New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 609754 link

Starred by 3 users

Issue metadata

Status: WontFix
Owner:
Last visit > 30 days ago
Closed: Jun 2016
Cc:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 2
Type: Bug



Sign in to add a comment

Crash at objc_msgSend/NSAccessibilityGetObjectForAttributeUsingLegacyAPI

Reported by kenorb@gmail.com, May 6 2016

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36

Steps to reproduce the problem:
This kind of crash happened only once.

Backtrace:
Application Specific Information:
objc_msgSend() selector name: window

Thread 0 Crashed:: CrBrowserMain  Dispatch queue: com.apple.main-thread
0   libobjc.A.dylib               	0x00007fff988a14dd objc_msgSend + 29
1   com.apple.AppKit              	0x00007fff9c3ec164 NSAccessibilityGetObjectForAttributeUsingLegacyAPI + 392
2   com.apple.AppKit              	0x00007fff9c3ea7d8 _NSAccessibilityEntryPointValueForAttribute + 1879
3   com.apple.AppKit              	0x00007fff9c77f657 -[NSObject(NSAccessibilityInternal) _accessibilityValueForAttribute:clientError:] + 263
4   com.apple.AppKit              	0x00007fff9c784ff3 CopyAppKitUIElementAttributeValueNoCatch + 50
5   com.apple.AppKit              	0x00007fff9c7829a7 CopyAttributeValue + 351
6   com.apple.HIServices          	0x00007fff87a8b745 _AXXMIGCopyAttributeValue + 290
7   com.apple.HIServices          	0x00007fff87a94a28 _XCopyAttributeValue + 467
8   com.apple.HIServices          	0x00007fff87a6edad mshMIGPerform + 199
9   com.apple.CoreFoundation      	0x00007fff8ba1c839 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE1_PERFORM_FUNCTION__ + 41
10  com.apple.CoreFoundation      	0x00007fff8ba1c7a9 __CFRunLoopDoSource1 + 473
11  com.apple.CoreFoundation      	0x00007fff8ba0de1b __CFRunLoopRun + 2171
12  com.apple.CoreFoundation      	0x00007fff8ba0d338 CFRunLoopRunSpecific + 296
13  com.apple.HIToolbox           	0x00007fff8cda0935 RunCurrentEventLoopInMode + 235
14  com.apple.HIToolbox           	0x00007fff8cda076f ReceiveNextEventCommon + 432
15  com.apple.HIToolbox           	0x00007fff8cda05af _BlockUntilNextEventMatchingListInModeWithFilter + 71
16  com.apple.AppKit              	0x00007fff9c3ce0ee _DPSNextEvent + 1067
17  com.apple.AppKit              	0x00007fff9c79a943 -[NSApplication _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 454
18  com.apple.AppKit              	0x00007fff9c3c3fc8 -[NSApplication run] + 682
19  com.google.Chrome.framework   	0x000000010acb17b6 0x10a737000 + 5744566

What is the expected behavior?

What went wrong?
Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x000007fd49131820

Crashed report ID: dcfb8b6c00000000

How much crashed? Whole browser

Is it a problem with a plugin? N/A 

Did this work before? N/A 

Chrome version: 50.0.2661.94  Channel: stable
OS Version: OS X 10.11.2
Flash Version: Shockwave Flash 21.0 r0
 
Google Chrome_2016-05-06-094352_Rafals-MacBook-Pro-2.crash
171 KB Download
Cc: ranjitkan@chromium.org
Labels: Needs-Feedback
Could you please help us with the steps to reproduce this crash. this will help us to triage the issue further.

Thanks.!

Comment 2 by kenorb@gmail.com, May 28 2016

The same crash happened now, 22 days after, so it's a bit unusual crash.

Date/Time:             2016-05-28 12:12:47.609 +0100
Identifier:            com.google.Chrome
Version:               50.0.2661.94 (2661.94)

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x000007f9b40c22e8

Application Specific Information:
objc_msgSend() selector name: window


Thread 0 Crashed:: CrBrowserMain  Dispatch queue: com.apple.main-thread
0   libobjc.A.dylib               	0x00007fff8f9e94dd objc_msgSend + 29
1   com.apple.AppKit              	0x00007fff8952e164 NSAccessibilityGetObjectForAttributeUsingLegacyAPI + 392
2   com.apple.AppKit              	0x00007fff8952c7d8 _NSAccessibilityEntryPointValueForAttribute + 1879
3   com.apple.AppKit              	0x00007fff898c1657 -[NSObject(NSAccessibilityInternal) _accessibilityValueForAttribute:clientError:] + 263
4   com.apple.AppKit              	0x00007fff898c6ff3 CopyAppKitUIElementAttributeValueNoCatch + 50
5   com.apple.AppKit              	0x00007fff898c49a7 CopyAttributeValue + 351
6   com.apple.HIServices          	0x00007fff99a0a745 _AXXMIGCopyAttributeValue + 290
7   com.apple.HIServices          	0x00007fff99a13a28 _XCopyAttributeValue + 467
8   com.apple.HIServices          	0x00007fff999eddad mshMIGPerform + 199
9   com.apple.CoreFoundation      	0x00007fff9bfd1839 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE1_PERFORM_FUNCTION__ + 41

The system gone crazy, my fans were on full speed, then I click on random Chrome window and it crashed. All my windows, tabs from all the profiles quit.

In crash it's showing Chrome 50.0.2661.94, after restart it's 50.0.2661.102, so I'm not sure which version crashed, probably 50.0.2661.94 since it is in the logs.

I'm also attaching wakeups file which shows:
Date/Time:       2016-05-28 11:09:37 +0100
Wakeups:         165 wakeups per second for 273 seconds
Fan speed:       6154 rpm
Start time:      2016-05-28 11:09:42 +0100
End time:        2016-05-28 11:13:49 +0100
Parent:          launchd
Microstackshots: 44 samples (15%)
User Activity:   0 samples Idle, 52 samples Active
Version:         50.0.2661.102 (2661.102)

from 1h ago, but it may be not relevant. It has plenty of samples and threads, but probably because I'm using multiple profiles at the same time with many tabs (which show different version from the crash after that which is a bit weird).
Google Chrome_2016-05-28-121303_Rafals-MacBook-Pro-2.crash
169 KB Download
Google Chrome_2016-05-28-111459_Rafals-MacBook-Pro-2.wakeups_resource.diag
232 KB Download
Project Member

Comment 3 by sheriffbot@chromium.org, May 28 2016

Labels: -Needs-Feedback Needs-Review
Owner: ranjitkan@chromium.org
Thank you for providing more feedback. Adding requester "ranjitkan@chromium.org" for another review and adding "Needs-Review" label for tracking.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
It looks like this crash also happened/is happening in Firefox. Please try updating your system to 10.11.5.

Comment 5 by tapted@chromium.org, Jun 15 2016

Status: WontFix (was: Unconfirmed)
[mac triage] All our crashes are on 10.11.2 and 10.11.3, and there aren't many. I think upgrading OSX is the right fix here.

Comment 6 by kenorb@gmail.com, Aug 24 2016

My OS X is up-to-date. El Capitan 10.11.2 up-to-date
Chrome: Version 52.0.2743.116 (64-bit) up-to-date

The same crash happened again today.

Thread 0 Crashed:: CrBrowserMain  Dispatch queue: com.apple.main-thread
0   libobjc.A.dylib               	0x00007fff9036b4dd objc_msgSend + 29
1   com.apple.AppKit              	0x00007fff90bca164 NSAccessibilityGetObjectForAttributeUsingLegacyAPI + 392
2   com.apple.AppKit              	0x00007fff90bc87d8 _NSAccessibilityEntryPointValueForAttribute + 1879
3   com.apple.AppKit              	0x00007fff90f5d657 -[NSObject(NSAccessibilityInternal) _accessibilityValueForAttribute:clientError:] + 263
4   com.apple.AppKit              	0x00007fff90f62ff3 CopyAppKitUIElementAttributeValueNoCatch + 50
5   com.apple.AppKit              	0x00007fff90f609a7 CopyAttributeValue + 351
6   com.apple.HIServices          	0x00007fff8fc5a745 _AXXMIGCopyAttributeValue + 290
7   com.apple.HIServices          	0x00007fff8fc63a28 _XCopyAttributeValue + 467
8   com.apple.HIServices          	0x00007fff8fc3ddad mshMIGPerform + 199
9   com.apple.CoreFoundation      	0x00007fff8b000839 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE1_PERFORM_FUNCTION__ + 41
10  com.apple.CoreFoundation      	0x00007fff8b0007a9 __CFRunLoopDoSource1 + 473
11  com.apple.CoreFoundation      	0x00007fff8aff1e1b __CFRunLoopRun + 2171
12  com.apple.CoreFoundation      	0x00007fff8aff1338 CFRunLoopRunSpecific + 296
13  com.apple.HIToolbox           	0x00007fff8902f935 RunCurrentEventLoopInMode + 235
14  com.apple.HIToolbox           	0x00007fff8902f76f ReceiveNextEventCommon + 432
15  com.apple.HIToolbox           	0x00007fff8902f5af _BlockUntilNextEventMatchingListInModeWithFilter + 71
16  com.apple.AppKit              	0x00007fff90bac0ee _DPSNextEvent + 1067
17  com.apple.AppKit              	0x00007fff90f78943 -[NSApplication _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 454
18  com.apple.AppKit              	0x00007fff90ba1fc8 -[NSApplication run] + 682
19  com.google.Chrome.framework   	0x000000010a00eac6 0x109a93000 + 5749446
20  com.google.Chrome.framework   	0x000000010a00e0f4 0x109a93000 + 5746932
...

Similar crash at SequelPro: http://log.sequelpro.com/view/5663

I was using web-browser on Jenkins site, the mouse started spinning and it just crashed. I had plenty of windows and tabs opened, so it was very slow. I had 116 threads during crash, but it could be related to number of tabs opened.
Google Chrome_2016-08-24-015548_Rafals-MacBook-Pro-2.crash
180 KB Download

Sign in to add a comment