Crash pointing to WTFCrashWithInfo under JavaScriptCore

Hi there,


We are observing some intermittent crashes on iOS12 devices. We are trying to execute a javascript function by using JavaScriptCore's JSObjectCallAsFunction method.


Every now and then, we see the following crash. No relevant information gets logged in XCode console. Coudn't share complete logs due to some propriety issue.


Has anyone seen this or point to anything worthwhile?


Much appreciated.



Date/Time: 2019-01-12 10:38:06.4177 +0400

Launch Time: 2019-01-12 10:37:27.7639 +0400

OS Version: iPhone OS 12.0.1 (16A405)

Baseband Version: 1.00.08

Report Version: 104



Exception Type: EXC_BAD_ACCESS (SIGSEGV)

Exception Subtype: KERN_INVALID_ADDRESS at 0x0000000000000008

VM Region Info: 0x8 is not in any region. Bytes before following region: 4301258744

REGION TYPE START - END [ VSIZE] PRT/MAX SHRMOD REGION DETAIL

UNUSED SPACE AT START

--->

__TEXT 0000000100600000-0000000100f8c000 [ 9776K] r-x/r-x SM=COW ...B.app/******



Highlighted by Thread: 5


Thread 5:

0 JavaScriptCore 0x00000001a6682fa8 WTFCrashWithInfo+ 28584 (int, char const*, char const*, int, unsigned long long, unsigned long long, unsigned long long) + 12

1 JavaScriptCore 0x00000001a6ddf1d8 JSC::CommonSlowPaths::opInByVal+ 7746008 (JSC::ExecState*, JSC::JSValue, JSC::JSValue, JSC::ArrayProfile*) + 400

2 JavaScriptCore 0x00000001a6f5aca4 slow_path_in_by_val + 204

3 JavaScriptCore 0x00000001a66e6524 llint_entry + 27060

4 JavaScriptCore 0x00000001a66e796c llint_entry + 32252

5 JavaScriptCore 0x00000001a66e796c llint_entry + 32252

6 JavaScriptCore 0x00000001a66df974 vmEntryToJavaScript + 308

7 JavaScriptCore 0x00000001a6d84958 JSC::Interpreter::executeCall+ 7375192 (JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 424

8 JavaScriptCore 0x00000001a6f4b660 JSC::profiledCall+ 9238112 (JSC::ExecState*, JSC::ProfilingReason, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 180

9 JavaScriptCore 0x00000001a6718200 JSObjectCallAsFunction + 372

We are seeing the same issue, has anyone found a solution to fix this problem?

Crash pointing to WTFCrashWithInfo under JavaScriptCore
 
 
Q