Bug 214341

Created attachment 404319 [details]
Sample crash log

r257833                       TEXT (Expected: FAIL) 
r257839                       CRASH (Expected: FAIL)

It does not fail on its own, it needs to be run twice or with some other test in front of it in the same WTR process (i.e. --run-singly does not crash).

Sample trace (line numbers from attached file from build 6742/r264371)

Thread 1 (Thread 0x7f416f08d2c0 (LWP 21117)):
#0  0x00007f4177ece9fa in WTFCrash() () at ../../Source/WTF/wtf/Assertions.cpp:295
#1  0x00007f418623ea32 in CRASH_WITH_INFO(...) () at DerivedSources/ForwardingHeaders/wtf/Assertions.h:713
#2  0x00007f41892f3c39 in WebCore::FrameSelection::recomputeCaretRect() (this=0x7f411c1acd10) at ../../Source/WebCore/editing/FrameSelection.cpp:1724
#3  0x00007f41892f5eb1 in WebCore::FrameSelection::updateAppearance() (this=0x7f411c1acd10) at ../../Source/WebCore/editing/FrameSelection.cpp:2143
#4  0x00007f41892ed9ad in WebCore::FrameSelection::updateAndRevealSelection(WebCore::AXTextStateChangeIntent const&) (this=0x7f411c1acd10, intent=...) at ../../Source/WebCore/editing/FrameSelection.cpp:468
#5  0x00007f41892f7968 in WebCore::FrameSelection::updateAppearanceAfterLayoutOrStyleChange() (this=0x7f411c1acd10) at ../../Source/WebCore/editing/FrameSelection.cpp:2499
#6  0x00007f41892f78d6 in WebCore::FrameSelection::appearanceUpdateTimerFired() (this=0x7f411c1acd10) at ../../Source/WebCore/editing/FrameSelection.cpp:2490
#7  0x00007f4189308d0d in std::__invoke_impl<void, void (WebCore::FrameSelection::*&)(), WebCore::FrameSelection*&>(std::__invoke_memfun_deref, void (WebCore::FrameSelection::*&)(), WebCore::FrameSelection*&) (__f=@0x7f411cd24688: (void (WebCore::FrameSelection::*)(WebCore::FrameSelection * const)) 0x7f41892f7898 <WebCore::FrameSelection::appearanceUpdateTimerFired()>, __t=@0x7f411cd24698: 0x7f411c1acd10) at /usr/include/c++/9.3.0/bits/invoke.h:73
#8  0x00007f4189308bfb in std::__invoke<void (WebCore::FrameSelection::*&)(), WebCore::FrameSelection*&>(void (WebCore::FrameSelection::*&)(), WebCore::FrameSelection*&) (__fn=@0x7f411cd24688: (void (WebCore::FrameSelection::*)(WebCore::FrameSelection * const)) 0x7f41892f7898 <WebCore::FrameSelection::appearanceUpdateTimerFired()>) at /usr/include/c++/9.3.0/bits/invoke.h:95
#9  0x00007f4189308b03 in std::_Bind<void (WebCore::FrameSelection::*(WebCore::FrameSelection*))()>::__call<void, , 0ul>(std::tuple<>&&, std::_Index_tuple<0ul>) (this=0x7f411cd24688, __args=...) at /usr/include/c++/9.3.0/functional:400
#10 0x00007f4189308a4b in std::_Bind<void (WebCore::FrameSelection::*(WebCore::FrameSelection*))()>::operator()<, void>() (this=0x7f411cd24688) at /usr/include/c++/9.3.0/functional:484
#11 0x00007f41893089f8 in WTF::Detail::CallableWrapper<std::_Bind<void (WebCore::FrameSelection::*(WebCore::FrameSelection*))()>, void>::call() (this=0x7f411cd24680) at DerivedSources/ForwardingHeaders/wtf/Function.h:52
#12 0x00007f418624203b in WTF::Function<void ()>::operator()() const (this=0x7f411c1ace10) at DerivedSources/ForwardingHeaders/wtf/Function.h:84
#13 0x00007f41869d9d84 in WebCore::Timer::fired() (this=0x7f411c1acde8) at DerivedSources/ForwardingHeaders/WebCore/Timer.h:126
#14 0x00007f4189d53cd8 in WebCore::ThreadTimers::sharedTimerFiredInternal() (this=0x7f416e785d48) at ../../Source/WebCore/platform/ThreadTimers.cpp:127
#15 0x00007f4189d536d7 in WebCore::ThreadTimers::<lambda()>::operator()(void) const (__closure=0x7f416e7f9c48) at ../../Source/WebCore/platform/ThreadTimers.cpp:67
#16 0x00007f4189d58f90 in WTF::Detail::CallableWrapper<WebCore::ThreadTimers::setSharedTimer(WebCore::SharedTimer*)::<lambda()>, void>::call(void) (this=0x7f416e7f9c40) at DerivedSources/ForwardingHeaders/wtf/Function.h:52
#17 0x00007f418624203b in WTF::Function<void ()>::operator()() const (this=0x7f4192009ac8 <WebCore::MainThreadSharedTimer::singleton()::instance+8>) at DerivedSources/ForwardingHeaders/wtf/Function.h:84
#18 0x00007f4189d22fcc in WebCore::MainThreadSharedTimer::fired() (this=0x7f4192009ac0 <WebCore::MainThreadSharedTimer::singleton()::instance>) at ../../Source/WebCore/platform/MainThreadSharedTimer.cpp:83
#19 0x00007f4189d2a32c in WTF::RunLoop::Timer<WebCore::MainThreadSharedTimer>::fired() (this=0x7f4192009ad0 <WebCore::MainThreadSharedTimer::singleton()::instance+16>) at DerivedSources/ForwardingHeaders/wtf/RunLoop.h:177
#20 0x00007f4177f89759 in WTF::RunLoop::TimerBase::<lambda(gpointer)>::operator()(gpointer) const (__closure=0x0, userData=0x7f4192009ad0 <WebCore::MainThreadSharedTimer::singleton()::instance+16>) at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:179
#21 0x00007f4177f89799 in WTF::RunLoop::TimerBase::<lambda(gpointer)>::_FUN(gpointer) () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:183
#22 0x00007f4177f88d7a in WTF::<lambda(GSource*, GSourceFunc, gpointer)>::operator()(GSource *, GSourceFunc, gpointer) const (__closure=0x0, source=0x561d6dab71a0, callback=0x7f4177f8977c <WTF::RunLoop::TimerBase::<lambda(gpointer)>::_FUN(gpointer)>, userData=0x7f4192009ad0 <WebCore::MainThreadSharedTimer::singleton()::instance+16>) at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:45
#23 0x00007f4177f88daa in WTF::<lambda(GSource*, GSourceFunc, gpointer)>::_FUN(GSource *, GSourceFunc, gpointer) () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:46
#24 0x00007f41712cdc3e in g_main_dispatch (context=0x561d6daae270) at ../glib/gmain.c:3309
#25 0x00007f41712cdc3e in g_main_context_dispatch (context=context@entry=0x561d6daae270) at ../glib/gmain.c:3974
#26 0x00007f41712cdff0 in g_main_context_iterate (context=0x561d6daae270, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4047
#27 0x00007f41712ce2e3 in g_main_loop_run (loop=0x561d6dadc300) at ../glib/gmain.c:4241
#28 0x00007f4177f8932a in WTF::RunLoop::run() () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:96
#29 0x00007f4187788c2d in WebKit::AuxiliaryProcessMain<WebKit::WebProcess, WebKit::WebProcessMainGtk>(int, char**) (argc=4, argv=0x7fff995aaf18) at ../../Source/WebKit/Shared/AuxiliaryProcessMain.h:68
#30 0x00007f4187786ee1 in WebKit::WebProcessMain(int, char**) (argc=4, argv=0x7fff995aaf18) at ../../Source/WebKit/WebProcess/gtk/WebProcessMainGtk.cpp:66
#31 0x0000561d6ce73da8 in main(int, char**) (argc=4, argv=0x7fff995aaf18) at ../../Source/WebKit/WebProcess/EntryPoint/unix/WebProcessMain.cpp:45