[Webkit-unassigned] [Bug 281793] New: REGRESSION (280616 at main?):[macOS Debug wk2] ASSERTION FAILED: m_wrapper in *WebCore::JSEventListener::ensureJSFunction(ScriptExecutionContext

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=281793

            Bug ID: 281793
           Summary: REGRESSION (280616 at main?):[macOS Debug wk2] ASSERTION
                    FAILED: m_wrapper in
                    *WebCore::JSEventListener::ensureJSFunction(ScriptExec
                    utionContext
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: darbinyan at apple.com

The following test is a flaky crash on macOS Debug wk2. The crashes started within the range of 280616 at main that seems suspicious.

imported/w3c/web-platform-tests/navigation-api/ordering-and-transition/navigate-204-205-download-then-same-document.html


stderr:
ASSERTION FAILED: m_wrapper
/Volumes/Data/worker/Apple-Sequoia-Debug-Build/build/Source/WebCore/bindings/js/JSEventListener.h(164) : JSC::JSObject *WebCore::JSEventListener::ensureJSFunction(ScriptExecutionContext &) const
1   0x147923dc8 WebCore::JSEventListener::ensureJSFunction(WebCore::ScriptExecutionContext&) const
2   0x147997d44 WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext&, WebCore::Event&)
3   0x148738770 WebCore::EventTarget::innerInvokeEventListeners(WebCore::Event&, WTF::Vector<WTF::RefPtr<WebCore::RegisteredEventListener, WTF::RawPtrTraits<WebCore::RegisteredEventListener>, WTF::DefaultRefDerefTraits<WebCore::RegisteredEventListener>>, 1ul, WTF::CrashOnOverflow, 2ul, WTF::FastMalloc>, WebCore::EventTarget::EventInvokePhase)
4   0x148738140 WebCore::EventTarget::fireEventListeners(WebCore::Event&, WebCore::EventTarget::EventInvokePhase)
5   0x148737f3c WebCore::EventTarget::dispatchEvent(WebCore::Event&)
6   0x1484f4044 WebCore::AbortSignal::runAbortSteps()
7   0x1484f2d6c WebCore::AbortSignal::signalAbort(JSC::JSValue)
8   0x149767200 WebCore::Navigation::abortOngoingNavigation(WebCore::NavigateEvent&)
9   0x1497685d0 WebCore::Navigation::abortOngoingNavigationIfNeeded()
10  0x1497677fc WebCore::Navigation::innerDispatchNavigateEvent(WebCore::NavigationNavigationType, WTF::Ref<WebCore::NavigationDestination, WTF::RawPtrTraits<WebCore::NavigationDestination>, WTF::DefaultRefDerefTraits<WebCore::NavigationDestination>>&&, WTF::String const&, WebCore::FormState*, WebCore::SerializedScriptValue*)
11  0x149769600 WebCore::Navigation::dispatchPushReplaceReloadNavigateEvent(WTF::URL const&, WebCore::NavigationNavigationType, bool, WebCore::FormState*, WebCore::SerializedScriptValue*)


History:
https://results.webkit.org/?suite=layout-tests&test=imported%2Fw3c%2Fweb-platform-tests%2Fnavigation-api%2Fordering-and-transition%2Fnavigate-204-205-download-then-same-document.html&style=debug&flavor=wk2


Test result link:
https://build.webkit.org/results/Apple-Sequoia-Debug-AppleSilicon-WK2-Tests/285402@main%20(95)/imported/w3c/web-platform-tests/navigation-api/ordering-and-transition/navigate-204-205-download-then-same-document-crash-log.txt

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20241019/34919f1f/attachment.htm>