[Webkit-unassigned] [Bug 255788] New: REGRESSION (263108 at main): [ Ventura debug ] ASSERTION FAILED: WTF::WeakPtr<WebKit::RemoteScrollingCoordinatorProxy, WTF::DefaultWeakPtrImpl>::operator->() const

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=255788

            Bug ID: 255788
           Summary: REGRESSION (263108 at main): [ Ventura debug ] ASSERTION
                    FAILED:
                    WTF::WeakPtr<WebKit::RemoteScrollingCoordinatorProxy,
                    WTF::DefaultWeakPtrImpl>::operator->() const
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: rackler at apple.com

Description:
tiled-drawing/scrolling/scroll-snap/scroll-snap-mandatory-async-overflow.html is a consistent crash

The test was consistently passing until range https://commits.webkit.org/compare/263108@main...263104@main.  The assertion references changes like setNodeScrollSnapInProgress made in https://commits.webkit.org/263108@main, making it the likely culprit.

This issue can be reproduced using command:
run-webkit-tests --exit-after-n-failures 1 --exit-after-n-crashes-or-timeouts 1 --iterations 1 --no-retry-failures --use-gpu-process --remote-layer-tree  tiled-drawing/scrolling/scroll-snap/scroll-snap-mandatory-async-overflow.html

History:
https://results.webkit.org/?suite=layout-tests&test=tiled-drawing%2Fscrolling%2Fscroll-snap%2Fscroll-snap-mandatory-async-overflow.html&flavor=gpuprocess

Crash Log:
No crash log found for WebKitTestRunner:72968.

stdout:

stderr:
ASSERTION FAILED: !m_impl || !m_shouldEnableAssertions || m_impl->wasConstructedOnMainThread() == isMainThread()
/Volumes/Data/worker/Apple-Ventura-Debug-Build/build/WebKitBuild/Debug/usr/local/include/wtf/WeakPtr.h(139) : T *WTF::WeakPtr<WebKit::RemoteScrollingCoordinatorProxy>::operator->() const [T = WebKit::RemoteScrollingCoordinatorProxy, WeakPtrImpl = WTF::DefaultWeakPtrImpl]
1   0x12114f919 WTFCrash
2   0x15389cb8b WTFCrashWithInfo(int, char const*, char const*, int)
3   0x15568e41a WTF::WeakPtr<WebKit::RemoteScrollingCoordinatorProxy, WTF::DefaultWeakPtrImpl>::operator->() const
4   0x15568e7f1 WebKit::RemoteScrollingTree::scrollingTreeNodeDidBeginScrollSnapping(unsigned long long)
5   0x12e4e54fa WebCore::ScrollingTree::setNodeScrollSnapInProgress(unsigned long long, bool)
6   0x12e502302 WebCore::ScrollingTreeScrollingNode::setScrollSnapInProgress(bool)
7   0x12e508c22 WebCore::ThreadedScrollingTreeScrollingNodeDelegate::willStartScrollSnapAnimation()
8   0x12e57db30 WebCore::ScrollingEffectsController::startScrollSnapAnimation()
9   0x12c4610c9 WebCore::ScrollingEffectsController::processWheelEventForScrollSnap(WebCore::PlatformWheelEvent const&)
10  0x12c460407 WebCore::ScrollingEffectsController::handleWheelEvent(WebCore::PlatformWheelEvent const&)
11  0x12ba70589 WebCore::ScrollingTreeScrollingNodeDelegateMac::handleWheelEvent(WebCore::PlatformWheelEvent const&)
12  0x12ba74d87 WebCore::ScrollingTreeOverflowScrollingNodeMac::handleWheelEvent(WebCore::PlatformWheelEvent const&, WebCore::EventTargeting)
13  0x12e4e0da1 WebCore::ScrollingTree::handleWheelEvent(WebCore::PlatformWheelEvent const&, WTF::OptionSet<WebCore::WheelEventProcessingSteps>)::$_3::operator()() const
14  0x12e4e0a40 WebCore::ScrollingTree::handleWheelEvent(WebCore::PlatformWheelEvent const&, WTF::OptionSet<WebCore::WheelEventProcessingSteps>)
15  0x1556908fa WebKit::RemoteLayerTreeEventDispatcher::internalHandleWheelEvent(WebCore::PlatformWheelEvent const&, WTF::OptionSet<WebCore::WheelEventProcessingSteps>)
16  0x155690483 WebKit::RemoteLayerTreeEventDispatcher::scrollingThreadHandleWheelEvent(WebKit::WebWheelEvent const&, WebCore::RectEdges<bool>)
17  0x1556a82d8 WebKit::RemoteLayerTreeEventDispatcher::handleWheelEvent(WebKit::WebWheelEvent const&, WebCore::RectEdges<bool>)::$_10::operator()() const
18  0x1556a8209 WTF::Detail::CallableWrapper<WebKit::RemoteLayerTreeEventDispatcher::handleWheelEvent(WebKit::WebWheelEvent const&, WebCore::RectEdges<bool>)::$_10, void>::call()
19  0x12117a4b2 WTF::Function<void ()>::operator()() const
20  0x121210afe WTF::RunLoop::performWork()
21  0x121214aee WTF::RunLoop::performWork(void*)
22  0x7ff816c20b78 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__
23  0x7ff816c20b27 __CFRunLoopDoSource0
24  0x7ff816c20901 __CFRunLoopDoSources0
25  0x7ff816c1f57b __CFRunLoopRun
26  0x7ff816c1eb60 CFRunLoopRunSpecific
27  0x7ff816ca37aa CFRunLoopRun
28  0x121214fa6 WTF::RunLoop::run()
29  0x121212744 WTF::RunLoop::create(char const*, WTF::ThreadType, WTF::Thread::QOS)::$_1::operator()() const
30  0x1212126e9 WTF::Detail::CallableWrapper<WTF::RunLoop::create(char const*, WTF::ThreadType, WTF::Thread::QOS)::$_1, void>::call()
31  0x12117a4b2 WTF::Function<void ()>::operator()() const

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230421/d7833666/attachment.htm>