Assertion failure: is<T>(), at /builds/worker/workspace/obj-build/dist/include/mozilla/Variant.h:746
Categories
(Core :: DOM: Workers, defect, P3)
Tracking
()
Tracking | Status | |
---|---|---|
firefox-esr102 | --- | unaffected |
firefox110 | --- | unaffected |
firefox111 | --- | wontfix |
firefox112 | --- | verified |
People
(Reporter: jkratzer, Assigned: yulia)
References
(Blocks 1 open bug, Regression)
Details
(Keywords: regression, testcase, Whiteboard: [bugmon:bisected,confirmed])
Attachments
(2 files)
Testcase found while fuzzing mozilla-central rev 5eb81f0156a8 (built with: --enable-address-sanitizer --enable-fuzzing).
Testcase can be reproduced using the following commands:
$ pip install fuzzfetch grizzly-framework
$ python -m fuzzfetch --build 5eb81f0156a8 --asan --fuzzing -n firefox
$ python -m grizzly.replay ./firefox/firefox testcase.zip
Assertion failure: is<T>(), at /builds/worker/workspace/obj-build/dist/include/mozilla/Variant.h:746
=================================================================
==35578==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000001 (pc 0x7f71d4e8b4b8 bp 0x7f71b6bbfc70 sp 0x7f71b6bbfc60 T37)
==35578==The signal is caused by a WRITE memory access.
==35578==Hint: address points to the zero page.
#0 0x7f71d4e8b4b8 in as<mozilla::NotNull<nsCOMPtr<nsIURI> > > /builds/worker/workspace/obj-build/dist/include/mozilla/Variant.h:746:5
#1 0x7f71d4e8b4b8 in mozilla::detail::ResultImplementation<mozilla::NotNull<nsCOMPtr<nsIURI>>, JS::loader::ResolveError, (mozilla::detail::PackingStrategy)0>::unwrap() /builds/worker/workspace/obj-build/dist/include/mozilla/ResultVariant.h:45:51
#2 0x7f71d4e77e91 in unwrap /builds/worker/workspace/obj-build/dist/include/mozilla/Result.h:570:18
#3 0x7f71d4e77e91 in JS::loader::ModuleLoaderBase::HostResolveImportedModule(JSContext*, JS::Handle<JS::Value>, JS::Handle<JSObject*>) /js/loader/ModuleLoaderBase.cpp:138:35
#4 0x7f71e177b222 in js::CallModuleResolveHook(JSContext*, JS::Handle<JS::Value>, JS::Handle<JSObject*>) /js/src/builtin/ModuleObject.cpp:2140:23
#5 0x7f71e19da155 in HostResolveImportedModule(JSContext*, JS::Handle<js::ModuleObject*>, JS::Handle<js::ModuleRequestObject*>, js::ModuleStatus) /js/src/vm/Modules.cpp:492:7
#6 0x7f71e19db0ea in InnerModuleLinking(JSContext*, JS::Handle<js::ModuleObject*>, JS::MutableHandle<JS::GCVector<js::ModuleObject*, 0ul, js::SystemAllocPolicy>>, unsigned long, unsigned long*) /js/src/vm/Modules.cpp:1143:22
#7 0x7f71e19d0765 in js::ModuleLink(JSContext*, JS::Handle<js::ModuleObject*>) /js/src/vm/Modules.cpp:1060:13
#8 0x7f71e19d0539 in JS::ModuleLink(JSContext*, JS::Handle<JSObject*>) /js/src/vm/Modules.cpp:154:10
#9 0x7f71d4e83cf2 in JS::loader::ModuleLoaderBase::InstantiateModuleGraph(JS::loader::ModuleLoadRequest*) /js/loader/ModuleLoaderBase.cpp:1082:8
#10 0x7f71db8d1f33 in InstantiateModuleGraph /builds/worker/workspace/obj-build/dist/include/js/loader/ModuleLoadRequest.h:111:21
#11 0x7f71db8d1f33 in mozilla::dom::workerinternals::loader::WorkerScriptLoader::EvaluateScript(JSContext*, JS::loader::ScriptLoadRequest*) /dom/workers/ScriptLoader.cpp:1090:19
#12 0x7f71db8d188e in mozilla::dom::workerinternals::loader::WorkerScriptLoader::ProcessPendingRequests(JSContext*) /dom/workers/ScriptLoader.cpp:821:10
#13 0x7f71db9dc8ac in mozilla::dom::workerinternals::loader::WorkerModuleLoader::OnModuleLoadComplete(JS::loader::ModuleLoadRequest*) /dom/workers/loader/WorkerModuleLoader.cpp:116:24
#14 0x7f71d4e762db in JS::loader::ModuleLoadRequest::LoadFinished() /js/loader/ModuleLoadRequest.cpp:213:12
#15 0x7f71d4e756b2 in JS::loader::ModuleLoadRequest::ModuleErrored() /js/loader/ModuleLoadRequest.cpp:161:3
#16 0x7f71d4e7f542 in JS::loader::ModuleLoaderBase::CreateModuleScript(JS::loader::ModuleLoadRequest*) /js/loader/ModuleLoaderBase.cpp:636:17
#17 0x7f71d4e7eb79 in JS::loader::ModuleLoaderBase::OnFetchComplete(JS::loader::ModuleLoadRequest*, nsresult) /js/loader/ModuleLoaderBase.cpp:545:10
#18 0x7f71db8da7e7 in OnFetchComplete /builds/worker/workspace/obj-build/dist/include/js/loader/ModuleLoadRequest.h:108:21
#19 0x7f71db8da7e7 in mozilla::dom::workerinternals::loader::ScriptExecutorRunnable::ProcessModuleScript(JSContext*, mozilla::dom::WorkerPrivate*) /dom/workers/ScriptLoader.cpp:1522:18
#20 0x7f71db8dad56 in mozilla::dom::workerinternals::loader::ScriptExecutorRunnable::WorkerRun(JSContext*, mozilla::dom::WorkerPrivate*) /dom/workers/ScriptLoader.cpp:1559:12
#21 0x7f71db934b70 in mozilla::dom::WorkerRunnable::Run() /dom/workers/WorkerRunnable.cpp:377:12
#22 0x7f71d3424da4 in nsThread::ProcessNextEvent(bool, bool*) /xpcom/threads/nsThread.cpp:1233:16
#23 0x7f71d342ea54 in NS_ProcessNextEvent(nsIThread*, bool) /xpcom/threads/nsThreadUtils.cpp:477:10
#24 0x7f71db924c35 in mozilla::dom::WorkerPrivate::RunCurrentSyncLoop() /dom/workers/WorkerPrivate.cpp:4352:9
#25 0x7f71d94524c2 in mozilla::dom::AutoSyncLoopHolder::Run() /builds/worker/workspace/obj-build/dist/include/mozilla/dom/WorkerPrivate.h:1530:27
#26 0x7f71db8dbd3d in mozilla::dom::workerinternals::(anonymous namespace)::LoadAllScripts(mozilla::dom::WorkerPrivate*, mozilla::UniquePtr<mozilla::dom::SerializedStackHolder, mozilla::DefaultDelete<mozilla::dom::SerializedStackHolder>>, nsTArray<nsTString<char16_t>> const&, bool, mozilla::dom::WorkerScriptType, mozilla::ErrorResult&, mozilla::Encoding const*) /dom/workers/ScriptLoader.cpp:250:16
#27 0x7f71db8db8d2 in mozilla::dom::workerinternals::LoadMainScript(mozilla::dom::WorkerPrivate*, mozilla::UniquePtr<mozilla::dom::SerializedStackHolder, mozilla::DefaultDelete<mozilla::dom::SerializedStackHolder>>, nsTSubstring<char16_t> const&, mozilla::dom::WorkerScriptType, mozilla::ErrorResult&, mozilla::Encoding const*) /dom/workers/ScriptLoader.cpp:1690:3
#28 0x7f71db947047 in mozilla::dom::(anonymous namespace)::CompileScriptRunnable::WorkerRun(JSContext*, mozilla::dom::WorkerPrivate*) /dom/workers/WorkerPrivate.cpp:379:5
#29 0x7f71db934b70 in mozilla::dom::WorkerRunnable::Run() /dom/workers/WorkerRunnable.cpp:377:12
#30 0x7f71d3424da4 in nsThread::ProcessNextEvent(bool, bool*) /xpcom/threads/nsThread.cpp:1233:16
#31 0x7f71d342ea54 in NS_ProcessNextEvent(nsIThread*, bool) /xpcom/threads/nsThreadUtils.cpp:477:10
#32 0x7f71db91babc in mozilla::dom::WorkerPrivate::DoRunLoop(JSContext*) /dom/workers/WorkerPrivate.cpp:3276:7
#33 0x7f71db8f20b2 in mozilla::dom::workerinternals::(anonymous namespace)::WorkerThreadPrimaryRunnable::Run() /dom/workers/RuntimeService.cpp:2043:42
#34 0x7f71d3424da4 in nsThread::ProcessNextEvent(bool, bool*) /xpcom/threads/nsThread.cpp:1233:16
#35 0x7f71d342ea54 in NS_ProcessNextEvent(nsIThread*, bool) /xpcom/threads/nsThreadUtils.cpp:477:10
#36 0x7f71d4c4db54 in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /ipc/glue/MessagePump.cpp:300:20
#37 0x7f71d4acad27 in RunInternal /ipc/chromium/src/base/message_loop.cc:381:10
#38 0x7f71d4acad27 in RunHandler /ipc/chromium/src/base/message_loop.cc:374:3
#39 0x7f71d4acad27 in MessageLoop::Run() /ipc/chromium/src/base/message_loop.cc:356:3
#40 0x7f71d341c645 in nsThread::ThreadFunc(void*) /xpcom/threads/nsThread.cpp:391:10
#41 0x7f71f64c5628 in _pt_root /nsprpub/pr/src/pthreads/ptthread.c:201:5
#42 0x7f71f6294b42 in start_thread nptl/pthread_create.c:442:8
#43 0x7f71f63269ff misc/../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /builds/worker/workspace/obj-build/dist/include/mozilla/Variant.h:746:5 in as<mozilla::NotNull<nsCOMPtr<nsIURI> > >
Thread T37 created by T0 (Isolated Web Co) here:
#0 0x5590e114cbcc in pthread_create /builds/worker/fetches/llvm-project/compiler-rt/lib/asan/asan_interceptors.cpp:208:3
#1 0x7f71f64b56f9 in _PR_CreateThread /nsprpub/pr/src/pthreads/ptthread.c:458:14
#2 0x7f71f64a6b6e in PR_CreateThread /nsprpub/pr/src/pthreads/ptthread.c:533:12
#3 0x7f71d341fb9b in nsThread::Init(nsTSubstring<char> const&) /xpcom/threads/nsThread.cpp:633:18
#4 0x7f71db9431ca in mozilla::dom::WorkerThread::Create(mozilla::dom::WorkerThreadFriendKey const&) /dom/workers/WorkerThread.cpp:102:7
#5 0x7f71db8c8437 in mozilla::dom::workerinternals::RuntimeService::ScheduleWorker(mozilla::dom::WorkerPrivate&) /dom/workers/RuntimeService.cpp:1324:37
#6 0x7f71db8c7526 in mozilla::dom::workerinternals::RuntimeService::RegisterWorker(mozilla::dom::WorkerPrivate&) /dom/workers/RuntimeService.cpp:1206:19
#7 0x7f71db915d9f in mozilla::dom::WorkerPrivate::Constructor(JSContext*, nsTSubstring<char16_t> const&, bool, mozilla::dom::WorkerKind, mozilla::dom::RequestCredentials, mozilla::dom::WorkerType, nsTSubstring<char16_t> const&, nsTSubstring<char> const&, mozilla::dom::WorkerLoadInfo*, mozilla::ErrorResult&, nsTString<char16_t>) /dom/workers/WorkerPrivate.cpp:2649:24
#8 0x7f71db8dc4f2 in mozilla::dom::Worker::Constructor(mozilla::dom::GlobalObject const&, nsTSubstring<char16_t> const&, mozilla::dom::WorkerOptions const&, mozilla::ErrorResult&) /dom/workers/Worker.cpp:43:41
#9 0x7f71d80328ff in mozilla::dom::Worker_Binding::_constructor(JSContext*, unsigned int, JS::Value*) /builds/worker/workspace/obj-build/dom/bindings/WorkerBinding.cpp:1173:52
#10 0x7f71e171a24c in CallJSNative /js/src/vm/Interpreter.cpp:459:13
#11 0x7f71e171a24c in CallJSNativeConstructor /js/src/vm/Interpreter.cpp:475:8
#12 0x7f71e171a24c in InternalConstruct(JSContext*, js::AnyConstructArgs const&, js::CallReason) /js/src/vm/Interpreter.cpp:694:10
#13 0x7f71e1706851 in ConstructFromStack /js/src/vm/Interpreter.cpp:722:10
#14 0x7f71e1706851 in Interpret(JSContext*, js::RunState&) /js/src/vm/Interpreter.cpp:3347:16
#15 0x7f71e16eaa1c in js::RunScript(JSContext*, js::RunState&) /js/src/vm/Interpreter.cpp:431:13
#16 0x7f71e1717a30 in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason) /js/src/vm/Interpreter.cpp:579:13
#17 0x7f71e17196af in InternalCall /js/src/vm/Interpreter.cpp:614:10
#18 0x7f71e17196af in js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason) /js/src/vm/Interpreter.cpp:646:8
#19 0x7f71e18288bd in JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) /js/src/vm/CallAndConstruct.cpp:117:10
#20 0x7f71d83cb732 in mozilla::dom::EventListener::HandleEvent(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::dom::Event&, mozilla::ErrorResult&) /builds/worker/workspace/obj-build/dom/bindings/EventListenerBinding.cpp:62:8
#21 0x7f71d9311aa5 in void mozilla::dom::EventListener::HandleEvent<mozilla::dom::EventTarget*>(mozilla::dom::EventTarget* const&, mozilla::dom::Event&, mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JS::Realm*) /builds/worker/workspace/obj-build/dist/include/mozilla/dom/EventListenerBinding.h:65:12
#22 0x7f71d9311563 in mozilla::EventListenerManager::HandleEventSubType(mozilla::EventListenerManager::Listener*, mozilla::dom::Event*, mozilla::dom::EventTarget*) /dom/events/EventListenerManager.cpp:1308:43
#23 0x7f71d9312e5b in mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event**, mozilla::dom::EventTarget*, nsEventStatus*, bool) /dom/events/EventListenerManager.cpp:1504:17
#24 0x7f71d9300d42 in mozilla::EventTargetChainItem::HandleEvent(mozilla::EventChainPostVisitor&, mozilla::ELMCreationDetector&) /dom/events/EventDispatcher.cpp:347:17
#25 0x7f71d92ff5f4 in mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&) /dom/events/EventDispatcher.cpp:549:16
#26 0x7f71d930376a in mozilla::EventDispatcher::Dispatch(nsISupports*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) /dom/events/EventDispatcher.cpp:1122:11
#27 0x7f71dca133ea in nsDocumentViewer::LoadComplete(nsresult) /layout/base/nsDocumentViewer.cpp:1082:7
#28 0x7f71e03869ee in nsDocShell::EndPageLoad(nsIWebProgress*, nsIChannel*, nsresult) /docshell/base/nsDocShell.cpp:6478:20
#29 0x7f71e0385838 in nsDocShell::OnStateChange(nsIWebProgress*, nsIRequest*, unsigned int, nsresult) /docshell/base/nsDocShell.cpp:5871:7
#30 0x7f71e0387f56 in non-virtual thunk to nsDocShell::OnStateChange(nsIWebProgress*, nsIRequest*, unsigned int, nsresult) /docshell/base/nsDocShell.cpp
#31 0x7f71d51d1163 in nsDocLoader::DoFireOnStateChange(nsIWebProgress*, nsIRequest*, int&, nsresult) /uriloader/base/nsDocLoader.cpp:1380:3
#32 0x7f71d51cfbd5 in nsDocLoader::doStopDocumentLoad(nsIRequest*, nsresult) /uriloader/base/nsDocLoader.cpp:978:14
#33 0x7f71d51cc5fc in nsDocLoader::DocLoaderIsEmpty(bool, mozilla::Maybe<nsresult> const&) /uriloader/base/nsDocLoader.cpp:797:9
#34 0x7f71d51ce789 in nsDocLoader::OnStopRequest(nsIRequest*, nsresult) /uriloader/base/nsDocLoader.cpp:680:5
#35 0x7f71e03cd3fa in nsDocShell::OnStopRequest(nsIRequest*, nsresult) /docshell/base/nsDocShell.cpp:13904:23
#36 0x7f71d37b5142 in mozilla::net::nsLoadGroup::NotifyRemovalObservers(nsIRequest*, nsresult) /netwerk/base/nsLoadGroup.cpp:631:22
#37 0x7f71d37b7ad4 in mozilla::net::nsLoadGroup::RemoveRequest(nsIRequest*, nsISupports*, nsresult) /netwerk/base/nsLoadGroup.cpp:535:10
#38 0x7f71d67ace91 in mozilla::dom::Document::DoUnblockOnload() /dom/base/Document.cpp:11514:18
#39 0x7f71d675d25e in mozilla::dom::Document::UnblockOnload(bool) /dom/base/Document.cpp:11452:9
#40 0x7f71d6785b34 in mozilla::dom::Document::DispatchContentLoadedEvents() /dom/base/Document.cpp:7990:3
#41 0x7f71d6876f5a in applyImpl<mozilla::dom::Document, void (mozilla::dom::Document::*)()> /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:1163:12
#42 0x7f71d6876f5a in apply<mozilla::dom::Document, void (mozilla::dom::Document::*)()> /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:1169:12
#43 0x7f71d6876f5a in mozilla::detail::RunnableMethodImpl<mozilla::dom::Document*, void (mozilla::dom::Document::*)(), true, (mozilla::RunnableKind)0>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:1216:13
#44 0x7f71d33e5a8f in mozilla::SchedulerGroup::Runnable::Run() /xpcom/threads/SchedulerGroup.cpp:114:20
#45 0x7f71d33f9d09 in mozilla::RunnableTask::Run() /xpcom/threads/TaskController.cpp:541:16
#46 0x7f71d33f009c in mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /xpcom/threads/TaskController.cpp:855:26
#47 0x7f71d33ed318 in mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /xpcom/threads/TaskController.cpp:686:15
#48 0x7f71d33eda40 in mozilla::TaskController::ProcessPendingMTTask(bool) /xpcom/threads/TaskController.cpp:464:36
#49 0x7f71d33ffbe1 in operator() /xpcom/threads/TaskController.cpp:188:37
#50 0x7f71d33ffbe1 in mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_3>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:547:5
#51 0x7f71d34244de in nsThread::ProcessNextEvent(bool, bool*) /xpcom/threads/nsThread.cpp:1239:16
#52 0x7f71d342ea54 in NS_ProcessNextEvent(nsIThread*, bool) /xpcom/threads/nsThreadUtils.cpp:477:10
#53 0x7f71d4c4c50e in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /ipc/glue/MessagePump.cpp:85:21
#54 0x7f71d4acad27 in RunInternal /ipc/chromium/src/base/message_loop.cc:381:10
#55 0x7f71d4acad27 in RunHandler /ipc/chromium/src/base/message_loop.cc:374:3
#56 0x7f71d4acad27 in MessageLoop::Run() /ipc/chromium/src/base/message_loop.cc:356:3
#57 0x7f71dc2a7879 in nsBaseAppShell::Run() /widget/nsBaseAppShell.cpp:148:27
#58 0x7f71e12f7be8 in XRE_RunAppShell() /toolkit/xre/nsEmbedFunctions.cpp:738:20
#59 0x7f71d4acad27 in RunInternal /ipc/chromium/src/base/message_loop.cc:381:10
#60 0x7f71d4acad27 in RunHandler /ipc/chromium/src/base/message_loop.cc:374:3
#61 0x7f71d4acad27 in MessageLoop::Run() /ipc/chromium/src/base/message_loop.cc:356:3
#62 0x7f71e12f737f in XRE_InitChildProcess(int, char**, XREChildData const*) /toolkit/xre/nsEmbedFunctions.cpp:671:34
#63 0x5590e11a0884 in content_process_main(mozilla::Bootstrap*, int, char**) /browser/app/../../ipc/contentproc/plugin-container.cpp:57:28
#64 0x5590e11a0d47 in main /browser/app/nsBrowserApp.cpp:353:18
#65 0x7f71f6229d8f in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
==35578==ABORTING
Reporter | ||
Comment 1•3 years ago
|
||
Comment 3•3 years ago
|
||
Verified bug as reproducible on mozilla-central 20230308094825-64b0a4a734ea.
The bug appears to have been introduced in the following build range:
Start: 2508d061214d638aec40c04204c79e5e7f65c7f1 (20230118134745)
End: ad56233b442a0fd1514f1d257f68390ebc3527fc (20230118135404)
Pushlog: https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=2508d061214d638aec40c04204c79e5e7f65c7f1&tochange=ad56233b442a0fd1514f1d257f68390ebc3527fc
Updated•3 years ago
|
Comment 4•3 years ago
|
||
Setting Regressed by
field after analyzing regression range found by bugmon in comment #3.
Comment 5•3 years ago
|
||
Set release status flags based on info from the regressing bug 1247687
:yulia, since you are the author of the regressor, bug 1247687, could you take a look? Also, could you set the severity field?
For more information, please visit auto_nag documentation.
Assignee | ||
Updated•3 years ago
|
Assignee | ||
Comment 6•3 years ago
|
||
My naive attempt to extract the test case here failed, so I've asked in other channels how to do that. For now, I have a solution without the testcase.
Assignee | ||
Comment 7•3 years ago
|
||
Updated•3 years ago
|
Comment 8•3 years ago
|
||
:yulia should we consider this as a ride along for 111 dot release, or should it just ride the trains with 112?
Asking since it's a fuzzing bug, but the end-user impact is unclear
Assignee | ||
Comment 9•3 years ago
|
||
This came up in fuzzing module workers. Those are currently flagged off for release. That said, this is shared code, and I need to check if there is a way to reproduce this on the html page loader. So far I haven't had any luck, which indicates that it is safe to ride the trains for 112. I'll update here once I hear back from others.
Comment 10•3 years ago
|
||
Updated•3 years ago
|
Comment 11•3 years ago
|
||
bugherder |
Comment 12•3 years ago
|
||
Verified bug as fixed on rev mozilla-central 20230311095430-34c5d377283c.
Removing bugmon keyword as no further action possible. Please review the bug and re-add the keyword for further analysis.
Description
•