Bug 212903

Summary: [ iOS Debug ] REGRESSION (r262685): ASSERTION FAILED: !m_keyEventQueue.isEmpty() in WebKit::WebPageProxy::didReceiveEvent seen with editing/caret/ios/fixed-caret-position-after-scroll.html
Product: WebKit Reporter: Jacob Uphoff <jacob_uphoff>
Component: New BugsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED CONFIGURATION CHANGED    
Severity: Normal CC: sellyrachmayanti14, simon.fraser, webkit-bot-watchers-bugzilla, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
See Also: https://bugs.webkit.org/show_bug.cgi?id=212864

Description Jacob Uphoff 2020-06-08 08:03:09 PDT 
editing/caret/ios/fixed-caret-position-after-scroll.html

This test recently because a flaky crash and started around commit r262685 iOS Debug

History:

https://results.webkit.org/?suite=layout-tests&test=editing%2Fcaret%2Fios%2Ffixed-caret-position-after-scroll.html

Crash:

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x00000000bbadbeef
Exception Note:        EXC_CORPSE_NOTIFY

Termination Signal:    Segmentation fault: 11
Termination Reason:    Namespace SIGNAL, Code 0xb
Terminating Process:   exc handler [6790]

VM Regions Near 0xbbadbeef:
--> 
    __TEXT                 000000010403d000-0000000104141000 [ 1040K] r-x/r-x SM=COW  /Users/USER/Library/Developer/CoreSimulator/Devices/2AA1B096-38B4-42DE-8475-9D225A84C0B9/data/Containers/Bundle/Application/11C37290-4919-41B3-A0BC-8EFED8D8B50E/WebKitTestRunnerApp.app/WebKitTestRunnerApp

Application Specific Information:
CRASHING TEST: editing/caret/ios/emoji.html
CoreSimulator 704.12 - Device: Managed 7 (2AA1B096-38B4-42DE-8475-9D225A84C0B9) - Runtime: iOS 13.4 (17E255) - DeviceType: iPhone SE

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore      	0x000000010507652e WTFCrash + 14 (Assertions.cpp:303)
1   com.apple.WebKit              	0x00000001130d887b WTFCrashWithInfo(int, char const*, char const*, int) + 27
2   com.apple.WebKit              	0x0000000113eef06c WebKit::WebPageProxy::didReceiveEvent(unsigned int, bool) + 1596 (WebPageProxy.cpp:6948)
3   com.apple.WebKit              	0x0000000114a83a2e void IPC::callMemberFunctionImpl<WebKit::WebPageProxy, void (WebKit::WebPageProxy::*)(unsigned int, bool), std::__1::tuple<unsigned int, bool>, 0ul, 1ul>(WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(unsigned int, bool), std::__1::tuple<unsigned int, bool>&&, std::__1::integer_sequence<unsigned long, 0ul, 1ul>) + 190 (HandleMessage.h:42)
4   com.apple.WebKit              	0x0000000114a83820 void IPC::callMemberFunction<WebKit::WebPageProxy, void (WebKit::WebPageProxy::*)(unsigned int, bool), std::__1::tuple<unsigned int, bool>, std::__1::integer_sequence<unsigned long, 0ul, 1ul> >(std::__1::tuple<unsigned int, bool>&&, WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(unsigned int, bool)) + 112 (HandleMessage.h:48)
5   com.apple.WebKit              	0x0000000114a6e586 void IPC::handleMessage<Messages::WebPageProxy::DidReceiveEvent, WebKit::WebPageProxy, void (WebKit::WebPageProxy::*)(unsigned int, bool)>(IPC::Decoder&, WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(unsigned int, bool)) + 150 (HandleMessage.h:115)
6   com.apple.WebKit              	0x0000000114a6821e WebKit::WebPageProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 494 (WebPageProxyMessageReceiver.cpp:858)
7   com.apple.WebKit              	0x00000001131ec411 IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::Decoder&) + 305 (MessageReceiverMap.cpp:124)
8   com.apple.WebKit              	0x0000000113d301be WebKit::AuxiliaryProcessProxy::dispatchMessage(IPC::Connection&, IPC::Decoder&) + 46 (AuxiliaryProcessProxy.cpp:210)
9   com.apple.WebKit              	0x0000000113f2beaf WebKit::WebProcessProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 47 (WebProcessProxy.cpp:759)
10  com.apple.WebKit              	0x000000011314aa0f IPC::Connection::dispatchMessage(IPC::Decoder&) + 431 (Connection.cpp:1002)
11  com.apple.WebKit              	0x000000011314b340 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 528
12  com.apple.WebKit              	0x0000000113149d50 IPC::Connection::dispatchIncomingMessages() + 1168 (Connection.cpp:1184)
13  com.apple.WebKit              	0x000000011316a5a8 IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_7::operator()() + 72 (Connection.cpp:976)
14  com.apple.WebKit              	0x000000011316a4ce WTF::Detail::CallableWrapper<IPC::Connection::enqueueIncomingMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >)::$_7, void>::call() + 30 (Function.h:52)
15  com.apple.JavaScriptCore      	0x00000001050a1cd2 WTF::Function<void ()>::operator()() const + 130 (Function.h:84)
16  com.apple.JavaScriptCore      	0x000000010511b178 WTF::RunLoop::performWork() + 280 (RunLoop.cpp:120)
17  com.apple.JavaScriptCore      	0x000000010511c921 WTF::RunLoop::performWork(void*) + 33 (RunLoopCF.cpp:39)
18  com.apple.CoreFoundation      	0x000000010c055c71 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
19  com.apple.CoreFoundation      	0x000000010c055b9c __CFRunLoopDoSource0 + 76
20  com.apple.CoreFoundation      	0x000000010c0553cc __CFRunLoopDoSources0 + 268
21  com.apple.CoreFoundation      	0x000000010c04ff6e __CFRunLoopRun + 974
22  com.apple.CoreFoundation      	0x000000010c04f884 CFRunLoopRunSpecific + 404
23  com.apple.Foundation          	0x000000010b6c8831 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 211
24  org.webkit.WebKitTestRunnerApp	0x00000001040a4c1e WTR::TestController::platformRunUntil(bool&, WTF::Seconds) + 302
25  org.webkit.WebKitTestRunnerApp	0x000000010406122f WTR::TestController::runUntil(bool&, WTF::Seconds) + 79
26  org.webkit.WebKitTestRunnerApp	0x000000010404d870 WTR::TestController::platformResetStateToConsistentValues(WTR::TestOptions const&) + 1792
27  org.webkit.WebKitTestRunnerApp	0x0000000104067331 WTR::TestController::resetStateToConsistentValues(WTR::TestOptions const&, WTR::TestController::ResetStage) + 2193
28  org.webkit.WebKitTestRunnerApp	0x00000001040aac89 WTR::TestInvocation::invoke() + 521
29  org.webkit.WebKitTestRunnerApp	0x000000010406b2b6 WTR::TestController::runTest(char const*) + 534
30  org.webkit.WebKitTestRunnerApp	0x000000010406bce6 WTR::TestController::runTestingServerLoop() + 214
31  org.webkit.WebKitTestRunnerApp	0x0000000104061d17 WTR::TestController::run() + 39
32  org.webkit.WebKitTestRunnerApp	0x00000001040615e9 WTR::TestController::TestController(int, char const**) + 921
33  org.webkit.WebKitTestRunnerApp	0x0000000104061de3 WTR::TestController::TestController(int, char const**) + 35
34  org.webkit.WebKitTestRunnerApp	0x0000000104046e9c -[WebKitTestRunnerApp _runTestController] + 44
35  com.apple.Foundation          	0x000000010b6dea02 __NSThreadPerformPerform + 209
36  com.apple.CoreFoundation      	0x000000010c055c71 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
37  com.apple.CoreFoundation      	0x000000010c055b9c __CFRunLoopDoSource0 + 76
38  com.apple.CoreFoundation      	0x000000010c0553cc __CFRunLoopDoSources0 + 268
39  com.apple.CoreFoundation      	0x000000010c04ff6e __CFRunLoopRun + 974
40  com.apple.CoreFoundation      	0x000000010c04f884 CFRunLoopRunSpecific + 404
41  com.apple.GraphicsServices    	0x000000010bc64c1a GSEventRunModal + 139
42  com.apple.UIKitCore           	0x000000013e0f8220 UIApplicationMain + 1605
43  org.webkit.WebKitTestRunnerApp	0x0000000104047048 main + 136
44  libdyld.dylib                 	0x0000000111dc910d start + 1
Comment 1 Radar WebKit Bug Importer 2020-06-08 08:03:30 PDT 
<rdar://problem/64119053>
Comment 2 Ryan Haddad 2020-06-08 12:12:06 PDT 
ASSERTION FAILED: !m_keyEventQueue.isEmpty()
/Volumes/Data/slave/ios-simulator-13-debug/build/Source/WebKit/UIProcess/WebPageProxy.cpp(6948) : void WebKit::WebPageProxy::didReceiveEvent(uint32_t, bool)

It does indeed seem to be related to r262685.
Comment 3 Simon Fraser (smfr) 2020-06-08 12:35:29 PDT 
It would be fine to revert r262685.
Comment 4 Ryan Haddad 2020-06-08 13:07:30 PDT 
The change was reverted in https://trac.webkit.org/changeset/262685/webkit