Issue metadata
Sign in to add a comment
|
Issue 114662: Chrome crashes when accessing link to MP3
Reported by
daniel.c...@gmail.com,
Feb 16 2012
|
||||||||||||||||||||||||
Issue descriptionChrome Version : 17.0.963.56 OS Version: OS X 10.7.3 URLs (if applicable) : Other browsers tested: Add OK or FAIL after other browsers where you have tested this issue: Safari 5: OK Firefox 4.x: IE 7/8/9: What steps will reproduce the problem? 1. Goto link http://files.exotica.org.uk/?file=/bitfellas/podcast/bitjam_144.mp3 2. 3. What is the expected result? That the mp3 should start playing What happens instead? The whole Chrome app crashes (not just the current browser window/tab) Please provide any additional information below. Attach a screenshot if possible. UserAgentString: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11 Feb 16 2012,
crash on both Mac and Windows with M17 and M18 chrome builds: crash report: http://crash/reportdetail?reportid=a0dd9ab048166ded 0x768f9f43 [user32.dll + 0x00019f43] NtUserMessageCall 0x768f9f74 [user32.dll + 0x00019f74] NtUserMessageCall 0x768f9dcb [user32.dll + 0x00019dcb] RealDefWindowProcW 0x72000c13 [uxtheme.dll + 0x00010c13] _ThemeDefWindowProc(HWND__ *,unsigned int,unsigned int,long,int) 0x72000c5d [uxtheme.dll + 0x00010c5d] ThemeDefWindowProcW 0x768f9ed1 [user32.dll + 0x00019ed1] GetPropW 0x6341e0c1 [chrome.dll - native_widget_win.cc:1878] views::NativeWidgetWin::OnSysCommand(unsigned int,WTL::CPoint) 0x62bad351 [chrome.dll - native_widget_win.h:357] views::NativeWidgetWin::_ProcessWindowMessage(HWND__ *,unsigned int,unsigned int,long,long &,unsigned long) 0x62bacd43 [chrome.dll - native_widget_win.h:281] views::NativeWidgetWin::ProcessWindowMessage(HWND__ *,unsigned int,unsigned int,long,long &,unsigned long) 0x6341cd48 [chrome.dll - native_widget_win.cc:1034] views::NativeWidgetWin::OnWndProc(unsigned int,unsigned int,long) 0x632ca6e0 [chrome.dll - window_impl.cc:191] ui::WindowImpl::WndProc(HWND__ *,unsigned int,unsigned int,long) 0x632ca9d7 [chrome.dll - wrapped_window_proc.h:60] base::win::WrappedWindowProc<&ui::WindowImpl::WndProc(HWND__ *,unsigned int,unsigned int,long)>(HWND__ *,unsigned int,unsigned int,long) 0x768f8816 [user32.dll + 0x00018816] InternalCallWinProc 0x768f9ee8 [user32.dll + 0x00019ee8] GetPropW 0x768f9d13 [user32.dll + 0x00019d13] DispatchClientMessage 0x768f9d84 [user32.dll + 0x00019d84] __fnDWORD 0x76efe495 [ntdll.dll + 0x0001e495] KiUserCallbackDispatcher 0x76efe41f [ntdll.dll + 0x0001e41f] KiUserApcDispatcher 0x768f9dcb [user32.dll + 0x00019dcb] RealDefWindowProcW 0x72000c13 [uxtheme.dll + 0x00010c13] _ThemeDefWindowProc(HWND__ *,unsigned int,unsigned int,long,int) 0x72000c5d [uxtheme.dll + 0x00010c5d] ThemeDefWindowProcW 0x768f9ed1 [user32.dll + 0x00019ed1] GetPropW 0x6341ed4c [chrome.dll - native_widget_win.cc:2319] views::NativeWidgetWin::DefWindowProcWithRedrawLock(unsigned int,unsigned int,long) 0x6341d71f [chrome.dll - native_widget_win.cc:1460] views::NativeWidgetWin::OnMouseRange(unsigned int,unsigned int,long) 0x62bacda8 [chrome.dll - native_widget_win.h:284] views::NativeWidgetWin::_ProcessWindowMessage(HWND__ *,unsigned int,unsigned int,long,long &,unsigned long) 0x62bacd43 [chrome.dll - native_widget_win.h:281] views::NativeWidgetWin::ProcessWindowMessage(HWND__ *,unsigned int,unsigned int,long,long &,unsigned long) 0x6341cd48 [chrome.dll - native_widget_win.cc:1034] views::NativeWidgetWin::OnWndProc(unsigned int,unsigned int,long) 0x632ca6e0 [chrome.dll - window_impl.cc:191] ui::WindowImpl::WndProc(HWND__ *,unsigned int,unsigned int,long) 0x632ca9d7 [chrome.dll - wrapped_window_proc.h:60] base::win::WrappedWindowProc<&ui::WindowImpl::WndProc(HWND__ *,unsigned int,unsigned int,long)>(HWND__ *,unsigned int,unsigned int,long) 0x768f8816 [user32.dll + 0x00018816] InternalCallWinProc 0x768f898d [user32.dll + 0x0001898d] UserCallWinProcCheckWow 0x768f8ab8 [user32.dll + 0x00018ab8] DispatchMessageWorker 0x768f8b0f [user32.dll + 0x00018b0f] DispatchMessageW 0x6341b600 [chrome.dll - accelerator_handler_win.cc:54] views::AcceleratorHandler::Dispatch(tagMSG const &) 0x62aa0955 [chrome.dll - message_pump_win.cc:354] base::MessagePumpForUI::ProcessMessageHelper(tagMSG const &) 0x62aa07ae [chrome.dll - message_pump_win.cc:199] base::MessagePumpForUI::DoRunLoop() 0x62aa05cd [chrome.dll - message_pump_win.cc:51] base::MessagePumpWin::RunWithDispatcher(base::MessagePump::Delegate *,base::MessagePumpWin::Dispatcher *) 0x62a87217 [chrome.dll - message_loop.cc:454] MessageLoop::RunInternal() 0x62a871a7 [chrome.dll - message_loop.cc:432] MessageLoop::RunHandler() 0x62a8793b [chrome.dll - message_loop.cc:805] MessageLoopForUI::RunWithDispatcher(base::MessagePumpWin::Dispatcher *) 0x62bb919a [chrome.dll - chrome_browser_main.cc:2009] ChromeBrowserMainParts::MainMessageLoopRun(int *) 0x63027309 [chrome.dll - browser_main_loop.cc:395] content::BrowserMainLoop::RunMainMessageLoopParts(bool *) 0x62ff601d [chrome.dll - browser_main.cc:100] BrowserMain(content::MainFunctionParams const &) 0x62aadb75 [chrome.dll - content_main.cc:263] `anonymous namespace'::RunNamedProcessTypeMain(std::basic_string<char,std::char_traits<char>,std::allocator<char> > const &,content::MainFunctionParams const &,content::ContentMainDelegate *) 0x62aade10 [chrome.dll - content_main.cc:454] content::ContentMain(HINSTANCE__ *,sandbox::SandboxInterfaceInfo *,content::ContentMainDelegate *) 0x629e49a0 [chrome.dll - chrome_main.cc:28] ChromeMain Feb 16 2012,
Feb 16 2012,
Feb 18 2012,
Alek, can you try to repro? Feb 21 2012,I'm able to reproduce the crash on ubuntu 10.04, gc: 17.0.963.56 Feb 21 2012,
Feb 21 2012,alekyoo: how consistent does it crash? do the stack traces match what was posted in #2 or are they different? Feb 22 2012,#2 actually has the wrong stack trace (it's the main thread, not the crashing thread) Here's the crashing thread from the same report ID 0x632a1b12 [chrome.dll - url_request_ftp_job.cc:73] net::URLRequestFtpJob::StartTransaction() 0x6321ea43 [chrome.dll - url_request.cc:490] net::URLRequest::StartJob(net::URLRequestJob *) 0x6321e7eb [chrome.dll - url_request.cc:435] net::URLRequest::Start() 0x6304ad46 [chrome.dll - resource_queue.cc:67] ResourceQueue::AddRequest(net::URLRequest *,ResourceDispatcherHostRequestInfo const &) 0x6300cf53 [chrome.dll - resource_dispatcher_host.cc:1661] ResourceDispatcherHost::InsertIntoResourceQueue(net::URLRequest *,ResourceDispatcherHostRequestInfo const &) 0x6300cf32 [chrome.dll - resource_dispatcher_host.cc:1655] ResourceDispatcherHost::BeginRequestInternal(net::URLRequest *) 0x6300ae51 [chrome.dll - resource_dispatcher_host.cc:670] ResourceDispatcherHost::BeginRequest(int,ResourceHostMsg_Request const &,IPC::Message *,int) 0x6300a6e7 [chrome.dll - resource_dispatcher_host.cc:437] ResourceDispatcherHost::OnRequestResource(IPC::Message const &,int,ResourceHostMsg_Request const &) 0x63011171 [chrome.dll - resource_messages.h:180] ResourceHostMsg_RequestResource::Dispatch<ResourceDispatcherHost,ResourceDispatcherHost,int,ResourceHostMsg_Request const &>(IPC::Message const *,ResourceDispatcherHost *,ResourceDispatcherHost *,void ( ResourceDispatcherHost::*)(IPC::Message const &,int,ResourceHostMsg_Request const &)) 0x6300a404 [chrome.dll - resource_dispatcher_host.cc:406] ResourceDispatcherHost::OnMessageReceived(IPC::Message const &,ResourceMessageFilter *,bool *) 0x63058acd [chrome.dll - resource_message_filter.cc:40] ResourceMessageFilter::OnMessageReceived(IPC::Message const &,bool *) 0x630095e4 [chrome.dll - browser_message_filter.cc:88] BrowserMessageFilter::DispatchMessageW(IPC::Message const &) 0x63009510 [chrome.dll - browser_message_filter.cc:74] BrowserMessageFilter::OnMessageReceived(IPC::Message const &) 0x631c7e2b [chrome.dll - ipc_channel_proxy.cc:90] IPC::ChannelProxy::Context::TryFilters(IPC::Message const &) 0x631c7e56 [chrome.dll - ipc_channel_proxy.cc:104] IPC::ChannelProxy::Context::OnMessageReceived(IPC::Message const &) 0x629eef92 [chrome.dll - ipc_channel_win.cc:298] IPC::Channel::ChannelImpl::ProcessIncomingMessages(base::MessagePumpForIO::IOContext *,unsigned long) 0x629ef24c [chrome.dll - ipc_channel_win.cc:389] IPC::Channel::ChannelImpl::OnIOCompleted(base::MessagePumpForIO::IOContext *,unsigned long,unsigned long) 0x62aa0c08 [chrome.dll - message_pump_win.cc:514] base::MessagePumpForIO::WaitForIOCompletion(unsigned long,base::MessagePumpForIO::IOHandler *) 0x62aa0b4e [chrome.dll - message_pump_win.cc:477] base::MessagePumpForIO::DoRunLoop() 0x62aa05cd [chrome.dll - message_pump_win.cc:51] base::MessagePumpWin::RunWithDispatcher(base::MessagePump::Delegate *,base::MessagePumpWin::Dispatcher *) 0x62aa048e [chrome.dll - message_pump_win.h:64] base::MessagePumpWin::Run(base::MessagePump::Delegate *) 0x62a87222 [chrome.dll - message_loop.cc:459] MessageLoop::RunInternal() 0x62a871a7 [chrome.dll - message_loop.cc:432] MessageLoop::RunHandler() 0x62a8712a [chrome.dll - message_loop.cc:342] MessageLoop::Run() 0x6340eeca [chrome.dll - thread.cc:126] base::Thread::Run(MessageLoop *) 0x6340efb8 [chrome.dll - thread.cc:161] base::Thread::ThreadMain() 0x62a8e81b [chrome.dll - platform_thread_win.cc:58] base::`anonymous namespace'::ThreadFunc(void *) 0x750ef13b [kernel32.dll + 0x0008f13b] BaseThreadInitThunk 0x76f5d818 [ntdll.dll + 0x0007d818] __RtlUserThreadStart 0x76f5da2a [ntdll.dll + 0x0007da2a] _RtlUserThreadStart We're seeing quite a bit of crashes in StartTransaction in 17.x. Looking at 18.x, we still can find the same crash. See e.g. http://crash/reportdetail?reportid=303f018be3d29263 19.x still has crashes in net::URLRequestFtpJob::StartTransaction(), but via a different callchain. Currently only triggered by prerender. See http://crash/reportdetail?reportid=03a6acaab0b7c272#crashing_thread for a v19 crash. Feb 22 2012,That's my crash log: 0eefaf78f2e2f275 Happens everytime 100% repro. rate Thread 10 *CRASHED* ( SIGSEGV @ 0x00000000 ) 0x7ff1e39f1bb2 [chrome - net/url_request/url_request_ftp_job.cc:69] net::URLRequestFtpJob::StartTransaction 0x7ff1e3971814 [chrome - net/url_request/url_request.cc:478] net::URLRequest::StartJob 0x7ff1e4c5855a [chrome - content/browser/renderer_host/resource_queue.cc:68] ResourceQueue::AddRequest 0x7ff1e4c4cde0 [chrome - content/browser/renderer_host/resource_dispatcher_host.cc:1667] ResourceDispatcherHost::InsertIntoResourceQueue 0x7ff1e4c539fd [chrome - content/browser/renderer_host/resource_dispatcher_host.cc:1661] ResourceDispatcherHost::BeginRequestInternal 0x7ff1e4c56af9 [chrome - content/browser/renderer_host/resource_dispatcher_host.cc:696] ResourceDispatcherHost::BeginRequest 0x7ff1e4c4f519 [chrome - ./content/common/resource_messages.h:179] ResourceDispatcherHost::OnMessageReceived 0x7ff1e4ba7b17 [chrome - content/public/browser/browser_message_filter.cc:90] content::BrowserMessageFilter::DispatchMessage 0x7ff1e4ba7caa [chrome - content/public/browser/browser_message_filter.cc:76] content::BrowserMessageFilter::OnMessageReceived 0x7ff1e3d91a4c [chrome - ipc/ipc_channel_proxy.cc:90] IPC::ChannelProxy::Context::TryFilters 0x7ff1e3d92258 [chrome - ipc/ipc_channel_proxy.cc:104] IPC::ChannelProxy::Context::OnMessageReceived 0x7ff1e3d8f42e [chrome - ipc/ipc_channel_posix.cc:732] IPC::Channel::ChannelImpl::ProcessIncomingMessages 0x7ff1e3d900ba [chrome - ipc/ipc_channel_posix.cc:1077] IPC::Channel::ChannelImpl::OnFileCanReadWithoutBlocking 0x7ff1e3607207 [chrome - base/message_pump_libevent.cc:108] base::MessagePumpLibevent::FileDescriptorWatcher::OnFileCanReadWithoutBlocking 0x7ff1e36072e9 [chrome - base/message_pump_libevent.cc:365] base::MessagePumpLibevent::OnLibeventNotification 0x7ff1e3664ec7 [chrome - third_party/libevent/event.c:385] event_base_loop 0x7ff1e360642a [chrome - base/message_pump_libevent.cc:278] base::MessagePumpLibevent::Run 0x7ff1e3625aab [chrome - base/message_loop.cc:390] MessageLoop::Run 0x7ff1e3648ab8 [chrome - base/threading/thread.cc:161] base::Thread::ThreadMain 0x7ff1e3646111 [chrome - base/threading/platform_thread_posix.cc:58] base::::ThreadFunc 0x7ff1ded1f9c9 [libpthread-2.11.1.so + 0x000069c9] Feb 22 2012,
Feb 29 2012,
Jun 20 2012,
Oct 13 2012, Project Member
This issue has been closed for some time. No one will pay attention to new comments. If you are seeing this bug or have new data, please click New Issue to start a new bug. Mar 10 2013, Project Member
|
|||||||||||||||||||||||||
►
Sign in to add a comment |
Comment 1 by groby@chromium.org, Feb 16 2012
Labels: Feature-Media
Status: Untriaged