfdc20 00007fff`6261a773 WebKit!WebCore::EventLoopFunctionDispatchTask::`scalar deleting destructor'(void)+0x2c
14 000000df`99cfdc50 00007fff`62618997 WebKit!std::default_delete<WebCore::EventLoopTask>::operator()(class WebCore::EventLoopTask * _Ptr = 0x00000213`dc5c52f0)+0x53 [C:\Program Files (x86)\Microsoft Visual Studio\2019\Professional\VC\Tools\MSVC\14.28.29333\include\memory @ 2537]
15 000000df`99cfdca0 00007fff`6261aa4c WebKit!std::unique_ptr<WebCore::EventLoopTask,std::default_delete<WebCore::EventLoopTask> >::~unique_ptr<WebCore::EventLoopTask,std::default_delete<WebCore::EventLoopTask> >(void)+0x57 [C:\Program Files (x86)\Microsoft Visual Studio\2019\Professional\VC\Tools\MSVC\14.28.29333\include\memory @ 2649]
16 000000df`99cfdce0 00007fff`6261b465 WebKit!std::unique_ptr<WebCore::EventLoopTask,std::default_delete<WebCore::EventLoopTask> >::`scalar deleting destructor'(void)+0x2c
17 000000df`99cfdd10 00007fff`6261b4a2 WebKit!WTF::VectorDestructor<1,std::unique_ptr<WebCore::EventLoopTask,std::default_delete<WebCore::EventLoopTask> > >::destruct(class std::unique_ptr<WebCore::EventLoopTask,std::default_delete<WebCore::EventLoopTask> > * begin = 0x00000213`df3146a0 unique_ptr {...}, class std::unique_ptr<WebCore::EventLoopTask,std::default_delete<WebCore::EventLoopTask> > * end = 0x00000213`df3146b0 empty)+0x55 [C:\home\webkit\gc\WebKitBuild\Debug\WTF\Headers\wtf\Vector.h @ 67]
18 000000df`99cfdd50 00007fff`62618556 WebKit!WTF::VectorTypeOperations<std::unique_ptr<WebCore::EventLoopTask,std::default_delete<WebCore::EventLoopTask> > >::destruct(class std::unique_ptr<WebCore::EventLoopTask,std::default_delete<WebCore::EventLoopTask> > * begin = 0x00000213`df3146a0 unique_ptr {...}, class std::unique_ptr<WebCore::EventLoopTask,std::default_delete<WebCore::EventLoopTask> > * end = 0x00000213`df3146b0 empty)+0x32 [C:\home\webkit\gc\WebKitBuild\Debug\WTF\Headers\wtf\Vector.h @ 244]
19 000000df`99cfdd80 00007fff`62ccb568 WebKit!WTF::Vector<std::unique_ptr<WebCore::EventLoopTask,std::default_delete<WebCore::EventLoopTask> >,0,WTF::CrashOnOverflow,16,WTF::FastMalloc>::~Vector<std::unique_ptr<WebCore::EventLoopTask,std::default_delete<WebCore::EventLoopTask> >,0,WTF::CrashOnOverflow,16,WTF::FastMalloc>(void)+0x56 [C:\home\webkit\gc\WebKitBuild\Debug\WTF\Headers\wtf\Vector.h @ 678]
1a 000000df`99cfddc0 00007fff`62e3f106 WebKit!WebCore::EventLoop::run(void)+0x2f8 [C:\home\webkit\gc\Source\WebCore\dom\EventLoop.cpp @ 133]
1b 000000df`99cfdf20 00007fff`62e4b93e WebKit!WebCore::WindowEventLoop::didReachTimeToRun(void)+0x46 [C:\home\webkit\gc\Source\WebCore\dom\WindowEventLoop.cpp @ 121]
1c 000000df`99cfdf80 00007fff`62e469f2 WebKit!std::invoke<void (<function> ** _Obj = 0x00000213`dc3f7fe8, class WebCore::WindowEventLoop ** _Arg1 = 0x00000213`dc3f7ff8)+0x4e [C:\Program Files (x86)\Microsoft Visual Studio\2019\Professional\VC\Tools\MSVC\14.28.29333\include\type_traits @ 1614]
1d 000000df`99cfdfc0 00007fff`62e46a65 WebKit!std::_Invoker_ret<std::_Unforced,0>::_Call<void (<function> ** _Func = 0x00000213`dc3f7fe8, class WebCore::WindowEventLoop ** <_Vals_0> = 0x00000213`dc3f7ff8)+0x32 [C:\Program Files (x86)\Microsoft Visual Studio\2019\Professional\VC\Tools\MSVC\14.28.29333\include\functional @ 773]
1e 000000df`99cfdff0 00007fff`62e4691f WebKit!std::_Call_binder<std::_Unforced,0,void (struct std::_Invoker_ret<std::_Unforced,0> __formal = struct std::_Invoker_ret<std::_Unforced,0>, struct std::integer_sequence<unsigned __int64,0> __formal = struct std::integer_sequence<unsigned __int64,0>, <function> ** _Obj = 0x00000213`dc3f7fe8, class std::tuple<WebCore::WindowEventLoop *> * _Tpl = 0x00000213`dc3f7ff8 {...}, class std::tuple<> * _Ut = 0x000000df`99cfe060)+0x65 [C:\Program Files (x86)\Microsoft Visual Studio\2019\Professional\VC\Tools\MSVC\14.28.29333\include\functional @ 1440]
1f 000000df`99cfe030 00007fff`62e56a6f WebKit!std::_Binder<std::_Unforced,void (void)+0xaf [C:\Program Files (x86)\Microsoft Visual Studio\2019\Professional\VC\Tools\MSVC\14.28.29333\include\functional @ 1496]
20 000000df`99cfe090 00007fff`60320818 WebKit!WTF::Detail::CallableWrapper<std::_Binder<std::_Unforced,void (void)+0x2f [C:\home\webkit\gc\WebKitBuild\Debug\WTF\Headers\wtf\Function.h @ 52]
21 000000df`99cfe0c0 00007fff`6032146f WebKit!WTF::Function<void __cdecl(void)+0xa8 [C:\home\webkit\gc\WebKitBuild\Debug\WTF\Headers\wtf\Function.h @ 84]
22 000000df`99cfe100 00007fff`63be586e WebKit!WebCore::Timer::fired(void)+0x2f [C:\home\webkit\gc\WebKitBuild\Debug\WebCore\PrivateHeaders\WebCore\Timer.h @ 137]
23 000000df`99cfe130 00007fff`63bf16b3 WebKit!WebCore::ThreadTimers::sharedTimerFiredInternal(void)+0x2fe [C:\home\webkit\gc\Source\WebCore\platform\ThreadTimers.cpp @ 130]
24 000000df`99cfe230 00007fff`63bf29ff WebKit!<lambda_262b710db5e1fd9cbe42ca9bc65314e1>::operator()(void)+0x33 [C:\home\webkit\gc\Source\WebCore\platform\ThreadTimers.cpp @ 67]
25 000000df`99cfe260 00007fff`60320818 WebKit!WTF::Detail::CallableWrapper<<lambda_262b710db5e1fd9cbe42ca9bc65314e1>,void>::call(void)+0x2f [C:\home\webkit\gc\WebKitBuild\Debug\WTF\Headers\wtf\Function.h @ 52]
26 000000df`99cfe290 00007fff`63ba98bb WebKit!WTF::Function<void __cdecl(void)+0xa8 [C:\home\webkit\gc\WebKitBuild\Debug\WTF\Headers\wtf\Function.h @ 84]
27 000000df`99cfe2d0 00007fff`608d92de WebKit!WebCore::MainThreadSharedTimer::fired(void)+0x9b [C:\home\webkit\gc\Source\WebCore\platform\MainThreadSharedTimer.cpp @ 84]
28 000000df`99cfe300 00007fff`d55d5c1d WebKit!WebCore::TimerWindowWndProc(struct HWND__ * hWnd = 0x00000000`005c1104, unsigned int message = 0xc258, unsigned int64 wParam = 0, int64 lParam = 0n0)+0xbe [C:\home\webkit\gc\Source\WebCore\platform\win\MainThreadSharedTimerWin.cpp @ 89]
29 000000df`99cfe330 00007fff`d55d5612 USER32!UserCallWinProcCheckWow+0x2bd
2a 000000df`99cfe4c0 00007fff`8a969ad1 USER32!DispatchMessageWorker+0x1e2
2b 000000df`99cfe540 00007fff`8a96acb8 DumpRenderTreeLib!runTest(class std::basic_string<char,std::char_traits<char>,std::allocator<char> > * inputLine = 0x000000df`99cff5b0 "http://127.0.0.1:8000/websocket/construct-in-detached-frame.html'--absolutePath'C:\home\webkit\gc\LayoutTests\http\tests\websocket\construct-in-detached-frame.html'--timeout'30000")+0xbd1 [C:\home\webkit\gc\Tools\DumpRenderTree\win\DumpRenderTree.cpp @ 1306]
2c 000000df`99cfec50 00007fff`8a96aedf DumpRenderTreeLib!main(int argc = 0n2, char ** argv = 0x00000213`9864bab0)+0x748 [C:\home\webkit\gc\Tools\DumpRenderTree\win\DumpRenderTree.cpp @ 1663]
2d 000000df`99cff6d0 00007ff7`c5531a0a DumpRenderTreeLib!dllLauncherEntryPoint(int argc = 0n2, char ** argv = 0x00000213`9864bab0)+0x2f [C:\home\webkit\gc\Tools\DumpRenderTree\win\DumpRenderTree.cpp @ 1704]
2e 000000df`99cff700 00007ff7`c5535738 DumpRenderTree!main(int argc = 0n2, char ** argv = 0x00000213`9864bab0)+0x4aa [C:\home\webkit\gc\Tools\win\DLLLauncher\DLLLauncherMain.cpp @ 222]
2f (Inline Function) --------`-------- DumpRenderTree!invoke_main(void)+0x22 [d:\agent\_work\63\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl @ 78]
30 000000df`99cffc00 00007fff`d5997c24 DumpRenderTree!__scrt_common_main_seh(void)+0x10c [d:\agent\_work\63\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl @ 288]
31 000000df`99cffc40 00007fff`d6d4d4d1 KERNEL32!BaseThreadInitThunk+0x14
32 000000df`99cffc70 00000000`00000000 ntdll!RtlUserThreadStart+0x21

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210108/4ba70807/attachment-0001.htm>