[Webkit-unassigned] [Bug 281198] New: JavaScriptCore Crashed in iOS17 and above system

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=281198

            Bug ID: 281198
           Summary: JavaScriptCore Crashed in iOS17 and above system
           Product: WebKit
           Version: Safari 18
          Hardware: iPhone / iPad
                OS: iOS 17
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: fenglishuai at yeah.net

Created attachment 472891

  --> https://bugs.webkit.org/attachment.cgi?id=472891&action=review

The attachment is from the user crash log collected by XCode

After the release of iOS17, our app has collected JavaScriptCore crashes, and the crash has recently appeared in iOS17 and above. The number of crashes collected recently is increasing.
It is the crash information of the App Store package obtained from XCode -> Window -> organiser -> Crashes
The file attached to the email is the crash log

The crash resaon is 
SEGV_ACCERR - Access Permissions Error
JavaScriptCore JSC::MarkedBlock:

The crash codebase is
0 JavaScriptCore JSC::MarkedBlock::aboutToMarkSlow(unsigned int)
1 JavaScriptCore JSC::JSObject::visitChildren(JSC::JSCell*, JSC::SlotVisitor&)
2 JavaScriptCore JSC::JSObject::visitChildren(JSC::JSCell*, JSC::SlotVisitor&)
3 JavaScriptCore JSC::SlotVisitor::drain(WTF::MonotonicTime)
4 JavaScriptCore JSC::SlotVisitor::drainFromShared(JSC::SlotVisitor::SharedDrainMode, WTF::MonotonicTime)
5 JavaScriptCore WTF::SharedTaskFunctor<void (), JSC::Heap::runBeginPhase(JSC::GCConductor)::$_15>::run()
6 JavaScriptCore WTF::ParallelHelperClient::runTask(WTF::RefPtr<WTF::SharedTask<void ()>, WTF::RawPtrTraits<WTF::SharedTask<void ()> >, WTF::DefaultRefDerefTraits<WTF::SharedTask<void ()> > > const&)
7 JavaScriptCore WTF::ParallelHelperPool::Thread::work()
8 JavaScriptCore WTF::Detail::CallableWrapper<WTF::AutomaticThread::start(WTF::AbstractLocker const&)::$_0, void>::call()
9 JavaScriptCore WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*)
10 JavaScriptCore WTF::wtfThreadEntryPoint(void*)
11 libsystem_pthread.dylib __pthread_start

Please help us analyze how to solve this problem

Thank you

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20241010/341f246d/attachment.htm>