New issue
Advanced search Search tips

Issue 117668 link

Starred by 1 user

Issue metadata

Status: Fixed
Closed: Mar 2012
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 1
Type: Bug

  • Only users with EditIssue permission may comment.

Sign in to add a comment

Chrome: Crash Report - Stack Signature: views::internal::RootView::GetContentsView(...

Project Member Reported by, Mar 10 2012

Issue description

wez@ can you please find an owner? thanks!

Product: Chrome
Stack Signature: views::internal::RootView::GetContentsView()-26B2D37
New Signature Label: views::internal::RootView::GetContentsView()
New Signature Hash: c3ccb97f_d59f73f5_05b4a5df_e859a48b_a1088744

Report link: http://go/crash/reportdetail?reportid=080c3e26edb3991b

Meta information:
Product Name: Chrome
Product Version: 19.0.1064.0
Report ID: 080c3e26edb3991b
Report Time: 2012/03/09 18:28:43, Fri
Uptime: 3547 sec
Cumulative Uptime: 0 sec
OS Name: Windows NT
OS Version: 6.1.7600 
CPU Architecture: x86
CPU Info: AuthenticAMD family 16 model 6 stepping 3
ptype: browser


0x60fec052	 [chrome.dll	 -	views::internal::RootView::GetContentsView()
0x619575c3	 [chrome.dll	 -	TabContentsViewViews::Focus()
0x610d0719	 [chrome.dll	 -	views::FocusManager::SetFocusedViewWithReason(views::View *,views::FocusManager::FocusChangeReason)
0x6117ee3d	 [chrome.dll	 -	views::View::RequestFocus()
0x61c201cc	 [chrome.dll	 -	NativeTabContentsContainerWin::RequestFocus()
0x610d0542	 [chrome.dll	 -	views::FocusManager::RestoreFocusedView()
0x610d04d4	 [chrome.dll	 -	views::NativeWidgetWin::PostProcessActivateMessage(views::NativeWidgetWin *,int)
0x60fd54a2	 [chrome.dll	 -	views::NativeWidgetWin::OnWndProc(unsigned int,unsigned int,long)
0x60fd53fb	 [chrome.dll	 -	ui::WindowImpl::WndProc(HWND__ *,unsigned int,unsigned int,long)
0x60fd538c	 [chrome.dll	 - wrapped_window_proc.h:60	base::win::WrappedWindowProc<&ui::WindowImpl::WndProc(HWND__ *,unsigned int,unsigned int,long)>(HWND__ *,unsigned int,unsigned int,long)
0x764986ee	 [user32.dll	 + 0x000186ee]	InternalCallWinProc
0x76498875	 [user32.dll	 + 0x00018875]	UserCallWinProcCheckWow
0x764970f3	 [user32.dll	 + 0x000170f3]	DispatchClientMessage
0x7649738e	 [user32.dll	 + 0x0001738e]	__fnDWORD
0x773660cd	 [ntdll.dll	 + 0x000460cd]	KiUserCallbackDispatcher
0x7736607f	 [ntdll.dll	 + 0x0004607f]	KiUserApcDispatcher
0x61195bc9	 [chrome.dll	 -	views::NativeWidgetWin::~NativeWidgetWin()
0x6119cf92	 [chrome.dll	 + 0x0049cf92]	views::NativeWidgetWin::`scalar deleting destructor'(unsigned int)
0x6119580f	 [chrome.dll	 -	views::Widget::~Widget()
0x6119ce94	 [chrome.dll	 + 0x0049ce94]	views::Widget::`vector deleting destructor'(unsigned int)
0x60d1c8ea	 [chrome.dll	 - scoped_ptr.h:160	scoped_ptr<appcache::AppCacheResponseWriter>::reset(appcache::AppCacheResponseWriter *)
0x61159876	 [chrome.dll	 -	SadTabHelper::Observe(int,content::NotificationSource const &,content::NotificationDetails const &)
0x60db1a9a	 [chrome.dll	 -	NotificationServiceImpl::Notify(int,content::NotificationSource const &,content::NotificationDetails const &)
0x6115977f	 [chrome.dll	 -	TabContents::NotifyConnected()
0x611596c5	 [chrome.dll	 -	TabContents::RenderViewReady(content::RenderViewHost *)
0x6115964c	 [chrome.dll	 -	content::RenderViewHostImpl::OnMsgRenderViewReady()
0x61158fc8	 [chrome.dll	 - ipc_message.h:140	IPC::Message::Dispatch<content::RenderWidgetHostImpl,content::RenderWidgetHostImpl>(IPC::Message const *,content::RenderWidgetHostImpl *,content::RenderWidgetHostImpl *,void ( content::RenderWidgetHostImpl::*)(void))
0x61155b5f	 [chrome.dll	 -	content::RenderViewHostImpl::OnMessageReceived(IPC::Message const &)
0x61158de9	 [chrome.dll	 -	RenderProcessHostImpl::OnMessageReceived(IPC::Message const &)
0x60d29151	 [chrome.dll	 -	IPC::ChannelProxy::Context::OnDispatchMessage(IPC::Message const &)
...... (1 stack frames dropped.)
0x60d2659a	 [chrome.dll	 -	MessageLoop::RunTask(base::PendingTask const &)
0x60d25386	 [chrome.dll	 -	MessageLoop::DoWork()
0x60e5341c	 [chrome.dll	 -	base::MessagePumpForUI::DoRunLoop()
0x610e9fa2	 [chrome.dll	 -	base::MessagePumpWin::RunWithDispatcher(base::MessagePump::Delegate *,base::MessagePumpWin::Dispatcher *)
0x60d24ee6	 [chrome.dll	 -	MessageLoop::RunHandler()
0x610e9f59	 [chrome.dll	 -	MessageLoopForUI::RunWithDispatcher(base::MessagePumpWin::Dispatcher *)
0x610e9e87	 [chrome.dll	 -	ChromeBrowserMainParts::MainMessageLoopRun(int *)
0x610e9e39	 [chrome.dll	 -	content::BrowserMainLoop::RunMainMessageLoopParts()
0x610e9e03	 [chrome.dll	 -	`anonymous namespace'::BrowserMainRunnerImpl::Run()
0x60d96a39	 [chrome.dll	 -	BrowserMain(content::MainFunctionParams const &)
0x60d21929	 [chrome.dll	 -	`anonymous namespace'::RunNamedProcessTypeMain(std::basic_string<char,std::char_traits<char>,std::allocator<char> > const &,content::MainFunctionParams const &,content::ContentMainDelegate *)
0x60d218ae	 [chrome.dll	 -	`anonymous namespace'::ContentMainRunnerImpl::Run()
0x60d14ca8	 [chrome.dll	 -	content::ContentMain(HINSTANCE__ *,sandbox::SandboxInterfaceInfo *,content::ContentMainDelegate *)
0x60d14c33	 [chrome.dll	 -	ChromeMain
0x00f45749	 [chrome.exe	 -	MainDllLoader::Launch(HINSTANCE__ *,sandbox::SandboxInterfaceInfo *)
0x00f44b8c	 [chrome.exe	 -	wWinMain
0x00f650e1	 [chrome.exe	 - crt0.c:263	__tmainCRTStartup
0x75be1113	 [kernel32.dll	 + 0x00051113]	BaseThreadInitThunk
0x7737b298	 [ntdll.dll	 + 0x0005b298]	__RtlUserThreadStart
0x7737b26b	 [ntdll.dll	 + 0x0005b26b]	_RtlUserThreadStart


Comment 1 by, Mar 12 2012

Assigning to jam@ because on the face of it we're hitting |sad_tab=NULL| in code changed by him in r125126 (CL 9554017).

Comment 2 by, Mar 15 2012

jam@, any updates? thanks!
Project Member

Comment 3 by, Mar 20 2012

Summary: Chrome: Crash Report - Stack Signature: views::internal::RootView::GetContentsView(...
The following revision refers to this bug:

r127686 | | Tue Mar 20 08:23:47 PDT 2012

Changed paths:

Fix crash in TabContentsViewViews::Focus. This was caused by r125126. The subtle bug is that the SadTabHelper's Observe function use to reset TabContentsViewView's Widget pointer before it deleted the sad tab Widget. With my change, TabContentsViewWin would call SadTabHelper in the middle of its sad_tab_.reset() call and would use a Widget that's being destructed.

BUG= 117668 
Review URL:

Comment 4 by, Mar 20 2012

Status: Fixed
Project Member

Comment 5 by, Oct 13 2012

Labels: Restrict-AddIssueComment-Commit
This issue has been closed for some time. No one will pay attention to new comments.
If you are seeing this bug or have new data, please click New Issue to start a new bug.
Project Member

Comment 6 by, Mar 10 2013

Labels: -Area-UI -Mstone-19 M-19 Cr-UI
Project Member

Comment 7 by, Mar 14 2013

Labels: -Restrict-AddIssueComment-Commit Restrict-AddIssueComment-EditIssue

Sign in to add a comment