Bug 214322

Summary: ASSERTION FAILED: m_wrapper on http/tests/workers/worker-importScripts-banned-mimetype.html
Product: WebKit Reporter: Hector Lopez <hector_i_lopez>
Component: DOMAssignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal CC: ap, ayumi_kojima, beidson, cdumez, tsavell, webkit-bot-watchers-bugzilla, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
none
crash log none

Description Hector Lopez 2020-07-14 14:01:05 PDT 
http/tests/workers/worker-importScripts-banned-mimetype.html

It looks like this test is a flakey crash. Seeing it sporadically through history.

History:
https://results.webkit.org/?suite=layout-tests&test=http%2Ftests%2Fworkers%2Fworker-importScripts-banned-mimetype.html

Crash log:
CoreSimulator 704.12 - Device: Managed 0 (55D2C54D-A8DB-485B-8ABB-513802BE7C41) - Runtime: iOS 13.4 (17E255) - DeviceType: iPhone SE
CRASHING TEST: /workers/worker-importScripts-banned-mimetype.html

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore      	0x000000046d55de5e WTFCrash + 14 (Assertions.cpp:295)
1   com.apple.WebCore             	0x0000000472d3c3eb WTFCrashWithInfo(int, char const*, char const*, int) + 27
2   com.apple.WebCore             	0x0000000474ebde5f WebCore::JSEventListener::ensureJSFunction(WebCore::ScriptExecutionContext&) const + 639 (JSEventListener.h:125)
3   com.apple.WebCore             	0x0000000474ebd1bd WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext&, WebCore::Event&) + 205 (JSEventListener.cpp:113)
4   com.apple.WebCore             	0x00000004755ab127 WebCore::EventTarget::innerInvokeEventListeners(WebCore::Event&, WTF::Vector<WTF::RefPtr<WebCore::RegisteredEventListener, WTF::DumbPtrTraits<WebCore::RegisteredEventListener> >, 1ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>, WebCore::EventTarget::EventInvokePhase) + 1063 (EventTarget.cpp:342)
5   com.apple.WebCore             	0x00000004755a7370 WebCore::EventTarget::fireEventListeners(WebCore::Event&, WebCore::EventTarget::EventInvokePhase) + 720 (EventTarget.cpp:273)
Comment 1 Radar WebKit Bug Importer 2020-07-14 14:01:38 PDT 
<rdar://problem/65563200>
Comment 2 Hector Lopez 2020-07-14 14:27:13 PDT 
Created attachment 404285 [details]
Patch
Comment 3 Truitt Savell 2020-07-14 14:28:50 PDT 
Comment on attachment 404285 [details]
Patch

Clearing flags on attachment: 404285

Committed r264375: <https://trac.webkit.org/changeset/264375>
Comment 4 Ryan Haddad 2020-07-14 14:37:34 PDT 
Created attachment 404286 [details]
crash log

ASSERTION FAILED: m_wrapper
./bindings/js/JSEventListener.h(125) : JSC::JSObject *WebCore::JSEventListener::ensureJSFunction(WebCore::ScriptExecutionContext &) const
Comment 5 Alexey Proskuryakov 2020-07-14 22:35:35 PDT 
It would be useful to find a repro case for this I think.
Comment 6 ayumi_kojima 2021-08-02 14:54:46 PDT 
I was able to reproduce the crash on Big Sur arm64 (Remote machine) using:

run-webkit-tests --iterations 100 --exit-after-n-failures 1 --exit-after-n-crashes-or-timeouts 1 http/tests/workers/worker-importScripts-banned-mimetype.html --debug

However, no crash log was obtained with this crash.