Crash in window_tree_client.cc Check failed: client. |
||||
Issue descriptionSo far only seen this crash once, while doing the following: Launch Blimp, pointing to local engine. Navigate to http://youtube.com. Search for something. Search again. Result: Crash at window_tree_client.cc(33) Check failed: client. Stack-trace: [65029:65057:0325/104349:VERBOSE2:blimp_message_output_buffer.cc(147)] Write complete, result=0 [65029:65029:0325/104349:FATAL:window_tree_client.cc(33)] Check failed: client. #0 0x000007fd641e base::debug::StackTrace::StackTrace() #1 0x000008012c5f logging::LogMessage::~LogMessage() #2 0x000002669c06 aura::client::GetWindowTreeClient() #3 0x000002669d31 aura::client::ParentWindowWithContext() #4 0x000006b3f96e content::RenderWidgetHostViewAura::InitAsPopup() #5 0x000006dbc68c content::WebContentsImpl::ShowCreatedWidget() #6 0x000006dbc2a7 content::WebContentsImpl::ShowCreatedWidget() #7 0x000006b10785 content::RenderViewHostImpl::OnShowWidget() #8 0x000006405802 _ZN4base20DispatchToMethodImplIPN7content18BrowserPluginGuestEMS2_FviRKN3gfx4RectEEJiS5_EJLm0ELm1EEEEvRKT_T0_RKSt5tupleIJDpT1_EENS_13IndexSequenceIJXspT2_EEEE #9 0x000006405745 _ZN4base16DispatchToMethodIPN7content18BrowserPluginGuestEMS2_FviRKN3gfx4RectEEJiS5_EEEvRKT_T0_RKSt5tupleIJDpT1_EE #10 0x000006b15cff _ZN3IPC16DispatchToMethodIN7content18RenderViewHostImplEMS2_FviRKN3gfx4RectEEvSt5tupleIJiS4_EEEEvPT_T0_PT1_RKT2_ #11 0x000006b139a9 _ZN3IPC8MessageTI27ViewHostMsg_ShowWidget_MetaSt5tupleIJiN3gfx4RectEEEvE8DispatchIN7content18RenderViewHostImplES9_vMS9_FviRKS4_EEEbPKNS_7MessageEPT_PT0_PT1_T2_ #12 0x000006b0f9dd content::RenderViewHostImpl::OnMessageReceived() #13 0x000006b1f693 content::RenderWidgetHostImpl::OnMessageReceived() #14 0x000006af1c33 content::RenderProcessHostImpl::OnMessageReceived() #15 0x0000020e7e73 IPC::ChannelProxy::Context::OnDispatchMessage() #16 0x000001cfbb3f _ZN4base8internal15RunnableAdapterIMN3net25PollingProxyConfigService4CoreEFvRKNS2_11ProxyConfigEEE3RunIS4_JS7_EEEvRK13scoped_refptrIT_EDpOT0_ #17 0x000001d0fa4e _ZN4base8internal12InvokeHelperILb0EvNS0_15RunnableAdapterIMN3net23ProxyConfigServiceLinux8DelegateEFvRKNS3_11ProxyConfigEEEEE8MakeItSoIJRK13scoped_refptrIS5_ES8_EEEvSB_DpOT_ #18 0x0000020ec42d _ZN4base8internal7InvokerINS_13IndexSequenceIJLm0ELm1EEEENS0_9BindStateINS0_15RunnableAdapterIMN3IPC12ChannelProxy7ContextEFvRKNS6_7MessageEEEEFvPS8_SB_EJSF_SB_EEENS0_12InvokeHelperILb0EvSE_EEFvvEE3RunEPNS0_13BindStateBaseE #19 0x0000005990ae base::Callback<>::Run() #20 0x000007fd9a1e base::debug::TaskAnnotator::RunTask() #21 0x0000080289df base::MessageLoop::RunTask() #22 0x000008028c68 base::MessageLoop::DeferOrRunPendingTask() #23 0x000008028e32 base::MessageLoop::DoWork() #24 0x000008036fce base::MessagePumpLibevent::Run() #25 0x00000802840f base::MessageLoop::RunHandler() #26 0x000008097c94 base::RunLoop::Run() #27 0x0000063f34e6 content::BrowserMainLoop::MainMessageLoopRun() #28 0x0000063f3241 content::BrowserMainLoop::RunMainMessageLoopParts() #29 0x0000063fb255 content::BrowserMainRunnerImpl::Run() #30 0x0000063ed206 content::BrowserMain() #31 0x000007fc68b6 content::RunNamedProcessTypeMain() #32 0x000007fc8799 content::ContentMainRunnerImpl::Run() #33 0x000007fc5e32 content::ContentMain() #34 0x00000042f135 main #35 0x7f2e36e46ec5 __libc_start_main #36 0x00000042f015 <unknown> Aborted (core dumped)
,
Mar 25 2016
It is quite hard to repo on youtube.com because searching in youtube.com right now is very sluggish. I only managed to repo once, and there was a super long freeze before the crash.
,
Mar 28 2016
an easy way to repo is to navigation to a website with <select> element (https://developer.mozilla.org/en-US/docs/Web/HTML/Element/select) and tap on it.
,
Mar 29 2016
,
Mar 30 2016
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/0539fc4bc55c129a632bc9b10dc36601b9fac8ad commit 0539fc4bc55c129a632bc9b10dc36601b9fac8ad Author: haibinlu <haibinlu@chromium.org> Date: Wed Mar 30 18:25:33 2016 [Blimp Engine] Adds a WindowTreeClient so that popup such as select dropdown will have non-null parent. After this CL, Engine no longer crashes, but tapping select box does not show dropdown because of crbug/598764. BUG= 597992 Review URL: https://codereview.chromium.org/1842593002 Cr-Commit-Position: refs/heads/master@{#384027} [modify] https://crrev.com/0539fc4bc55c129a632bc9b10dc36601b9fac8ad/blimp/engine/BUILD.gn [delete] https://crrev.com/ad087f7e1edacaaf66f126e826231c1274e1036b/blimp/engine/app/ui/BUILD.gn [add] https://crrev.com/0539fc4bc55c129a632bc9b10dc36601b9fac8ad/blimp/engine/app/ui/blimp_window_tree_client.cc [add] https://crrev.com/0539fc4bc55c129a632bc9b10dc36601b9fac8ad/blimp/engine/app/ui/blimp_window_tree_client.h [modify] https://crrev.com/0539fc4bc55c129a632bc9b10dc36601b9fac8ad/blimp/engine/session/blimp_engine_session.cc [modify] https://crrev.com/0539fc4bc55c129a632bc9b10dc36601b9fac8ad/blimp/engine/session/blimp_engine_session.h
,
Mar 30 2016
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/0539fc4bc55c129a632bc9b10dc36601b9fac8ad commit 0539fc4bc55c129a632bc9b10dc36601b9fac8ad Author: haibinlu <haibinlu@chromium.org> Date: Wed Mar 30 18:25:33 2016 [Blimp Engine] Adds a WindowTreeClient so that popup such as select dropdown will have non-null parent. After this CL, Engine no longer crashes, but tapping select box does not show dropdown because of crbug/598764. BUG= 597992 Review URL: https://codereview.chromium.org/1842593002 Cr-Commit-Position: refs/heads/master@{#384027} [modify] https://crrev.com/0539fc4bc55c129a632bc9b10dc36601b9fac8ad/blimp/engine/BUILD.gn [delete] https://crrev.com/ad087f7e1edacaaf66f126e826231c1274e1036b/blimp/engine/app/ui/BUILD.gn [add] https://crrev.com/0539fc4bc55c129a632bc9b10dc36601b9fac8ad/blimp/engine/app/ui/blimp_window_tree_client.cc [add] https://crrev.com/0539fc4bc55c129a632bc9b10dc36601b9fac8ad/blimp/engine/app/ui/blimp_window_tree_client.h [modify] https://crrev.com/0539fc4bc55c129a632bc9b10dc36601b9fac8ad/blimp/engine/session/blimp_engine_session.cc [modify] https://crrev.com/0539fc4bc55c129a632bc9b10dc36601b9fac8ad/blimp/engine/session/blimp_engine_session.h
,
Mar 30 2016
,
Dec 9 2016
|
||||
►
Sign in to add a comment |
||||
Comment 1 by haibinlu@chromium.org
, Mar 25 2016Likely related to user typing a query string and Engine's content decision to show a dropdown for related search items. content::RenderWidgetHostViewAura::InitAsPopup // Perform all the initialization steps necessary for this object to represent // a popup (such as a <select> dropdown), then shows the popup at |pos|. virtual void InitAsPopup(RenderWidgetHostView* parent_host_view, const gfx::Rect& bounds) = 0;