New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 608687 link

Starred by 2 users

Issue metadata

Status: Verified
Owner:
inactive
Closed: May 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows , Chrome
Pri: 1
Type: Bug



Sign in to add a comment

Browser crash is observed on dragging beginning inkdrop till the end of the url of ‘Google My Business’

Reported by dmascare...@etouch.net, May 3 2016

Issue description

Chrome Version:52.0.2723.0 Revision 5e216d9b62275101c30f4a5cb2174bb68970ef3c-refs/heads/master@{#391139} 32/64 bit
OS: Windows 10 (Touch Device)

Test url:
https://www.google.co.in/intl/en-GB/business/?hl=en-GB&utm_campaign=in-en_GB-et-gs-z-gmb-l-z-h~my%7Credirect%7Cu&utm_medium=et&gmbsrc=in-en_GB-et-gs-z-gmb-l-z-h~my%7Credirect%7Cu&ppsrc=GMBLR&utm_source=gmb

What steps will reproduce the problem?
1. Launch chrome and navigate to above url.
2. Select above url using tap and drag the beginner inkdrop till the end of the url
3. Observe.

Actual: Browser crash is observed.
Expected: Browser should not crash.

Crash id: crash id d94edc6c00000000

This is regression issue, broken in ‘M 41’ and below is narrow bisect: 
https://chromium.googlesource.com/chromium/src/+log/f979ea9020ef7fcadf326b003a55fcf02c0d19c4..7460a26459e033bf0c747384a5341e6fdc336286?pretty=fuller&n=100

Suspecting: r304524 ?

Good build:41.0.2222.0
Bad build:41.0.2223.0

Kindly help to re-assign if your change is not the cause for this issue.

Note: Above issue is touch device specific issue.

 
Actual-1.mp4
644 KB Download
Components: Internals>Input>Touch>Screen
Cc: tdres...@chromium.org moh...@chromium.org
Labels: -Pri-2 OS-Chrome Pri-1
Thanks for logging this. It is reproducible on CrOS as well, so likely happens on all Aura platforms.
Labels: hasTestcase
Project Member

Comment 4 by bugdroid1@chromium.org, May 16 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/d5cb3202cbde9e8d60632bfbcbb3ce1582ea36d3

commit d5cb3202cbde9e8d60632bfbcbb3ce1582ea36d3
Author: mfomitchev <mfomitchev@chromium.org>
Date: Mon May 16 18:53:12 2016

Fixes a crash which occurs when a concealed selection handle in a textfield is exposed.

The crash happened because the type of the SelectionBound within the handle
wasn't getting initialized properly if the handle was invisible.

The CL ensures that the correct SelectionBound type is maintained even for
handles which are invisible.

BUG= 608687 

Review-Url: https://codereview.chromium.org/1947123003
Cr-Commit-Position: refs/heads/master@{#393885}

[modify] https://crrev.com/d5cb3202cbde9e8d60632bfbcbb3ce1582ea36d3/ui/views/touchui/touch_selection_controller_impl.cc
[modify] https://crrev.com/d5cb3202cbde9e8d60632bfbcbb3ce1582ea36d3/ui/views/touchui/touch_selection_controller_impl.h
[modify] https://crrev.com/d5cb3202cbde9e8d60632bfbcbb3ce1582ea36d3/ui/views/touchui/touch_selection_controller_impl_unittest.cc

Status: Fixed (was: Assigned)
Status: Verified (was: Fixed)
52.0.2739.0

Sign in to add a comment