Webview loading crash on Marshmallow \
Reported by
hyunchu...@gmail.com,
May 25 2016
|
||
Issue descriptionSteps to reproduce the problem: 1. Using HybridApp 2. Load WebView contents 3. Crash What is the expected behavior? What went wrong? Load Webview sometimes crashes Crashed report ID: How much crashed? Just one tab Is it a problem with a plugin? N/A Did this work before? N/A Chrome version: 50.0.2661.102 Channel: stable OS Version: 6.0.1 Flash Version: Shockwave Flash 21.0 r0
,
Jun 8 2016
hread 0 (crashed)
0 0xcd4b8fd4
r0 = 0x00000001 r1 = 0xce09b861 r2 = 0x00000001 r3 = 0x5e1080c9
r4 = 0xcd859079 r5 = 0xce09b861 r6 = 0xd3453ce9 r7 = 0xcd859079
r8 = 0x000050c2 r9 = 0x00001572 r10 = 0xd75b5024 r12 = 0xd071e3c0
fp = 0xd15c9da0 sp = 0xd15c9d78 lr = 0xcd46572c pc = 0xcd4b8fd4
Found by: given as instruction pointer in context
1 libwebviewchromium.so!v8::internal::::Invoke [execution.cc : 98 + 0xd]
sp = 0xd15c9f60 pc = 0xe37fb823
Found by: stack scanning
2 libwebviewchromium.so!v8::internal::Execution::Call [execution.cc : 164 + 0x15]
r4 = 0xd759f00c r5 = 0xd75b5000 r6 = 0xd759f004 r7 = 0xd15ca028
r8 = 0xd759f00c r9 = 0xd759f004 r10 = 0x00000000 fp = 0xe4d1bfc7
sp = 0xd15c9fb0 pc = 0xe37fb9db
Found by: call frame info
3 libwebviewchromium.so!v8::Function::Call [api.cc : 4391 + 0x13]
r4 = 0xd75b5000 r5 = 0xd759f014 r6 = 0xd15ca024 r7 = 0xd15ca038
r8 = 0xd759f00c r9 = 0xd759f004 r10 = 0x00000000 fp = 0xe4d1bfc7
sp = 0xd15c9ff0 pc = 0xe36b4aa7
Found by: call frame info
4 libwebviewchromium.so!blink::V8ScriptRunner::callFunction [V8ScriptRunner.cpp : 465 + 0xb]
r4 = 0x00000000 r5 = 0xd75b5000 r6 = 0xd15ca0d8 r7 = 0xd759f004
r8 = 0xc1d10b88 r9 = 0x00000000 r10 = 0xd759f00c fp = 0xe4d12be0
sp = 0xd15ca088 pc = 0xe3a3791f
Found by: call frame info
5 libwebviewchromium.so!blink::ScriptController::callFunction [ScriptController.cpp : 160 + 0xf]
r4 = 0xc1d10b88 r5 = 0x00000000 r6 = 0xd759f00c r7 = 0xd759f004
r8 = 0xe4d12ab4 r9 = 0xe4d1bfc7 r10 = 0x541d3cb0 fp = 0x00000000
sp = 0xd15ca128 pc = 0xe3a22109
Found by: call frame info
6 libwebviewchromium.so!blink::ScriptController::callFunction [ScriptController.cpp : 155 + 0x13]
r4 = 0xc5824348 r5 = 0x00000000 r6 = 0xd759f00c r7 = 0xd759f004
r8 = 0xe4d12ab4 r9 = 0xe4d1bfc7 r10 = 0x541d3cb0 fp = 0x00000000
sp = 0xd15ca138 pc = 0xe3a22137
Found by: call frame info
7 libwebviewchromium.so!blink::ScheduledAction::execute [ScheduledAction.cpp : 119 + 0xb]
r4 = 0x541d3cb0 r5 = 0xd759f004 r6 = 0xd15ca188 r7 = 0xc5824348
r8 = 0xe4d12ab4 r9 = 0xe4d1bfc7 r10 = 0x541d3cb0 fp = 0x00000000
sp = 0xd15ca158 pc = 0xe3a21ba9
Found by: call frame info
8 libwebviewchromium.so!blink::DOMTimer::fired [DOMTimer.cpp : 134 + 0x7]
r4 = 0xcef2a068 r5 = 0xc1d10b88 r6 = 0xe4d15eb0 r7 = 0xd15ca240
r8 = 0xd15ca248 r9 = 0xd15ca250 r10 = 0x541d3cb0 fp = 0x00000000
sp = 0xd15ca238 pc = 0xe3d0e94d
Found by: call frame info
9 libwebviewchromium.so!blink::TimerBase::runInternal [Timer.cpp : 134 + 0x7]
r4 = 0xcef2a068 r5 = 0xe4c7a298 r6 = 0xd15ca430 r7 = 0xe4d0b788
r8 = 0xe4d1bfa6 r9 = 0x00000000 r10 = 0x00000000 fp = 0xe4831c1a
sp = 0xd15ca298 pc = 0xe3589889
Found by: call frame info
10 libwebviewchromium.so!blink::TimerBase::CancellableTimerTask::run [Timer.h : 113 + 0x5]
r4 = 0xce165210 r5 = 0x00000000 r6 = 0xd15ca430 r7 = 0xe4d1bf8a
r8 = 0xecc17c40 r9 = 0x00000000 r10 = 0x00000000 fp = 0xe4831c1a
sp = 0xd15ca300 pc = 0xe35898eb
Found by: call frame info
11 libwebviewchromium.so!base::internal::Invoker<base::IndexSequence<0u>, base::internal::BindState<base::internal::RunnableAdapter<void (*)(scoped_ptr<blink::WebTaskRunner::Task, std::__1::default_delete<blink::WebTaskRunner::Task> >)>, void(scoped_ptr<blink::WebTaskRunner::Task, std::__1::default_delete<blink::WebTaskRunner::Task> >), base::internal::PassedWrapper<scoped_ptr<blink::WebTaskRunner::Task, std::__1::default_delete<blink::WebTaskRunner::Task> > > >, base::internal::InvokeHelper<false, void, base::internal::RunnableAdapter<void (*)(scoped_ptr<blink::WebTaskRunner::Task, std::__1::default_delete<blink::WebTaskRunner::Task> >)> >, void()>::Run [bind_internal.h : 159 + 0x3]
r3 = 0xe35898d9 r4 = 0xd15ca318 r5 = 0xf70ddec0 r6 = 0xd15ca430
r7 = 0xe4d1bf8a r8 = 0xecc17c40 r9 = 0x00000000 r10 = 0x00000000
fp = 0xe4831c1a sp = 0xd15ca310 pc = 0xe4438c93
Found by: call frame info
12 libwebviewchromium.so!base::debug::TaskAnnotator::RunTask [callback.h : 394 + 0x5]
r4 = 0xd15ca520 r5 = 0xd15ca438 r6 = 0xd15ca430 r7 = 0xe4d1bf8a
r8 = 0xecc17c40 r9 = 0x00000000 r10 = 0x00000000 fp = 0xe4831c1a
sp = 0xd15ca3c8 pc = 0xe44b7667
Found by: call frame info
13 libwebviewchromium.so!scheduler::TaskQueueManager::ProcessTaskFromWorkQueue [task_queue_manager.cc : 288 + 0x7]
r4 = 0xecc17c00 r5 = 0xd15ca520 r6 = 0xd15ca600 r7 = 0xee9a9f80
r8 = 0x00000000 r9 = 0xe4d1a5b0 r10 = 0x00000000 fp = 0xe48f49ac
sp = 0xd15ca488 pc = 0xe4435795
Found by: call frame info
14 libwebviewchromium.so!scheduler::TaskQueueManager::DoWork [task_queue_manager.cc : 200 + 0x3]
r4 = 0xecc17c00 r5 = 0xd15ca600 r6 = 0x00000001 r7 = 0xd15ca5d8
r8 = 0x00000000 r9 = 0x00000000 r10 = 0xdededefe fp = 0xe48f49ac
sp = 0xd15ca580 pc = 0xe44359b1
Found by: call frame info
15 libwebviewchromium.so!base::internal::Invoker<base::IndexSequence<0u, 1u, 2u>, base::internal::BindState<base::internal::RunnableAdapter<void (media::MediaPlayerAndroid::*)(base::TimeDelta, bool)>, void(media::MediaPlayerAndroid*, base::TimeDelta, bool), base::WeakPtr<media::MediaPlayerAndroid>, base::TimeDelta&, bool>, base::internal::InvokeHelper<true, void, base::internal::RunnableAdapter<void (media::MediaPlayerAndroid::*)(base::TimeDelta, bool)> >, void()>::Run [bind_internal.h : 181 + 0x7]
r4 = 0xee6e6d40 r5 = 0xd15ca668 r6 = 0xd15ca6f0 r7 = 0xe4d1bf8a
r8 = 0xdcb8bba8 r9 = 0x00000000 r10 = 0xdededefe fp = 0xe48f49ac
sp = 0xd15ca660 pc = 0xe343842b
Found by: call frame info
16 libwebviewchromium.so!base::debug::TaskAnnotator::RunTask [callback.h : 394 + 0x5]
r4 = 0xd15ca810 r5 = 0xd15ca6f8 r6 = 0xd15ca6f0 r7 = 0xe4d1bf8a
r8 = 0xdcb8bba8 r9 = 0x00000000 r10 = 0xdededefe fp = 0xe48f49ac
sp = 0xd15ca688 pc = 0xe44b7667
Found by: call frame info
17 libwebviewchromium.so!base::MessageLoop::RunTask [message_loop.cc : 476 + 0xd]
r4 = 0xdcb8bb00 r5 = 0xe4d1bf80 r6 = 0xd15ca810 r7 = 0x00000000
r8 = 0x00000000 r9 = 0xd15ca818 r10 = 0xdededefe fp = 0x0000005e
sp = 0xd15ca748 pc = 0xe44c435b
Found by: call frame info
18 libwebviewchromium.so!base::MessageLoop::DeferOrRunPendingTask [message_loop.cc : 485 + 0x7]
r4 = 0xdcb8bb00 r5 = 0x00000001 r6 = 0xd15ca810 r7 = 0xdcb8bb0c
r8 = 0xd15ca820 r9 = 0xd15ca818 r10 = 0xdededefe fp = 0x0000005e
sp = 0xd15ca7f0 pc = 0xe44c47b7
Found by: call frame info
19 libwebviewchromium.so!base::MessageLoop::DoWork [message_loop.cc : 597 + 0x3]
r3 = 0x00000000 r4 = 0xdcb8bb00 r5 = 0xd15ca810 r6 = 0xc0c0c0c1
r7 = 0xdcb8bb0c r8 = 0xd15ca820 r9 = 0xd15ca818 r10 = 0xdededefe
fp = 0x0000005e sp = 0xd15ca810 pc = 0xe44c4a49
Found by: call frame info
20 libwebviewchromium.so!base::MessagePumpDefault::Run [message_pump_default.cc : 33 + 0x7]
r4 = 0x00000001 r5 = 0xdcb8bb00 r6 = 0x4075180b r7 = 0x0000006b
r8 = 0xd67120f8 r9 = 0xd6712108 r10 = 0xd14cc000 fp = 0xe44deef5
sp = 0xd15ca868 pc = 0xe44c57c3
Found by: call frame info
21 libwebviewchromium.so!base::RunLoop::Run [run_loop.cc : 35 + 0x5]
r4 = 0xd15ca8c0 r5 = 0xd15ca89c r6 = 0xdd3983a8 r7 = 0xdcb8bb00
r8 = 0xf7346b9c r9 = 0xff7f0d04 r10 = 0xd14cc000 fp = 0xe44deef5
sp = 0xd15ca898 pc = 0xe44d0025
Found by: call frame info
22 libwebviewchromium.so!base::MessageLoop::Run [message_loop.cc : 293 + 0x5]
r4 = 0xdd3983a0 r5 = 0xf70ddec0 r6 = 0xdd3983a8 r7 = 0xdcb8bb00
r8 = 0xf7346b9c r9 = 0xff7f0d04 r10 = 0xd14cc000 fp = 0xe44deef5
sp = 0xd15ca8c0 pc = 0xe44c3d09
Found by: call frame info
23 libwebviewchromium.so!base::Thread::ThreadMain [thread.cc : 202 + 0x3]
r4 = 0xdd3983a0 r5 = 0xf70ddec0 r6 = 0xdd3983a8 r7 = 0xdcb8bb00
r8 = 0xf7346b9c r9 = 0xff7f0d04 r10 = 0xd14cc000 fp = 0xe44deef5
sp = 0xd15ca8e0 pc = 0xe44e1761
Found by: call frame info
24 libwebviewchromium.so!base::::ThreadFunc [platform_thread_posix.cc : 68 + 0x7]
r4 = 0xd15ca930 r5 = 0xdd3983a0 r6 = 0xdd214260 r7 = 0x00000078
r8 = 0xf7346b9c r9 = 0xff7f0d04 r10 = 0xd14cc000 fp = 0xe44deef5
sp = 0xd15ca908 pc = 0xe44def29
Found by: call frame info
25 libc.so + 0x3fca3
r4 = 0xd15ca930 r5 = 0xd15ca970 r6 = 0xd15ca930 r7 = 0x00000078
r8 = 0xf7346b9c r9 = 0xff7f0d04 r10 = 0xd14cc000 fp = 0xe44deef5
sp = 0xd15ca918 pc = 0xf70a2ca5
Found by: call frame info
26 libc.so + 0x3fc83
sp = 0xd15ca91c pc = 0xf70a2c85
Found by: stack scanning
27 libc.so + 0x3fc83
sp = 0xd15ca924 pc = 0xf70a2c85
Found by: stack scanning
28 libc.so + 0x1a39b
sp = 0xd15ca928 pc = 0xf707d39d
Found by: stack scanning
29 libwebviewchromium.so + 0x18a0ef3
sp = 0xd15ca964 pc = 0xe44deef5
Found by: stack scanning
,
Jun 8 2016
This is almost certainly issue 524337, which is fixed in M51 (currently being incrementally rolled out to stable, so devices will have it within the next ~week or so). |
||
►
Sign in to add a comment |
||
Comment 1 by rsgav...@chromium.org
, Jun 7 2016