[Webkit-unassigned] [Bug 247387] New: WebKit library via java fails on MacOS Intel with Ventura in JavaScriptCore llint_entry

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=247387

            Bug ID: 247387
           Summary: WebKit library via java fails on MacOS Intel with
                    Ventura in JavaScriptCore llint_entry
           Product: WebKit
           Version: Other
          Hardware: Mac (Intel)
                OS: macOS 13
            Status: NEW
          Severity: Major
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: openaudible at email.tg

Created attachment 463372

  --> https://bugs.webkit.org/attachment.cgi?id=463372&action=review

VM Crash Log

Java GUI applications that use webkit are now failing for users that have upgraded to Ventura running on Intel. (M1/Rosetta users not affected.) 

This will break a lot of apps that embed a browser into a java based desktop app, as google.com's main page can't be rendered without crashing.

Two github issues are tracking this (with full crash logs and a discussion):

https://github.com/openaudible/openaudible/issues/1050
https://github.com/eclipse-platform/eclipse.platform.swt/issues/452

This is an odd problem, as running from command line (using "java -jar application.jar) does not crash, but running using the Eclipse launcher, or the very common Instal4J "JavaApplicationStub" launcher will crash.

One can reproduce this by downloading OpenAudible for Intel on Intel machine running Mac OS 13 (Ventura) and select menu "Controls: Connect to Audible"

Eclipse is also having this issue, but not positive full steps to open the eclipse web browser.

Would be nice to be able to run this against a debug version of JavaScriptCore and drop into a debugger to see what is going on.. Our apps have worked up until the first reports on Ventura beta. 

I'm seeing SIGSEGV, SIGNAL, Code 5 Trace/BPT and SIGABRT errors, all about 4 recursion levels into llint_entry. 

Native frames: (J=compiled Java code, A=aot compiled Java code, j=interpreted, Vv=VM code, C=native code)
C  0x000045a3f1a440a4
C  [JavaScriptCore+0x55177c]  llint_entry+0x1d192
C  [JavaScriptCore+0x552615]  llint_entry+0x1e02b
C  [JavaScriptCore+0x55177c]  llint_entry+0x1d192
C  [JavaScriptCore+0x55177c]  llint_entry+0x1d192
C  [JavaScriptCore+0x5343e7]  vmEntryToJavaScript+0xd8
C  [JavaScriptCore+0xccf61d]  JSC::Interpreter::executeProgram(JSC::SourceCode const&, JSC::JSGlobalObject*, JSC::JSObject*)+0x45d
C  [JavaScriptCore+0xf7957a]  JSC::evaluate(JSC::JSGlobalObject*, JSC::SourceCode const&, JSC::JSValue, WTF::NakedPtr<JSC::Exception>&)+0xfa

Attached is a typical crash log.

Any assistance appreciated!

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20221102/d8addbae/attachment.htm>