[Webkit-unassigned] [Bug 231330] New: Deadlocks in UIKeyboardTaskQueue from WKContentView(WKInteraction) endSelectionChange.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=231330

            Bug ID: 231330
           Summary: Deadlocks in UIKeyboardTaskQueue from
                    WKContentView(WKInteraction) endSelectionChange.
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: iPhone / iPad
                OS: iOS 14
            Status: NEW
          Severity: Major
          Priority: P2
         Component: Accessibility
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: justincohen at google.com
                CC: andresg_22 at apple.com,
                    webkit-bug-importer at group.apple.com

Chrome is seeing a growing number of watchdog kills a day with stacks similar to below on iOS 15.0 and 15.1, as iOS 15 continues to be adopted.

Perhaps the fix for https://bugs.webkit.org/show_bug.cgi?id=228051 https://trac.webkit.org/changeset/280019/webkit introduced a deadlock?

0x00000001baaa5550      (libsystem_kernel.dylib + 0x00001550)           __psynch_cvwait
0x00000001daed3994      (libsystem_pthread.dylib + 0x00001994)          _pthread_cond_wait$VARIANT$armv81
0x0000000182c85d2c      (Foundation + 0x00084d2c)               -[NSCondition waitUntilDate:]
0x0000000182c780ec      (Foundation + 0x000770ec)               -[NSConditionLock lockWhenCondition:beforeDate:]
0x0000000183d9997c      (UIKitCore + 0x0057897c)                -[UIKeyboardTaskQueue lockWhenReadyForMainThread]
0x0000000183b73d70      (UIKitCore + 0x00352d70)                -[UIKeyboardTaskQueue waitUntilAllTasksAreFinished]
0x00000001844d02f0      (UIKitCore + 0x00caf2f0)                -[UIKeyboardImpl generateAutofillCandidateByAddingTask:]
0x0000000183e04214      (UIKitCore + 0x005e3214)                -[UIKeyboardImpl selectionDidChange:]
0x000000018f64ecc0      (WebKit + 0x00770cc0)           -[WKContentView(WKInteraction) endSelectionChange]
0x0000000184868f74      (UIKitCore + 0x0000000001047f74)                -[UITextSelectionInteraction tappedToPositionCursorWithGesture:atPoint:granularity:completionHandler:]
0x0000000184868cac      (UIKitCore + 0x0000000001047cac)                -[UITextSelectionInteraction _checkForRepeatedTap:gestureLocationOut:]
0x0000000184869724      (UIKitCore + 0x0000000001048724)                -[UITextSelectionInteraction _handleMultiTapGesture:]
0x0000000183cc04cc      (UIKitCore + 0x0049f4cc)                -[UIApplication sendAction:to:from:forEvent:]
0x00000001842a0674      (UIKitCore + 0x00a7f674)                -[UITextMultiTapRecognizer onStateUpdate:]
0x00000001839ef784      (UIKitCore + 0x001ce784)                -[UIGestureRecognizerTarget _sendActionWithGestureRecognizer:]
0x00000001839b8f64      (UIKitCore + 0x00197f64)                _UIGestureRecognizerSendTargetActions
0x0000000183983a7c      (UIKitCore + 0x00162a7c)                _UIGestureRecognizerSendActions
0x00000001839bb23c      (UIKitCore + 0x0019a23c)                -[UIGestureRecognizer _updateGestureForActiveEvents]
0x0000000183975364      (UIKitCore + 0x00154364)                _UIGestureEnvironmentUpdate
0x00000001839a7f20      (UIKitCore + 0x00186f20)                -[UIGestureEnvironment _updateForEvent:window:]
0x00000001839b477c      (UIKitCore + 0x0019377c)                -[UIWindow sendEvent:]

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20211006/11c5915b/attachment-0001.htm>