Bug 207061

Summary: [ macOS wk1 ] storage/indexeddb/cursor-value-private.html is flaky crashing
Product: WebKit Reporter: Jacob Uphoff <jacob_uphoff>
Component: New BugsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED CONFIGURATION CHANGED    
Severity: Normal CC: cdumez, webkit-bot-watchers-bugzilla, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Crash log none

Description Jacob Uphoff 2020-01-31 11:37:16 PST 
Created attachment 389385 [details]
Crash log

storage/indexeddb/cursor-value-private.html 

This has only crashed twice in all visible history, however both crashes were on Catalina wk1 

I was not able to reproduce on iterations x5000

History:
https://results.webkit.org/?suite=layout-tests&test=storage%2Findexeddb%2Fcursor-value-private.html&platform=ios&platform=mac

Crash:

Process:               DumpRenderTree [49352]
Path:                  /Volumes/VOLUME/*/DumpRenderTree
Identifier:            DumpRenderTree
Version:               0
Code Type:             X86-64 (Native)
Parent Process:        Python [46345]
Responsible:           bash [402]
User ID:               501

Date/Time:             2020-01-31 11:03:11.035 -0800
OS Version:            Mac OS X 10.15.1 (19B88)
Report Version:        12
Bridge OS Version:     4.1 (17P1081)
Anonymous UUID:        9FEF4D39-50DC-A27E-425C-CBB98DC5BCE6


Time Awake Since Boot: 1400000 seconds

System Integrity Protection: enabled

Crashed Thread:        30  IndexedDB

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x0000000000011850
Exception Note:        EXC_CORPSE_NOTIFY

Termination Signal:    Segmentation fault: 11
Termination Reason:    Namespace SIGNAL, Code 0xb
Terminating Process:   exc handler [49352]

VM Regions Near 0x11850:
--> 
    __TEXT                 0000000108244000-00000001082a1000 [  372K] r-x/r-x SM=COW  /Volumes/VOLUME/*

Application Specific Information:
CRASHING TEST: storage/indexeddb/cursor-value-private.html

Thread 0:: Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib        	0x00007fff66bc7166 mach_msg_trap + 10
1   libsystem_kernel.dylib        	0x00007fff66bc76cc mach_msg + 60
2   com.apple.CoreFoundation      	0x00007fff2f5a536b __CFRunLoopServiceMachPort + 322
3   com.apple.CoreFoundation      	0x00007fff2f5a4907 __CFRunLoopRun + 1695
4   com.apple.CoreFoundation      	0x00007fff2f5a3fe3 CFRunLoopRunSpecific + 499
5   DumpRenderTree                	0x00000001082586f4 runTest(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) + 2675 (DumpRenderTree.mm:2118)
6   DumpRenderTree                	0x00000001082578ae dumpRenderTree(int, char const**) + 2813 (DumpRenderTree.mm:1228)
7   DumpRenderTree                	0x00000001082592e1 DumpRenderTreeMain(int, char const**) + 1438 (DumpRenderTree.mm:1462)
8   libdyld.dylib                 	0x00007fff66a7e2e5 start + 1
Comment 1 Radar WebKit Bug Importer 2020-01-31 11:37:47 PST 
<rdar://problem/59069035>
Comment 2 Chris Dumez 2020-01-31 12:06:56 PST 
Thread 30 Crashed:: IndexedDB
0   com.apple.JavaScriptCore      	0x0000000108586d2a WTF::equal(WTF::StringImpl const*, unsigned char const*) + 58 (StringImpl.cpp:1677)
1   com.apple.JavaScriptCore      	0x000000010854624f std::__1::pair<std::__1::pair<WTF::Packed<WTF::StringImpl*>*, bool>, unsigned int> WTF::HashTable<WTF::Packed<WTF::StringImpl*>, WTF::Packed<WTF::StringImpl*>, WTF::IdentityExtractor, WTF::StringHash, WTF::HashTraits<WTF::Packed<WTF::StringImpl*> >, WTF::HashTraits<WTF::Packed<WTF::StringImpl*> > >::fullLookupForWriting<WTF::HashSetTranslatorAdapter<WTF::CStringTranslator>, unsigned char const*>(unsigned char const* const&) + 319 (HashTable.h:805)
2   com.apple.JavaScriptCore      	0x0000000108545f9a WTF::HashTableAddResult<WTF::HashTableIterator<WTF::Packed<WTF::StringImpl*>, WTF::Packed<WTF::StringImpl*>, WTF::IdentityExtractor, WTF::StringHash, WTF::HashTraits<WTF::Packed<WTF::StringImpl*> >, WTF::HashTraits<WTF::Packed<WTF::StringImpl*> > > > WTF::HashTable<WTF::Packed<WTF::StringImpl*>, WTF::Packed<WTF::StringImpl*>, WTF::IdentityExtractor, WTF::StringHash, WTF::HashTraits<WTF::Packed<WTF::StringImpl*> >, WTF::HashTraits<WTF::Packed<WTF::StringImpl*> > >::addPassingHashCode<WTF::HashSetTranslatorAdapter<WTF::CStringTranslator>, unsigned char const* const&, unsigned char const* const&>(unsigned char const* const&, unsigned char const* const&) + 218 (HashTable.h:1001)
3   com.apple.JavaScriptCore      	0x00000001085435c2 WTF::AtomStringImpl::add(unsigned char const*) + 82 (AtomStringImpl.cpp:93)
4   com.apple.JavaScriptCore      	0x00000001089d4ece JSC::BuiltinExecutables::functionPrototypeSymbolHasInstanceCodeExecutable() + 78 (IdentifierInlines.h:126)
5   com.apple.JavaScriptCore      	0x0000000108856b8c JSC::functionPrototypeSymbolHasInstanceCodeGenerator(JSC::VM&) + 28 (JSCBuiltins.cpp:1763)
6   com.apple.JavaScriptCore      	0x0000000109112cbd JSC::FunctionPrototype::addFunctionProperties(JSC::VM&, JSC::JSGlobalObject*, JSC::JSFunction**, JSC::JSFunction**, JSC::JSFunction**) + 301 (FunctionPrototype.cpp:68)
7   com.apple.JavaScriptCore      	0x000000010916e63f JSC::JSGlobalObject::init(JSC::VM&) + 1183 (JSGlobalObject.cpp:554)
8   com.apple.JavaScriptCore      	0x000000010917a1b9 JSC::JSGlobalObject::finishCreation(JSC::VM&) + 121 (JSCellInlines.h:129)
9   com.apple.JavaScriptCore      	0x000000010917a04c JSC::JSGlobalObject::create(JSC::VM&, JSC::Structure*) + 60 (JSGlobalObject.cpp:2129)
10  com.apple.WebCore             	0x000000010d549a78 WebCore::IDBServer::IDBSerializationContext::initializeVM() + 264 (IDBSerializationContext.cpp:81)
11  com.apple.WebCore             	0x000000010d549bbe WebCore::IDBServer::IDBSerializationContext::vm() + 14 (IDBSerializationContext.cpp:87)
12  com.apple.WebCore             	0x000000010d571da0 WebCore::IDBServer::MemoryObjectStore::updateIndexesForPutRecord(WebCore::IDBKeyData const&, WebCore::ThreadSafeDataBuffer const&) + 48
13  com.apple.WebCore             	0x000000010d567ddc WebCore::IDBServer::MemoryObjectStore::addRecord(WebCore::IDBServer::MemoryBackingStoreTransaction&, WebCore::IDBKeyData const&, WebCore::IDBValue const&) + 236 (MemoryObjectStore.cpp:275)
14  com.apple.WebCore             	0x000000010d56ad61 WebCore::IDBServer::MemoryIDBBackingStore::addRecord(WebCore::IDBResourceIdentifier const&, WebCore::IDBObjectStoreInfo const&, WebCore::IDBKeyData const&, WebCore::IDBValue const&) + 305
15  com.apple.WebCore             	0x000000010d599407 WebCore::IDBServer::UniqueIDBDatabase::putOrAdd(WebCore::IDBRequestData const&, WebCore::IDBKeyData const&, WebCore::IDBValue const&, WebCore::IndexedDB::ObjectStoreOverwriteMode, WTF::Function<void (WebCore::IDBError const&, WebCore::IDBKeyData const&)>) + 2807 (IDBError.h:36)
16  com.apple.WebCore             	0x000000010d59da3c WebCore::IDBServer::UniqueIDBDatabaseTransaction::putOrAdd(WebCore::IDBRequestData const&, WebCore::IDBKeyData const&, WebCore::IDBValue const&, WebCore::IndexedDB::ObjectStoreOverwriteMode) + 140 (UniqueIDBDatabaseTransaction.cpp:263)
17  com.apple.WebCore             	0x000000010d54b11f WebCore::IDBServer::IDBServer::putOrAdd(WebCore::IDBRequestData const&, WebCore::IDBKeyData const&, WebCore::IDBValue const&, WebCore::IndexedDB::ObjectStoreOverwriteMode) + 95 (IDBServer.cpp:309)
18  com.apple.WebKitLegacy        	0x000000010c05fc3c WTF::Detail::CallableWrapper<InProcessIDBServer::putOrAdd(WebCore::IDBRequestData const&, WebCore::IDBKeyData const&, WebCore::IDBValue const&, WebCore::IndexedDB::ObjectStoreOverwriteMode)::$_33, void>::call() + 76 (Locker.h:69)
19  com.apple.WebKitLegacy        	0x000000010c07f575 WebCore::StorageThread::threadEntryPoint() + 101 (StorageThread.cpp:79)
20  com.apple.JavaScriptCore      	0x000000010858eb3c WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*) + 124 (Threading.cpp:149)
21  com.apple.JavaScriptCore      	0x0000000108590f79 WTF::wtfThreadEntryPoint(void*) + 9 (ThreadingPOSIX.cpp:201)
22  libsystem_pthread.dylib       	0x00007fff66c8ad36 _pthread_start + 125
23  libsystem_pthread.dylib       	0x00007fff66c8758f thread_start + 15
Comment 3 Alexey Proskuryakov 2020-02-03 22:23:35 PST 
Is this a duplicate of bug 207137?
Comment 4 Ryan Haddad 2020-07-01 15:40:16 PDT 
Closing since we don’t have any test expectations in place and it doesn’t repro.