Version: 52.0.2717.0
OS: All

What steps will reproduce the problem?
(0) Start a debug build of Chrome with --site-per-process
(1) Visit http://csreis.github.io/tests/cross-site-iframe.html
(2) Click "Go cross-site (complex page)" to load the build waterfall in an OOPIF
(3) Scroll in the iframe

What is the expected output?

The iframe should scroll.

What do you see instead?

We crash in EventHandler::scrollBox on ASSERT(m_frame->isMainFrame());

Note that Nick is not seeing this in a trunk build on Windows, but we may be sync'd to different revisions.  Ken, can you take a look to see if it repros for you?


ASSERTION FAILED: m_frame->isMainFrame()
../../third_party/WebKit/Source/core/input/EventHandler.cpp(644) : blink::ScrollResult blink::EventHandler::scrollBox(blink::LayoutBox *, blink::ScrollGranularity, const blink::FloatSize &, const blink::FloatPoint &, const blink::FloatSize &, bool *)

Received signal 11 SEGV_MAPERR 0000fbadbeef
#0 0x7f92ed135bbe base::debug::StackTrace::StackTrace()
#1 0x7f92ed1356ff base::debug::(anonymous namespace)::StackDumpSignalHandler()
#2 0x7f92daf64340 <unknown>
#3 0x7f92d5a8eafe blink::EventHandler::scrollBox()
#4 0x7f92d5a8f278 blink::EventHandler::physicalScroll()
#5 0x7f92d5a990bc blink::EventHandler::handleGestureScrollUpdate()
#6 0x7f92d5a961b0 blink::EventHandler::handleGestureScrollEvent()
#7 0x7f92d5a95c84 blink::EventHandler::handleGestureEvent()
#8 0x7f92e0e73477 blink::WebFrameWidgetImpl::handleGestureEvent()
#9 0x7f92e0e05dbc blink::PageWidgetDelegate::handleInputEvent()
#10 0x7f92e0e716ef blink::WebFrameWidgetImpl::handleInputEvent()
#11 0x7f92e7f1391c content::RenderWidgetInputHandler::HandleInputEvent()
#12 0x7f92e807b030 content::RenderWidget::OnHandleInputEvent()
#13 0x7f92e7ef9f3d _ZN4base20DispatchToMethodImplIPN7content16IdleUserDetectorEMS2_FvPKN5blink13WebInputEventERKN2ui11LatencyInfoENS1_22InputEventDispatchTypeEEJS7_S9_SC_EJLm0ELm1ELm2EEEEvRKT_T0_RKSt5tupleIJDpT1_EENS_13IndexSequenceIJXspT2_EEEE
#14 0x7f92e808a285 _ZN4base16DispatchToMethodIPN7content12RenderWidgetEMS2_FvPKN5blink13WebInputEventERKN2ui11LatencyInfoENS1_22InputEventDispatchTypeEEJS7_S9_SC_EEEvRKT_T0_RKSt5tupleIJDpT1_EE
#15 0x7f92e808a22f _ZN3IPC16DispatchToMethodIN7content12RenderWidgetEMS2_FvPKN5blink13WebInputEventERKN2ui11LatencyInfoENS1_22InputEventDispatchTypeEEvSt5tupleIJS6_S8_SB_EEEEvPT_T0_PT1_RKT2_
#16 0x7f92e8083cd9 _ZN3IPC8MessageTI30InputMsg_HandleInputEvent_MetaSt5tupleIJPKN5blink13WebInputEventEN2ui11LatencyInfoEN7content22InputEventDispatchTypeEEEvE8DispatchINS9_12RenderWidgetESE_vMSE_FvS6_RKS8_SA_EEEbPKNS_7MessageEPT_PT0_PT1_T2_
#17 0x7f92e807a026 content::RenderWidget::OnMessageReceived()
#18 0x7f92e4fac08b IPC::MessageRouter::RouteMessage()
#19 0x7f92e601ea48 content::ChildThreadImpl::ChildThreadMessageRouter::RouteMessage()
#20 0x7f92e4fac00e IPC::MessageRouter::OnMessageReceived()
#21 0x7f92e6022074 content::ChildThreadImpl::OnMessageReceived()
#22 0x7f92e4f720a8 IPC::ChannelProxy::Context::OnDispatchMessage()
#23 0x7f92e4f76736 _ZN4base8internal15RunnableAdapterIMN3IPC12ChannelProxy7ContextEFvRKNS2_7MessageEEE3RunIS4_JS7_EEEvRK13scoped_refptrIT_EDpOT0_
#24 0x7f92e4f7664e _ZN4base8internal12InvokeHelperILb0EvNS0_15RunnableAdapterIMN3IPC12ChannelProxy7ContextEFvRKNS3_7MessageEEEEE8MakeItSoIJRK13scoped_refptrIS5_ES8_EEEvSB_DpOT_
#25 0x7f92e4f765fd _ZN4base8internal7InvokerINS_13IndexSequenceIJLm0ELm1EEEENS0_9BindStateINS0_15RunnableAdapterIMN3IPC12ChannelProxy7ContextEFvRKNS6_7MessageEEEEFvPS8_SB_EJSF_SB_EEENS0_12InvokeHelperILb0EvSE_EEFvvEE3RunEPNS0_13BindStateBaseE
#26 0x7f92ed115f6e base::Callback<>::Run()
#27 0x7f92ed13b5ae base::debug::TaskAnnotator::RunTask()
#28 0x7f92d8f51ca4 scheduler::TaskQueueManager::ProcessTaskFromWorkQueue()
#29 0x7f92d8f4fc02 scheduler::TaskQueueManager::DoWork()
#30 0x7f92d8f574fe _ZN4base8internal15RunnableAdapterIMN9scheduler16TaskQueueManagerEFvNS_9TimeTicksEbEE3RunIJRKS4_RKbEEEvPS3_DpOT_
#31 0x7f92d8f573fa _ZN4base8internal12InvokeHelperILb1EvNS0_15RunnableAdapterIMN9scheduler16TaskQueueManagerEFvNS_9TimeTicksEbEEEE8MakeItSoINS_7WeakPtrIS4_EEJRKS5_RKbEEEvS8_T_DpOT0_
#32 0x7f92d8f57378 _ZN4base8internal7InvokerINS_13IndexSequenceIJLm0ELm1ELm2EEEENS0_9BindStateINS0_15RunnableAdapterIMN9scheduler16TaskQueueManagerEFvNS_9TimeTicksEbEEEFvPS7_S8_bEJNS_7WeakPtrIS7_EERS8_bEEENS0_12InvokeHelperILb1EvSB_EEFvvEE3RunEPNS0_13BindStateBaseE
#33 0x7f92ed115f6e base::Callback<>::Run()
#34 0x7f92ed13b5ae base::debug::TaskAnnotator::RunTask()
#35 0x7f92ed1b330c base::MessageLoop::RunTask()
#36 0x7f92ed1b35a8 base::MessageLoop::DeferOrRunPendingTask()
#37 0x7f92ed1b3772 base::MessageLoop::DoWork()
#38 0x7f92ed1c5083 base::MessagePumpDefault::Run()
#39 0x7f92ed1b2d1f base::MessageLoop::RunHandler()
#40 0x7f92ed2593c4 base::RunLoop::Run()
#41 0x7f92ed1b1d94 base::MessageLoop::Run()
#42 0x7f92e80a3cb8 content::RendererMain()
#43 0x7f92e8416036 content::RunZygote()
#44 0x7f92e84162e0 content::RunNamedProcessTypeMain()
#45 0x7f92e8417ee9 content::ContentMainRunnerImpl::Run()
#46 0x7f92e8415702 content::ContentMain()
#47 0x7f92edd135a0 ChromeMain
#48 0x7f92edd13532 main
#49 0x7f92d922aec5 __libc_start_main
#50 0x7f92edd13435 <unknown>