New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 607071 link

Starred by 3 users
Status: Fixed
Owner:
tmartino@chromium.org
Closed: Apr 2016
Cc:
ajha@chromium.org
█ kavvaru@chromium.org
█ brajkumar@chromium.org
█ durga.behera@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 1
Type: Bug-Regression



Sign in to add a comment

Regression : Browser Crash is seen on clicking ok Button of Autofill settings page

Project Member Reported by mm00333...@techmahindra.com, Apr 27 2016 
Version: 52.0.2718.0
OS:Ubuntu 12.04,14.04,Windows

What steps will reproduce the problem?
(1)Launch chrome -> Go to chrome://settings/autofill->Click on 'Add new street address' and Now enter data for Name or any field and click on "ok"
(2)Now click on "Edit" and edit any field -> Click on "ok"(please refer video)
(3)Now Click on 'Add new street address' and Now enter data for Name field only and click on "ok" and observe Browser crash

Expected: Browser Crash should not be seen on clicking ok Button
Actual: Instead Browser Crash is seen 

Below are the Crash IDs: 
Crash ID d3f996d200000000 (Chrome)
Crash ID 26b856d200000000 (Chrome)

This is Regression Issue broken in M-52
Will provide bisect info soon
Expected_Autofil.ogv
2.0 MB Download
Actual_AutofilCrash.ogv
1.9 MB Download

Comment 1 by kavvaru@chromium.org, Apr 27 2016

Labels: ReleaseBlock-Dev Needs-Bisect OS-Mac
Status: Untriaged (was: Unconfirmed)
Able to reproduce the issue on Mac 10.11.4 using chrome version 52.0.2718.0.
Crash is observed on adding new address after editing the first address.

stack Trace
==========================
Thread 0 CRASHED [SIGSEGV @ 0xffffeba22d9df000 ] MAGIC SIGNATURE THREAD
0x00007f38cc1b83ff	(chrome -./out/Release/../../components/autofill/core/browser/autofill_data_util.cc:138 )	autofill::data_util::ProfileMatchesFullName
0x00007f38cc21fcd9	(chrome -./out/Release/../../base/allocator/allocator_shim.cc:150 )	ShimCppNew
0x00007f38cff12b04	(chrome -./out/Release/../../build/linux/debian_wheezy_amd64-sysroot/usr/lib/gcc/x86_64-linux-gnu/4.6/../../../../include/c++/4.6/ext/new_allocator.h:92 )	std::basic_string<unsigned short, base::string16_char_traits, std::allocator<unsigned short> >::_Rep::_S_create
0x00007f38cff1e662	(chrome -./out/Release/../../build/linux/debian_wheezy_amd64-sysroot/usr/lib/gcc/x86_64-linux-gnu/4.6/../../../../include/c++/4.6/bits/basic_string.tcc:140 )	base::UTF8ToUTF16
0x00007f38cff4be3e	(chrome -./out/Release/../../build/linux/debian_wheezy_amd64-sysroot/usr/lib/gcc/x86_64-linux-gnu/4.6/../../../../include/c++/4.6/bits/basic_string.h:578 )	base::StringValue::GetAsString
0x00007f38cf79d80d	(chrome -./out/Release/../../chrome/browser/ui/webui/options/autofill_options_handler.cc:487 )	options::AutofillOptionsHandler::SetAddress
0x00007f38c5485a88	(libstdc++.so.6.0.16 -locale_facets.tcc:501 )	std::num_get<char, std::istreambuf_iterator<char, std::char_traits<char> > >::_M_extract_int<unsigned int>
0x00007f38c5486a5a	(libstdc++.so.6.0.16 -locale_facets.tcc:387 )	std::num_get<char, std::istreambuf_iterator<char, std::char_traits<char> > >::_M_extract_int<long long unsigned int>
0x00007f38cc39c593	(chrome -./out/Release/../../url/gurl.cc:74 )	GURL::GURL
0x00007f38d0adfeb4	(chrome + 0x05826eb4 )	_fini

Manisha@ Please provide the bisect information for this issue.

Adding Dev blocker as this is regressed in M52. Please feel free to decrease the blocker if not blocking.

Thanks,

Comment 2 by mm00333...@techmahindra.com, Apr 27 2016

Labels: -Needs-Bisect hasbisect
Owner: tmartino@chromium.org
Status: Assigned (was: Untriaged)
Manual good and Bad Builds:

Good Build: 52.0.2712.0
Bad Build:  52.0.2713.0

Below is the Tool Bisect Info:

CHANGELOG URL:
https://chromium.googlesource.com/chromium/src/+log/a986d5d6c1c044953d81b1342ae6ab5e138c6ebc..2706044fbb030e69675bd0ff28c0b332bd486c44

Suspecting https://codereview.chromium.org/1868003003 from changelog

@tmartino: Please feel free to re-assign if its not related to your change

Comment 3 by kavvaru@chromium.org, Apr 27 2016

Labels: -ReleaseBlock-Dev ReleaseBlock-Beta
As per the crash data on canary 52.0.2718.0 on Linux all 11 instances are from single client id.Hence decreasing the blocker label.
Project Member

Comment 4 by sheriffbot@chromium.org, Apr 27 2016

Labels: Fracas
Users experienced this crash on the following builds:

Mac Canary 52.0.2717.0 -  0.20 CPM, 1 reports, 1 clients (signature autofill::data_util::ProfileMatchesFullName)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas

Comment 6 by tmartino@chromium.org, Apr 27 2016

Status: Fixed (was: Assigned)
►

Sign in to add a comment