New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 602706 link

Starred by 4 users
Status: WontFix
Owner:
█ yabinh@chromium.org
Last visit > 30 days ago
Closed: Jun 2016
Cc:
█ mlliu@chromium.org
█ mikec...@chromium.org
yfried...@chromium.org
█ rnep...@chromium.org
changwan@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 3
Type: Bug



Sign in to add a comment

IME crash navigating to chrome://version

Project Member Reported by mariakho...@chromium.org, Apr 12 2016 
Navigate to chrome://version through omnibox. I see the following reliably.

Changwan, could you please triage? I've heard that you are the latest IME owner.

--------- beginning of crash
04-12 13:19:33.406 17913 17913 F libc    : Fatal signal 6 (SIGABRT), code -6 in tid 17913 (chromium.chrome)
04-12 13:19:33.507 16898 16898 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
04-12 13:19:33.507 16898 16898 F DEBUG   : Build fingerprint: 'google/hammerhead/hammerhead:6.0/MRA56B/2202591:userdebug/dev-keys'
04-12 13:19:33.507 16898 16898 F DEBUG   : Revision: '0'
04-12 13:19:33.507 16898 16898 F DEBUG   : ABI: 'arm'
04-12 13:19:33.507 16898 16898 F DEBUG   : pid: 17913, tid: 17913, name: chromium.chrome  >>> org.chromium.chrome <<<
04-12 13:19:33.507 16898 16898 F DEBUG   : signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
04-12 13:19:33.530 16898 16898 F DEBUG   : Abort message: 'art/runtime/java_vm_ext.cc:410] JNI DETECTED ERROR IN APPLICATION: bad arguments passed to void org.chromium.content.browser.ContentViewCore.updateImeAdapter(long, int, int, java.lang.String, int, int, int, int, boolean, boolean) (see above for details)'
04-12 13:19:33.530 16898 16898 F DEBUG   :     r0 00000000  r1 000045f9  r2 00000006  r3 b6fafb7c
04-12 13:19:33.530 16898 16898 F DEBUG   :     r4 b6fafb84  r5 b6fafb34  r6 0000000b  r7 0000010c
04-12 13:19:33.530 16898 16898 F DEBUG   :     r8 b4cff378  r9 b4d6a800  sl 00000001  fp 00000001
04-12 13:19:33.530 16898 16898 F DEBUG   :     ip 00000006  sp bebe0a08  lr b6d1fae9  pc b6d20fa8  cpsr 40070010
04-12 13:19:33.565 16898 16898 F DEBUG   : 
04-12 13:19:33.565 16898 16898 F DEBUG   : backtrace:
04-12 13:19:33.565 16898 16898 F DEBUG   :     #00 pc 00040fa8  /system/lib/libc.so (tgkill+12)
04-12 13:19:33.565 16898 16898 F DEBUG   :     #01 pc 0003fae5  /system/lib/libc.so (pthread_kill+32)
04-12 13:19:33.565 16898 16898 F DEBUG   :     #02 pc 0001c30f  /system/lib/libc.so (raise+10)
04-12 13:19:33.565 16898 16898 F DEBUG   :     #03 pc 000194c1  /system/lib/libc.so (__libc_android_abort+34)
04-12 13:19:33.566 16898 16898 F DEBUG   :     #04 pc 000174ac  /system/lib/libc.so (abort+4)
04-12 13:19:33.566 16898 16898 F DEBUG   :     #05 pc 00333859  /system/lib/libart.so (art::Runtime::Abort()+228)
04-12 13:19:33.566 16898 16898 F DEBUG   :     #06 pc 000f45fb  /system/lib/libart.so (art::LogMessage::~LogMessage()+2226)
04-12 13:19:33.566 16898 16898 F DEBUG   :     #07 pc 0025a9af  /system/lib/libart.so (art::JavaVMExt::JniAbort(char const*, char const*)+1550)
04-12 13:19:33.566 16898 16898 F DEBUG   :     #08 pc 0025addb  /system/lib/libart.so (art::JavaVMExt::JniAbortF(char const*, char const*, ...)+74)
04-12 13:19:33.566 16898 16898 F DEBUG   :     #09 pc 0032bd61  /system/lib/libart.so (art::CheckMethodArguments(art::JavaVMExt*, art::ArtMethod*, unsigned int*)+1572)
04-12 13:19:33.566 16898 16898 F DEBUG   :     #10 pc 0032cd35  /system/lib/libart.so (art::InvokeVirtualOrInterfaceWithVarArgs(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jmethodID*, std::__va_list)+700)
04-12 13:19:33.566 16898 16898 F DEBUG   :     #11 pc 00278579  /system/lib/libart.so (art::JNI::CallVoidMethodV(_JNIEnv*, _jobject*, _jmethodID*, std::__va_list)+344)
04-12 13:19:33.566 16898 16898 F DEBUG   :     #12 pc 00110cfd  /system/lib/libart.so (art::CheckJNI::CallMethodV(char const*, _JNIEnv*, _jobject*, _jclass*, _jmethodID*, std::__va_list, art::Primitive::Type, art::InvokeType)+928)
04-12 13:19:33.566 16898 16898 F DEBUG   :     #13 pc 00111f95  /system/lib/libart.so (art::CheckJNI::CallVoidMethodV(_JNIEnv*, _jobject*, _jmethodID*, std::__va_list)+36)
04-12 13:19:33.567 16898 16898 F DEBUG   :     #14 pc 00485cd7  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so
04-12 13:19:33.567 16898 16898 F DEBUG   :     #15 pc 0089d5c5  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so
04-12 13:19:33.567 16898 16898 F DEBUG   :     #16 pc 008b23e7  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so (content::RenderWidgetHostViewAndroid::UpdateInputMethodIfNecessary(bool)+126)
04-12 13:19:33.567 16898 16898 F DEBUG   :     #17 pc 0087ce83  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so (content::WebContentsImpl::UpdateTextInputState(content::RenderWidgetHostViewBase*, bool)+226)
04-12 13:19:33.567 16898 16898 F DEBUG   :     #18 pc 008b4fa1  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so (content::RenderWidgetHostViewAndroid::Destroy()+132)
04-12 13:19:33.567 16898 16898 F DEBUG   :     #19 pc 008055ff  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so (content::RenderWidgetHostImpl::Destroy(bool)+114)
04-12 13:19:33.567 16898 16898 F DEBUG   :     #20 pc 0080592f  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so (content::RenderWidgetHostImpl::ShutdownAndDestroyWidget(bool)+98)
04-12 13:19:33.567 16898 16898 F DEBUG   :     #21 pc 007fe0b5  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so (content::RenderViewHostImpl::ShutdownAndDestroy()+76)
04-12 13:19:33.567 16898 16898 F DEBUG   :     #22 pc 006f5ec3  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so (content::FrameTree::ReleaseRenderViewHostRef(content::RenderViewHostImpl*)+134)
04-12 13:19:33.567 16898 16898 F DEBUG   :     #23 pc 0070d575  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so (content::RenderFrameHostImpl::~RenderFrameHostImpl()+452)
04-12 13:19:33.567 16898 16898 F DEBUG   :     #24 pc 0070d775  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so (content::RenderFrameHostImpl::~RenderFrameHostImpl()+4)
04-12 13:19:33.568 16898 16898 F DEBUG   :     #25 pc 007106e1  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so (content::RenderFrameHostManager::DeleteFromPendingList(content::RenderFrameHostImpl*)+48)
04-12 13:19:33.568 16898 16898 F DEBUG   :     #26 pc 00707941  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so (content::RenderFrameHostImpl::OnSwappedOut()+136)
04-12 13:19:33.568 16898 16898 F DEBUG   :     #27 pc 0070e1ed  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so
04-12 13:19:33.568 16898 16898 F DEBUG   :     #28 pc 007fa84b  /data/app/org.chromium.chrome-1/lib/arm/libcontent.cr.so
04-12 13:19:33.568 16898 16898 F DEBUG   :     #29 pc 000183bf  /data/app/org.chromium.chrome-1/lib/arm/libipc.cr.so (IPC::ChannelProxy::Context::OnDispatchMessage(IPC::Message const&)+130)
04-12 13:19:33.568 16898 16898 F DEBUG   :     #30 pc 0006ec49  /data/app/org.chromium.chrome-1/lib/arm/libbase.cr.so (base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask const&)+292)
04-12 13:19:33.568 16898 16898 F DEBUG   :     #31 pc 00083d89  /data/app/org.chromium.chrome-1/lib/arm/libbase.cr.so (base::MessageLoop::RunTask(base::PendingTask const&)+344)
04-12 13:19:33.568 16898 16898 F DEBUG   :     #32 pc 000843af  /data/app/org.chromium.chrome-1/lib/arm/libbase.cr.so (base::MessageLoop::DeferOrRunPendingTask(base::PendingTask const&)+26)
04-12 13:19:33.568 16898 16898 F DEBUG   :     #33 pc 0008448b  /data/app/org.chromium.chrome-1/lib/arm/libbase.cr.so (base::MessageLoop::DoWork()+114)
04-12 13:19:33.568 16898 16898 F DEBUG   :     #34 pc 00085c37  /data/app/org.chromium.chrome-1/lib/arm/libbase.cr.so (Java_org_chromium_base_SystemMessageHandler_nativeDoRunLoopOnce+78)
04-12 13:19:33.568 16898 16898 F DEBUG   :     #35 pc 00ecc5d5  /data/app/org.chromium.chrome-1/oat/arm/base.odex (offset 0xc2b000) (void org.chromium.base.SystemMessageHandler.nativeDoRunLoopOnce(long, long)+104)
04-12 13:19:33.568 16898 16898 F DEBUG   :     #36 pc 00ecca2f  /data/app/org.chromium.chrome-1/oat/arm/base.odex (offset 0xc2b000) (void org.chromium.base.SystemMessageHandler.handleMessage(android.os.Message)+178)
04-12 13:19:33.568 16898 16898 F DEBUG   :     #37 pc 732fde71  /data/dalvik-cache/arm/system@framework@boot.oat (offset 0x1eb0000)
04-12 13:19:34.613   788 25964 W ActivityManager:   Force finishing activity org.chromium.chrome/.browser.ChromeTabbedActivity
04-12 13:19:34.617 16898 16898 F DEBUG   :

Comment 1 by mariakho...@chromium.org, Apr 12 2016 

Forgot to mention, this is happening when synced to head.

Comment 2 by yfried...@chromium.org, Apr 14 2016

Cc: rnep...@chromium.org mikec...@chromium.org mlliu@chromium.org yfried...@chromium.org
 Issue 603335  has been merged into this issue.

Comment 3 by hzl@chromium.org, Apr 14 2016 

This happened when I was running a UIAutomator testcase that tried to visit chrome://crashes.

Comment 4 by changwan@chromium.org, Apr 14 2016

Cc: changwan@chromium.org
Owner: yabinh@chromium.org
Copying art's JNI error message in logcat from the merged issue:

04-13 11:02:17.626  6909  6909 E art     : JNI ERROR (app bug): expected jboolean (0/1) but got value of 98 as argument 10 to void org.chromium.content.browser.ContentViewCore.updateImeAdapter(long, int, int, java.lang.String, int, int, int, int, boolean, boolean)
04-13 11:02:17.682  6909  6909 F art     : art/runtime/java_vm_ext.cc:410] JNI DETECTED ERROR IN APPLICATION: bad arguments passed to void org.chromium.content.browser.ContentViewCore.updateImeAdapter(long, int, int, java.lang.String, int, int, int, int, boolean, boolean) (see above for details)
04-13 11:02:17.682  6909  6909 F art     : art/runtime/java_vm_ext.cc:410]     from void org.chromium.base.SystemMessageHandler.nativeDoRunLoopOnce(long, long)

It seems that we might need to use static_cast<jboolean>().

yabinh@, could you take a look?

Comment 5 by yabinh@chromium.org, Apr 15 2016 

No problem.

Comment 6 by yabinh@chromium.org, Jun 2 2016

Status: WontFix (was: Assigned)
I can't reproduce this bug on TOT. I've also checked Stable, Beta, Dev.
So I'll close this bug.
►

Sign in to add a comment