Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 095ae6775231c81c2776bad45ea1f61534835692
      
https://github.com/WebKit/WebKit/commit/095ae6775231c81c2776bad45ea1f61534835692
  Author: Cole Carley <[email protected]>
  Date:   2026-09-29 (Tue, 29 Sep 2026)

  Changed paths:
    M Source/WebCore/testing/TestPage.cpp

  Log Message:
  -----------
  TestPage crashes on iOS Debug
https://bugs.webkit.org/show_bug.cgi?id=325221
rdar://188344014

Reviewed by Yijia Huang.

createTestPage() never called WebCore::populateJITOperations(), so WebCore's
JIT operations were not registered with JSC::JITOperationList. When the CSS
selector compiler emitted a call to a WebCore operation,
JITOperationList::assertIsJITOperation() fired in Debug builds.

In a web process, WebCore::initializeMainThreadIfNeeded() registers these
operations, but it returns early on iOS when the web thread is in use, and
TestPageHarness doesn't go through it anyway. Call populateJITOperations()
from the one-time setup in createTestPage() so every test page has WebCore's
JIT operations registered. The call is idempotent.

* Source/WebCore/testing/TestPage.cpp:
(WebCore::createTestPage):

Canonical link: https://commits.webkit.org/322195@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to