New issue
Advanced search Search tips

Issue 604931 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Apr 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Bug



Sign in to add a comment

blink::PartPainter::paint

Project Member Reported by rookrishna@chromium.org, Apr 19 2016

Issue description

 0 CRASHED [SIGILL @ 0x00007f40ba2e2c18 ] MAGIC SIGNATURE THREAD
0x00007f40ba2e2c18	(chrome + 0x01a4fc18 )	
0x00007f40ba2e324e	(chrome + 0x01a5024e )	
0x00007f40ba204728	(chrome + 0x01971728 )	
0x00007f40bc724ca2	(chrome + 0x03e91ca2 )	
0x00007f40ba433513	(chrome + 0x01ba0513 )	
0x00007f40b862771b	(chrome -PartPainter.cpp:82 )	blink::PartPainter::paint
0x00007f40ba4334d3	(chrome + 0x01ba04d3 )	
0x00007f40b856ede1	(chrome -ObjectPainter.cpp:553 )	blink::ObjectPainter::paintAllPhasesAtomically
0x00007f40b85a697d	(chrome -BlockPainter.cpp:127 )	blink::BlockPainter::paintInlineBox
0x00007f40b83d4985	(chrome -InlineFlowBoxPainter.cpp:50 )	blink::InlineFlowBoxPainter::paint
0x00007f40b83e9273	(chrome -InlineFlowBox.cpp:1062 )	blink::InlineFlowBox::paint
0x00007f40b83edac7	(chrome -RootInlineBoxPainter.cpp:22 )	blink::RootInlineBoxPainter::paint
0x00007f40b83edb33	(chrome -RootInlineBox.cpp:153 )	blink::RootInlineBox::paint
0x00007f40b836a763	(chrome -LineBoxListPainter.cpp:58 )	blink::LineBoxListPainter::paint
0x00007f40b836a054	(chrome -BlockPainter.cpp:250 )	blink::BlockPainter::paintObject
0x00007f40b8369f23	(chrome -LayoutBlock.cpp:1256 )	blink::LayoutBlock::paintObject
0x00007f40b836af5d	(chrome -BlockPainter.cpp:58 )	blink::BlockPainter::paint
0x00007f40b836b453	(chrome -LayoutBlock.cpp:1246 )	blink::LayoutBlock::paint
0x00007f40b83c3b2f	(chrome -PaintLayerPainter.cpp:694 )	blink::PaintLayerPainter::paintLayerContents
0x00007f40b83c4bb3	(chrome -PaintLayerPainter.cpp:118 )	blink::PaintLayerPainter::paintLayerContents
0x00007f40ba474424	(chrome + 0x01be1424 )	
0x00007f40ba4777ba	(chrome + 0x01be47ba )	
0x00007f40bc588a1c	(chrome + 0x03cf5a1c )	
 
Components: -Blink
Status: Available (was: Untriaged)
Looking at reports in crash.corp, almost all look to be stack overflow due to infinite recursion, which implies a layout problem.

Link: https://crash.corp.google.com/browse?q=custom_data.ChromeCrashProto.magic_signature_1.name%3D%27blink%3A%3APartPainter%3A%3Apaint%27

This is a pretty low crash rate.
Project Member

Comment 3 by sheriffbot@chromium.org, Apr 21 2017

Labels: Hotlist-Recharge-Cold
Status: Untriaged (was: Available)
This issue has been available for more than 365 days, and should be re-evaluated. Please re-triage this issue.
The Hotlist-Recharge-Cold label is applied for tracking purposes, and should not be removed after re-triaging the issue.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: -Hotlist-Recharge-Cold BugSource-Chromium PaintTeamTriaged-20170421
Status: WontFix (was: Untriaged)
Still crashes, but at low rates and due to stack overflow.

Sign in to add a comment