New issue
Advanced search Search tips

Issue 607958 link

Starred by 2 users

Issue metadata

Status: Duplicate
Owner:
Closed: Jul 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug

Blocking:
issue 651853



Sign in to add a comment

[Blimp] ASSERTION FAILED: !needsLayout() /third_party/WebKit/Source/core/layout/LayoutObject.h(325)

Project Member Reported by haibinlu@chromium.org, Apr 29 2016

Issue description

search a movie on google.com. Engine crashes.


[16515:16534:0429/103324:VERBOSE1:blimp_message_pump.cc(59)] Received <BlimpMessage type=COMPOSITOR render_widget_id=2 target_tab_id=0 byte_size=82>
ASSERTION FAILED: !needsLayout()
../../third_party/WebKit/Source/core/layout/LayoutObject.h(325) : void blink::LayoutObject::assertLaidOut() const
1   0x7fe2936756e0 blink::CompositedLayerMapping::paintContents(blink::GraphicsLayer const*, blink::GraphicsContext&, unsigned int, blink::IntRect const&) const
2   0x7fe29680118b blink::GraphicsLayer::paintWithoutCommit(blink::IntRect const*, blink::GraphicsContext::DisabledMode)
3   0x7fe296800f60 blink::GraphicsLayer::paint(blink::IntRect const*, blink::GraphicsContext::DisabledMode)
4   0x7fe29330bab4 blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
5   0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
6   0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
7   0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
8   0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
9   0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
10  0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
11  0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
12  0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
13  0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
14  0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
15  0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
16  0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
17  0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively(blink::GraphicsLayer*)
18  0x7fe29330b3f5 blink::FrameView::synchronizedPaint()
19  0x7fe29330a8fb blink::FrameView::updateLifecyclePhasesInternal(blink::FrameView::LifeCycleUpdateOption)
20  0x7fe293464e3a blink::PageAnimator::updateAllLifecyclePhases(blink::LocalFrame&)
21  0x7fe299e1637f blink::WebViewImpl::updateAllLifecyclePhases()
22  0x7fe29b63a4c1 content::RenderWidgetCompositor::UpdateLayerTreeHost()
23  0x7fe2965babf6 cc::ProxyMain::BeginMainFrame(std::unique_ptr<cc::BeginMainFrameAndCommitState, std::default_delete<cc::BeginMainFrameAndCommitState> >)
24  0x7fe2965c30a8 cc::RemoteChannelMain::HandleProto(cc::proto::CompositorMessageToMain const&)
25  0x7fe2965c2d8d cc::RemoteChannelMain::OnProtoReceived(std::unique_ptr<cc::proto::CompositorMessage, std::default_delete<cc::proto::CompositorMessage> >)
26  0x7fe29b63adb8 content::RenderWidgetCompositor::OnHandleCompositorProto(std::vector<unsigned char, std::allocator<unsigned char> > const&)
27  0x7fe29b6ddbf7
28  0x7fe29b6dad65 content::RenderWidget::OnMessageReceived(IPC::Message const&)
29  0x7fe29b6c7248 content::RenderViewImpl::OnMessageReceived(IPC::Message const&)
30  0x7fe297284607 IPC::MessageRouter::RouteMessage(IPC::Message const&)
31  0x7fe297284548 IPC::MessageRouter::OnMessageReceived(IPC::Message const&)
Received signal 11 SEGV_MAPERR 0000fbadbeef
#0 0x7fe29c65cc37 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#1 0x7fe299293d40 <unknown>
#2 0x7fe293674a3d blink::CompositedLayerMapping::doPaintTask()
#3 0x7fe2936756e0 blink::CompositedLayerMapping::paintContents()
#4 0x7fe29680118b blink::GraphicsLayer::paintWithoutCommit()
#5 0x7fe296800f60 blink::GraphicsLayer::paint()
#6 0x7fe29330bab4 blink::FrameView::synchronizedPaintRecursively()
#7 0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively()
#8 0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively()
#9 0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively()
#10 0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively()
#11 0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively()
#12 0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively()
#13 0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively()
#14 0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively()
#15 0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively()
#16 0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively()
#17 0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively()
#18 0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively()
#19 0x7fe29330bb2b blink::FrameView::synchronizedPaintRecursively()
#20 0x7fe29330b3f5 blink::FrameView::synchronizedPaint()
#21 0x7fe29330a8fb blink::FrameView::updateLifecyclePhasesInternal()
#22 0x7fe293464e3a blink::PageAnimator::updateAllLifecyclePhases()
#23 0x7fe299e1637f blink::WebViewImpl::updateAllLifecyclePhases()
#24 0x7fe29b63a4c1 content::RenderWidgetCompositor::UpdateLayerTreeHost()
#25 0x7fe2965babf6 cc::ProxyMain::BeginMainFrame()
#26 0x7fe2965c30a8 cc::RemoteChannelMain::HandleProto()
#27 0x7fe2965c2d8d cc::RemoteChannelMain::OnProtoReceived()
#28 0x7fe29b63adb8 content::RenderWidgetCompositor::OnHandleCompositorProto()
#29 0x7fe29b6ddbf7 _ZN3IPC8MessageTI34ViewMsg_HandleCompositorProto_MetaSt5tupleIJSt6vectorIhSaIhEEEEvE8DispatchIN7content12RenderWidgetESA_vMSA_FvRKS5_EEEbPKNS_7MessageEPT_PT0_PT1_T2_
#30 0x7fe29b6dad65 content::RenderWidget::OnMessageReceived()
#31 0x7fe29b6c7248 content::RenderViewImpl::OnMessageReceived()
#32 0x7fe297284607 IPC::MessageRouter::RouteMessage()
#33 0x7fe297284548 IPC::MessageRouter::OnMessageReceived()
#34 0x7fe29ab99a85 content::ChildThreadImpl::OnMessageReceived()
#35 0x7fe297274cd5 IPC::ChannelProxy::Context::OnDispatchMessage()
#36 0x7fe29c65e2cc base::debug::TaskAnnotator::RunTask()
#37 0x7fe296dba527 scheduler::TaskQueueManager::ProcessTaskFromWorkQueue()
#38 0x7fe296db91a5 scheduler::TaskQueueManager::DoWork()
#39 0x7fe296dbb584 _ZN4base8internal7InvokerINS_13IndexSequenceIJLm0ELm1ELm2EEEENS0_9BindStateINS0_15RunnableAdapterIMN9scheduler16TaskQueueManagerEFvNS_9TimeTicksEbEEEFvPS7_S8_bEJNS_7WeakPtrIS7_EERS8_bEEENS0_12InvokeHelperILb1EvSB_EEFvvEE3RunEPNS0_13BindStateBaseE
#40 0x7fe29c65e2cc base::debug::TaskAnnotator::RunTask()
#41 0x7fe29c687975 base::MessageLoop::RunTask()
#42 0x7fe29c687cd8 base::MessageLoop::DeferOrRunPendingTask()
#43 0x7fe29c68806b base::MessageLoop::DoWork()
#44 0x7fe29c689a0f base::MessagePumpDefault::Run()
#45 0x7fe29c6874a1 base::MessageLoop::RunHandler()
#46 0x7fe29c6b5ec0 base::RunLoop::Run()
#47 0x7fe29c6865b0 base::MessageLoop::Run()
#48 0x7fe29b6ea880 content::RendererMain()
#49 0x7fe29b80500b content::RunZygote()
#50 0x7fe29b8055a2 content::RunNamedProcessTypeMain()
#51 0x7fe29b805fe3 content::ContentMainRunnerImpl::Run()
#52 0x7fe29b804be0 content::ContentMain()
#53 0x000000411451 main
#54 0x7fe29927eec5 __libc_start_main

 
HEAD

commit 3da0dd9308f66ae1122bbaefda2c99a4f90372d4
Author: huangs <huangs@chromium.org>
Date:   Thu Apr 28 15:14:45 2016 -0700

Comment 2 by r...@opera.com, May 3 2016

Cc: chrishtr@chromium.org
I get a similar stack running Debug content_shell on Linux.

Not particularly easy to reproduce, but I've hit it three times doing:

1. Load http://www.vg.no/
2. Switch between scrolling up and down and resizing the window.

Received signal 11 SEGV_MAPERR 0000fbadbeef
#0 0x0000008134ae base::debug::StackTrace::StackTrace()
#1 0x000000812fef base::debug::(anonymous namespace)::StackDumpSignalHandler()
#2 0x7fbbceb4dd10 <unknown>
#3 0x00000386d285 blink::LayoutObject::assertLaidOut()
#4 0x00000386bbf8 blink::LayoutObject::assertSubtreeIsLaidOut()
#5 0x000003e019cb blink::CompositedLayerMapping::doPaintTask()
#6 0x000003e02a13 blink::CompositedLayerMapping::paintContents()
#7 0x00000761fd94 blink::GraphicsLayer::paintWithoutCommit()
#8 0x00000761f995 blink::GraphicsLayer::paint()
#9 0x00000386450d blink::FrameView::synchronizedPaintRecursively()
#10 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#11 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#12 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#13 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#14 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#15 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#16 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#17 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#18 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#19 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#20 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#21 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#22 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#23 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#24 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#25 0x0000038645db blink::FrameView::synchronizedPaintRecursively()
#26 0x000003863eb5 blink::FrameView::synchronizedPaint()
#27 0x000003863327 blink::FrameView::updateLifecyclePhasesInternal()
#28 0x000003862f12 blink::FrameView::updateAllLifecyclePhases()
#29 0x000003a3317a blink::PageAnimator::updateAllLifecyclePhases()
#30 0x000002624715 blink::PageWidgetDelegate::updateAllLifecyclePhases()
#31 0x0000025c8b58 blink::WebViewImpl::updateAllLifecyclePhases()
#32 0x00000582860a content::RenderWidget::UpdateVisualState()
#33 0x000005ab9701 content::RenderWidgetCompositor::UpdateLayerTreeHost()
#34 0x0000065006ed cc::LayerTreeHost::RequestMainFrameUpdate()
#35 0x0000065965cb cc::ProxyMain::BeginMainFrame()

Components: -Mobile>Blimp Blink>Layout
Per #2, this is not blimp specific.

Comment 4 by e...@chromium.org, May 9 2016

Components: Blink>Paint
Status: Available (was: Untriaged)

Comment 5 by cbruni@chromium.org, Jun 23 2016

I get this currently consistently after a 1 or 2 hours of playing random youtube videos in the background on the optdebug build on 51.0.2704.103.
I'm trying to repro a v8 bug which gets shadowed by the frequent assertLaidOut failures.
Owner: wangxianzhu@chromium.org
Status: Assigned (was: Available)
Blocking: 590856
This seems another case of bug 590856.
Blocking: -590856
Mergedinto: 590856
Status: Duplicate (was: Assigned)
Blocking: 590856
Blocking: -590856
Blocking: 651853

Sign in to add a comment