New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 607081 link

Starred by 4 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Dec 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 2
Type: Bug-Regression



Sign in to add a comment

Regression: Browser crashes on removing second person after removing signed in user.

Project Member Reported by sc00335...@techmahindra.com, Apr 27 2016

Issue description

Version: 52.0.2718.0 dev
OS: Ubuntu 12.04,14.04,windows

What steps will reproduce the problem?
(1) Launch chrome and create two persons[Say Person1 and Person2]
(2) Now Go to chrome://md-settings in Person1 and sign in to chrome[Let it sync completely] >> Go to chrome://settings and remove Person1
(3) Now go to Person2, try removing Person2 and observe.

Expected: Browser should not crash on deleting second user after deleting first signed in user

Actual: Instead browser crash is seen

Crash id's: 4c525ce200000000 ,  ef125ce200000000

This is a regression issue broken in M52.

Good Build: 52.0.2712.0 dev
Bad Build:  52.0.2713.0 dev

Unable to provide changelog as we are unable to login to chromium builds. Hence providing manual changelog URL.

CHANGELOG URL: https://chromium.googlesource.com/chromium/src/+log/52.0.2712.0..52.0.2713.0?pretty=fuller&n=10000

Suspecting https://codereview.chromium.org/1900913002 from changelog.

@tommycli: Please help in re-assigning if it is not related to your change.
 
Actual_crash.ogv
2.0 MB Download
Labels: ReleaseBlock-Dev OS-Mac
Able to reproduce the issue on Mac 10.11.4 using chrome version 52.0.2718.0 

stack trace
==================
Thread 0 CRASHED [SIGSEGV @ 0x00000000 ] MAGIC SIGNATURE THREAD
0x00007fa9786bf9d1	(chrome -./out/Release/../../chrome/browser/profiles/profile_info_cache.cc:290 )	ProfileInfoCache::DeleteProfileFromCache
0x00007fa9786cf459	(chrome -./out/Release/../../chrome/browser/profiles/profile_manager.cc:1404 )	ProfileManager::FinishDeletingProfile
0x00007fa979ad4a35	(chrome -./out/Release/../../base/synchronization/lock.h:27 )	content::BrowserThread::PostTask
0x00007fa978b03c55	(chrome -./out/Release/../../build/linux/debian_wheezy_amd64-sysroot/usr/lib/gcc/x86_64-linux-gnu/4.6/../../../../include/c++/4.6/bits/char_traits.h:257 )	GURL::operator==
0x00007fa9786cf0ee	(chrome -./out/Release/../../chrome/browser/profiles/profile_manager.cc:1626 )	ProfileManager::OnNewActiveProfileLoaded
0x00007fa97cec893a	(chrome + 0x054a893a )	_fini
0x00007fa97cec8772	(chrome + 0x054a8772 )	_fini
0x00007fa9786d16d7	(chrome -./out/Release/../../base/callback.h:397 )	ProfileManager::OnProfileCreated
0x00007fa9786d172f	(chrome + 0x00cb172f )	
0x00007fa9786b8321	(chrome -./out/Release/../../chrome/browser/profiles/profile_impl.cc:625 )	ProfileImpl::DoFinalInit
0x00007fa978dd485a	(chrome -./out/Release/../../build/linux/debian_wheezy_amd64-sysroot/usr/lib/gcc/x86_64-linux-gnu/4.6/../../../../include/c++/4.6/bits/functional_hash.h:132 )	PrefNotifierImpl::FireObservers
0x00007fa97899d1cc	(chrome -./out/Release/../../third_party/tcmalloc/chromium/src/thread_cache.h:201 )	do_free_with_callback
0x00007fa978dd04c3	(chrome -./out/Release/../../components/prefs/json_pref_store.cc:232 )	JsonPrefStore::SetValue
0x00007fa9785750ef	(chrome + 0x00b550ef )	
0x00007fa9785750ef	(chrome + 0x00b550ef )	
0x00007fa9785750ef	(chrome + 0x00b550ef )	
0x00007fa9785750ef	(chrome + 0x00b550ef )	
0x00007fa9785750ef	(chrome + 0x00b550ef )	
0x00007fa9785750ef	(chrome + 0x00b550ef )	
0x00007fa9785750ef	(chrome + 0x00b550ef )	
0x00007fa9786ba039	(chrome -./out/Release/../../chrome/browser/profiles/profile_impl.cc:832 )	ProfileImpl::OnLocaleReady
0x00007fa97155292c	(libc-2.19.so -clock_gettime.c:115 )	__clock_gettime
0x00007fa97c697f12	(chrome -./out/Release/../../base/time/time_posix.cc:98 )	base::TimeTicks::Now
0x00007fa97c677902	(chrome -./out/Release/../../base/profiler/tracked_time.cc:51 )	tracked_objects::TrackedTime::Now
0x00007fa97c6af9e5	(chrome -./out/Release/../../base/tracked_objects.cc:739 )	tracked_objects::ThreadData::Now
0x00007fa9786b78ab	(chrome -./out/Release/../../chrome/browser/profiles/profile_impl.cc:853 )	ProfileImpl::OnPrefsLoaded
0x00007fa97ceb95b1	(chrome -./out/Release/../../third_party/tcmalloc/chromium/src/tcmalloc.cc:1045 )	tc_malloc
0x00007fa978dd47ce	(chrome -./out/Release/../../base/callback.h:397 )	PrefNotifierImpl::OnInitializationCompleted
0x00007fa978dd120f	(chrome + 0x013b120f )	
0x00007fa97cc5f02a	(chrome -./out/Release/../../components/user_prefs/tracked/segregated_pref_store.cc:47 )	SegregatedPrefStore::AggregatingObserver::OnInitializationCompleted
0x00007fa978dd13bd	(chrome -./out/Release/../../components/prefs/json_pref_store.cc:440 )	JsonPrefStore::FinalizeFileRead
0x00007fa978dd1e6e	(chrome -./out/Release/../../base/bind_internal.h:181 )	base::internal::Invoker<base::IndexSequence<0, 1>, base::internal::BindState<base::internal::RunnableAdapter<void (JsonPrefStore::*)(bool, std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool)>, void (JsonPrefStore *, bool, std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool), base::WeakPtr<JsonPrefStore>, bool &>, base::internal::InvokeHelper<true, void, base::internal::RunnableAdapter<void (JsonPrefStore::*)(bool, std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool)> >, void (std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool)>::Run
0x00007fa97cc5d1ef	(chrome -./out/Release/../../base/callback.h:397 )	PrefHashFilter::FinalizeFilterOnLoad
0x00007fa97cc5e596	(chrome -./out/Release/../../components/prefs/scoped_user_pref_update.h:74 )	PrefServiceHashStoreContents::Reset
0x00007fa97cc5cdbf	(chrome + 0x0523cdbf )	
0x00007fa97cc61351	(chrome -./out/Release/../../base/bind_internal.h:181 )	base::internal::Invoker<base::IndexSequence<0, 1>, base::internal::BindState<base::internal::RunnableAdapter<void (InterceptablePrefFilter::*)(const base::Callback<void (std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool), base::internal::CopyMode::Copyable> &, std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool)>, void (InterceptablePrefFilter *, const base::Callback<void (std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool), base::internal::CopyMode::Copyable> &, std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool), base::WeakPtr<InterceptablePrefFilter>, const base::Callback<void (std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool), base::internal::CopyMode::Copyable> &>, base::internal::InvokeHelper<true, void, base::internal::RunnableAdapter<void (InterceptablePrefFilter::*)(const base::Callback<void (std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool), base::internal::CopyMode::Copyable> &, std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool)> >, void (std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool)>::Run
0x00007fa97cc6034a	(chrome -./out/Release/../../base/callback.h:397 )	TrackedPreferencesMigrator::InterceptFilterOnLoad
0x00007fa97ceb94ff	(chrome -./out/Release/../../third_party/tcmalloc/chromium/src/malloc_hook.cc:260 )	sbrk
0x00007fa97cc604b8	(chrome -./out/Release/../../base/bind_internal.h:191 )	base::internal::Invoker<base::IndexSequence<0, 1>, base::internal::BindState<base::internal::RunnableAdapter<void ((anonymous namespace)::TrackedPreferencesMigrator::*)((anonymous namespace)::TrackedPreferencesMigrator::PrefFilterID, const base::Callback<void (std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool), base::internal::CopyMode::Copyable> &, std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >)>, void ((anonymous namespace)::TrackedPreferencesMigrator *, (anonymous namespace)::TrackedPreferencesMigrator::PrefFilterID, const base::Callback<void (std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool), base::internal::CopyMode::Copyable> &, std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >), (anonymous namespace)::TrackedPreferencesMigrator *, (anonymous namespace)::TrackedPreferencesMigrator::PrefFilterID>, base::internal::InvokeHelper<false, void, base::internal::RunnableAdapter<void ((anonymous namespace)::TrackedPreferencesMigrator::*)((anonymous namespace)::TrackedPreferencesMigrator::PrefFilterID, const base::Callback<void (std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool), base::internal::CopyMode::Copyable> &, std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >)> >, void (const base::Callback<void (std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >, bool), base::internal::CopyMode::Copyable> &, std::unique_ptr<base::DictionaryValue, std::default_delete<base::DictionaryValue> >)>::Run
0x00007fa97cc61241	(chrome -./out/Release/../../base/callback.h:397 )	InterceptablePrefFilter::FilterOnLoad
0x00007fa97cc612bf	(chrome + 0x052412bf )	
0x00007fa978dd07f5	(chrome -./out/Release/../../components/prefs/json_pref_store.cc:385 )	JsonPrefStore::OnFileRead
0x00007fa978dd1ddf	(chrome + 0x013b1ddf )	
0x00007fa978dd06af	(chrome + 0x013b06af )	
0x00007fa978dd1c34	(chrome -./out/Release/../../base/bind_internal.h:181 )	base::internal::Invoker<base::IndexSequence<0>, base::internal::BindState<base::internal::RunnableAdapter<void (JsonPrefStore::*)(std::unique_ptr<JsonPrefStore::ReadResult, std::default_delete<JsonPrefStore::ReadResult> >)>, void (JsonPrefStore *, std::unique_ptr<JsonPrefStore::ReadResult, std::default_delete<JsonPrefStore::ReadResult> >), base::WeakPtr<JsonPrefStore> >, base::internal::InvokeHelper<true, void, base::internal::RunnableAdapter<void (JsonPrefStore::*)(std::unique_ptr<JsonPrefStore::ReadResult, std::default_delete<JsonPrefStore::ReadResult> >)> >, void (std::unique_ptr<JsonPrefStore::ReadResult, std::default_delete<JsonPrefStore::ReadResult> >)>::Run
0x00007fa97d16cd86	(chrome + 0x0574cd86 )	_fini
0x00007fa978dd1d37	(chrome -./out/Release/../../base/callback.h:397 )	base::internal::ReplyAdapter<std::unique_ptr<JsonPrefStore::ReadResult, std::default_delete<JsonPrefStore::ReadResult> >, std::unique_ptr<JsonPrefStore::ReadResult, std::default_delete<JsonPrefStore::ReadResult> > >
0x00007fa97d16cd86	(chrome + 0x0574cd86 )	_fini
0x00007fa97c691d53	(chrome -./out/Release/../../base/callback.h:397 )	base::::PostTaskAndReplyRelay::RunReplyAndSelfDestruct
0x00007fa97c64863b	(chrome -./out/Release/../../base/callback.h:397 )	base::debug::TaskAnnotator::RunTask
0x00007fa97899d1cc	(chrome -./out/Release/../../third_party/tcmalloc/chromium/src/thread_cache.h:201 )	do_free_with_callback
0x00007fa978dd0cd9	(chrome -./out/Release/../../components/prefs/json_pref_store.cc:294 )	JsonPrefStore::ReadPrefsAsync
0x00007fa976768e09	(libglib-2.0.so.0.4002.0 + 0x00037e09 )	
0x00007fa97cf0fb61	(chrome + 0x054efb61 )	_fini
0x00007fa97c65d7c4	(chrome -./out/Release/../../base/message_loop/message_loop.cc:479 )	base::MessageLoop::RunTask
0x00007fa9767772cd	(libglib-2.0.so.0.4002.0 + 0x000462cd )	
0x00007fa9767bb9b0	(libglib-2.0.so.0.4002.0 + 0x0008a9b0 )	
0x00007fa976779bd9	(libglib-2.0.so.0.4002.0 + 0x00048bd9 )	
0x00007fa97c65dae7	(chrome -./out/Release/../../base/message_loop/message_loop.cc:488 )	base::MessageLoop::DeferOrRunPendingTask
0x00007fa97c65dc9a	(chrome -./out/Release/../../base/message_loop/message_loop.cc:600 )	base::MessageLoop::DoWork
0x00007fa9785750ef	(chrome + 0x00b550ef )	
0x00007fa97cf0fb52	(chrome + 0x054efb52 )	_fini
0x00007fa97cf0fb61	(chrome + 0x054efb61 )	_fini
0x00007fa978dd0cd9	(chrome -./out/Release/../../components/prefs/json_pref_store.cc:294 )	JsonPrefStore::ReadPrefsAsync
0x00007fa97c65f2f8	(chrome -./out/Release/../../base/message_loop/message_pump_glib.cc:313 )	base::MessagePumpGlib::Run
0x00007fa978569c97	(chrome + 0x00b49c97 )	
0x00007fa97c677bff	(chrome -./out/Release/../../base/run_loop.cc:35 )	base::RunLoop::Run
0x00007fa9785a503c	(chrome -./out/Release/../../chrome/browser/chrome_browser_main.cc:1855 )	ChromeBrowserMainParts::MainMessageLoopRun
0x00007fa979acd070	(chrome -./out/Release/../../content/browser/browser_main_runner.cc:63 )	content::BrowserMainRunnerImpl::Initialize
0x00007fa979aca0a7	(chrome -./out/Release/../../content/browser/browser_main_loop.cc:968 )	content::BrowserMainLoop::RunMainMessageLoopParts
0x00007fa97cf98fe5	(chrome + 0x05578fe5 )	_fini
0x00007fa97cf99010	(chrome + 0x05579010 )	_fini
0x00007fa979accd8a	(chrome -./out/Release/../../content/browser/browser_main_runner.cc:71 )	content::BrowserMainRunnerImpl::Initialize
0x00007fa979acd19c	(chrome -./out/Release/../../content/browser/browser_main_runner.cc:154 )	content::BrowserMainRunnerImpl::Run
0x00007fa979ac575b	(chrome -./out/Release/../../content/browser/browser_main.cc:46 )	content::BrowserMain
0x00007fa971adf024	(libstdc++.so.6.0.19 + 0x000ba024 )	
0x00007fa978569c97	(chrome + 0x00b49c97 )	
0x00007fa97856abcd	(chrome -./out/Release/../../build/linux/debian_wheezy_amd64-sysroot/usr/lib/gcc/x86_64-linux-gnu/4.6/../../../../include/c++/4.6/bits/basic_string.h:2462 )	ChromeMainDelegate::RunProcess
0x00007fa97c625099	(chrome -./out/Release/../../content/app/content_main_runner.cc:742 )	content::ContentMainRunnerImpl::Run
0x00007fa97d3c99bf	(chrome + 0x059a99bf )	_fini
0x00007fa97c623f7f	(chrome -./out/Release/../../content/app/content_main.cc:20 )	content::ContentMain
0x00007fa978569dea	(chrome -./out/Release/../../chrome/app/chrome_main.cc:84 )	ChromeMain
0x00007fa97146bec4	(libc-2.19.so -libc-start.c:287 )	__libc_start_main
0x00007fa978569cc0	(chrome + 0x00b49cc0 )	_start

Adding dev blocker,please feel free to decrease the priority if not blocking.

Thnaks,
Labels: -ReleaseBlock-Dev ReleaseBlock-Stable
Project Member

Comment 3 by sheriffbot@chromium.org, Apr 27 2016

Labels: Fracas
Users experienced this crash on the following builds:

Mac Canary 52.0.2718.0 -  1.56 CPM, 1 reports, 1 clients (signature ProfileInfoCache::DeleteProfileFromCache)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Cc: rnimmagadda@chromium.org
Tested this on Windows 7 for Google Chrome Dev Version - 52.0.2723.0 and the issue is still reproducible.

Thank you.
Labels: -ReleaseBlock-Stable
Verified the issue on Win 7,Mac 10.11.4 and Ubuntu 14.04 using 52.0.2724.0, Unable to reproduce the issue.Please review the attached screen cast and let us know if its resolved.
607081_May_4.ogv
6.5 MB Download
Labels: Needs-Feedback
Labels: -Needs-Feedback
Checked the issue on 52.0.2724.0 dev and is no longer reproducible.
Labels: Pri-2
Since MD Settings has not launched, setting "regression" bugs to P2
Project Member

Comment 9 by sheriffbot@chromium.org, Jun 1 2016

Labels: -M-52 M-53 MovedFrom-52
Moving this nonessential bug to the next milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 10 by sheriffbot@chromium.org, Jun 7 2016

Labels: FoundIn-M-51
Users experienced this crash on the following builds:

Mac Stable 51.0.2704.84 -  0.10 CPM, 1 reports, 1 clients (signature ProfileInfoCache::DeleteProfileFromCache)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Project Member

Comment 11 by sheriffbot@chromium.org, Jul 12 2016

Labels: -M-53 MovedFrom-53
This issue has been moved once and is lower than Pri-1. Removing the milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: -hasTestcase Hotlist-MD-Settings-People HasTestcase
Labels: -Proj-MaterialDesign-WebUI -Hotlist-MD-Settings-People
Owner: ----
Status: WontFix (was: Assigned)
I can't reproduce this anymore. Moreover, there is very little change the CL I made is the culprit.

There still are some crashes on Mac 54, but they may have been fixed already: https://crash.corp.google.com/browse?q=stable_signature%3D%27ProfileInfoCache%3A%3ADeleteProfileFromCache-6adcd997%27%20OMIT%20RECORD%20IF%20SUM(CrashedStackTrace.StackFrame.FunctionName%3D%27ProfileManager%3A%3AOnProfileCreated(Profile*%2C%20bool%2C%20bool)%27)%20%3D%200&ignore_case=false&enable_rewrite=true&omit_field_name=CrashedStackTrace.StackFrame.FunctionName&omit_field_value=ProfileManager%3A%3AOnProfileCreated(Profile*%2C%20bool%2C%20bool)&omit_field_opt=%3D#samplereports

There's a decent chance these new patches from palar@ have fixed this issue: https://codereview.chromium.org/2516613002/

I'm marking this as WONTFIX until we get more recent crashes / repro steps.

Sign in to add a comment