New issue
Advanced search Search tips

Issue 614584 link

Starred by 2 users

Issue metadata

Status: Duplicate
Owner: ----
Closed: Jun 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 2
Type: Bug



Sign in to add a comment

Webview loading crash on Marshmallow \

Reported by hyunchu...@gmail.com, May 25 2016

Issue description

Steps to reproduce the problem:
1. Using HybridApp 
2. Load WebView contents 
3. Crash

What is the expected behavior?

What went wrong?
Load Webview sometimes crashes

Crashed report ID: 

How much crashed? Just one tab

Is it a problem with a plugin? N/A 

Did this work before? N/A 

Chrome version: 50.0.2661.102  Channel: stable
OS Version: 6.0.1
Flash Version: Shockwave Flash 21.0 r0
 
dumpState_G920SKSU3DPD3_201605232315.zip
4.3 MB Download
Components: Mobile>WebView
hread 0 (crashed)
 0  0xcd4b8fd4
     r0 = 0x00000001    r1 = 0xce09b861    r2 = 0x00000001    r3 = 0x5e1080c9
     r4 = 0xcd859079    r5 = 0xce09b861    r6 = 0xd3453ce9    r7 = 0xcd859079
     r8 = 0x000050c2    r9 = 0x00001572   r10 = 0xd75b5024   r12 = 0xd071e3c0
     fp = 0xd15c9da0    sp = 0xd15c9d78    lr = 0xcd46572c    pc = 0xcd4b8fd4
    Found by: given as instruction pointer in context
 1  libwebviewchromium.so!v8::internal::::Invoke [execution.cc : 98 + 0xd]
     sp = 0xd15c9f60    pc = 0xe37fb823
    Found by: stack scanning
 2  libwebviewchromium.so!v8::internal::Execution::Call [execution.cc : 164 + 0x15]
     r4 = 0xd759f00c    r5 = 0xd75b5000    r6 = 0xd759f004    r7 = 0xd15ca028
     r8 = 0xd759f00c    r9 = 0xd759f004   r10 = 0x00000000    fp = 0xe4d1bfc7
     sp = 0xd15c9fb0    pc = 0xe37fb9db
    Found by: call frame info
 3  libwebviewchromium.so!v8::Function::Call [api.cc : 4391 + 0x13]
     r4 = 0xd75b5000    r5 = 0xd759f014    r6 = 0xd15ca024    r7 = 0xd15ca038
     r8 = 0xd759f00c    r9 = 0xd759f004   r10 = 0x00000000    fp = 0xe4d1bfc7
     sp = 0xd15c9ff0    pc = 0xe36b4aa7
    Found by: call frame info
 4  libwebviewchromium.so!blink::V8ScriptRunner::callFunction [V8ScriptRunner.cpp : 465 + 0xb]
     r4 = 0x00000000    r5 = 0xd75b5000    r6 = 0xd15ca0d8    r7 = 0xd759f004
     r8 = 0xc1d10b88    r9 = 0x00000000   r10 = 0xd759f00c    fp = 0xe4d12be0
     sp = 0xd15ca088    pc = 0xe3a3791f
    Found by: call frame info
 5  libwebviewchromium.so!blink::ScriptController::callFunction [ScriptController.cpp : 160 + 0xf]
     r4 = 0xc1d10b88    r5 = 0x00000000    r6 = 0xd759f00c    r7 = 0xd759f004
     r8 = 0xe4d12ab4    r9 = 0xe4d1bfc7   r10 = 0x541d3cb0    fp = 0x00000000
     sp = 0xd15ca128    pc = 0xe3a22109
    Found by: call frame info
 6  libwebviewchromium.so!blink::ScriptController::callFunction [ScriptController.cpp : 155 + 0x13]
     r4 = 0xc5824348    r5 = 0x00000000    r6 = 0xd759f00c    r7 = 0xd759f004
     r8 = 0xe4d12ab4    r9 = 0xe4d1bfc7   r10 = 0x541d3cb0    fp = 0x00000000
     sp = 0xd15ca138    pc = 0xe3a22137
    Found by: call frame info
 7  libwebviewchromium.so!blink::ScheduledAction::execute [ScheduledAction.cpp : 119 + 0xb]
     r4 = 0x541d3cb0    r5 = 0xd759f004    r6 = 0xd15ca188    r7 = 0xc5824348
     r8 = 0xe4d12ab4    r9 = 0xe4d1bfc7   r10 = 0x541d3cb0    fp = 0x00000000
     sp = 0xd15ca158    pc = 0xe3a21ba9
    Found by: call frame info
 8  libwebviewchromium.so!blink::DOMTimer::fired [DOMTimer.cpp : 134 + 0x7]
     r4 = 0xcef2a068    r5 = 0xc1d10b88    r6 = 0xe4d15eb0    r7 = 0xd15ca240
     r8 = 0xd15ca248    r9 = 0xd15ca250   r10 = 0x541d3cb0    fp = 0x00000000
     sp = 0xd15ca238    pc = 0xe3d0e94d
    Found by: call frame info
 9  libwebviewchromium.so!blink::TimerBase::runInternal [Timer.cpp : 134 + 0x7]
     r4 = 0xcef2a068    r5 = 0xe4c7a298    r6 = 0xd15ca430    r7 = 0xe4d0b788
     r8 = 0xe4d1bfa6    r9 = 0x00000000   r10 = 0x00000000    fp = 0xe4831c1a
     sp = 0xd15ca298    pc = 0xe3589889
    Found by: call frame info
10  libwebviewchromium.so!blink::TimerBase::CancellableTimerTask::run [Timer.h : 113 + 0x5]
     r4 = 0xce165210    r5 = 0x00000000    r6 = 0xd15ca430    r7 = 0xe4d1bf8a
     r8 = 0xecc17c40    r9 = 0x00000000   r10 = 0x00000000    fp = 0xe4831c1a
     sp = 0xd15ca300    pc = 0xe35898eb
    Found by: call frame info
11  libwebviewchromium.so!base::internal::Invoker<base::IndexSequence<0u>, base::internal::BindState<base::internal::RunnableAdapter<void (*)(scoped_ptr<blink::WebTaskRunner::Task, std::__1::default_delete<blink::WebTaskRunner::Task> >)>, void(scoped_ptr<blink::WebTaskRunner::Task, std::__1::default_delete<blink::WebTaskRunner::Task> >), base::internal::PassedWrapper<scoped_ptr<blink::WebTaskRunner::Task, std::__1::default_delete<blink::WebTaskRunner::Task> > > >, base::internal::InvokeHelper<false, void, base::internal::RunnableAdapter<void (*)(scoped_ptr<blink::WebTaskRunner::Task, std::__1::default_delete<blink::WebTaskRunner::Task> >)> >, void()>::Run [bind_internal.h : 159 + 0x3]
     r3 = 0xe35898d9    r4 = 0xd15ca318    r5 = 0xf70ddec0    r6 = 0xd15ca430
     r7 = 0xe4d1bf8a    r8 = 0xecc17c40    r9 = 0x00000000   r10 = 0x00000000
     fp = 0xe4831c1a    sp = 0xd15ca310    pc = 0xe4438c93
    Found by: call frame info
12  libwebviewchromium.so!base::debug::TaskAnnotator::RunTask [callback.h : 394 + 0x5]
     r4 = 0xd15ca520    r5 = 0xd15ca438    r6 = 0xd15ca430    r7 = 0xe4d1bf8a
     r8 = 0xecc17c40    r9 = 0x00000000   r10 = 0x00000000    fp = 0xe4831c1a
     sp = 0xd15ca3c8    pc = 0xe44b7667
    Found by: call frame info
13  libwebviewchromium.so!scheduler::TaskQueueManager::ProcessTaskFromWorkQueue [task_queue_manager.cc : 288 + 0x7]
     r4 = 0xecc17c00    r5 = 0xd15ca520    r6 = 0xd15ca600    r7 = 0xee9a9f80
     r8 = 0x00000000    r9 = 0xe4d1a5b0   r10 = 0x00000000    fp = 0xe48f49ac
     sp = 0xd15ca488    pc = 0xe4435795
    Found by: call frame info
14  libwebviewchromium.so!scheduler::TaskQueueManager::DoWork [task_queue_manager.cc : 200 + 0x3]
     r4 = 0xecc17c00    r5 = 0xd15ca600    r6 = 0x00000001    r7 = 0xd15ca5d8
     r8 = 0x00000000    r9 = 0x00000000   r10 = 0xdededefe    fp = 0xe48f49ac
     sp = 0xd15ca580    pc = 0xe44359b1
    Found by: call frame info
15  libwebviewchromium.so!base::internal::Invoker<base::IndexSequence<0u, 1u, 2u>, base::internal::BindState<base::internal::RunnableAdapter<void (media::MediaPlayerAndroid::*)(base::TimeDelta, bool)>, void(media::MediaPlayerAndroid*, base::TimeDelta, bool), base::WeakPtr<media::MediaPlayerAndroid>, base::TimeDelta&, bool>, base::internal::InvokeHelper<true, void, base::internal::RunnableAdapter<void (media::MediaPlayerAndroid::*)(base::TimeDelta, bool)> >, void()>::Run [bind_internal.h : 181 + 0x7]
     r4 = 0xee6e6d40    r5 = 0xd15ca668    r6 = 0xd15ca6f0    r7 = 0xe4d1bf8a
     r8 = 0xdcb8bba8    r9 = 0x00000000   r10 = 0xdededefe    fp = 0xe48f49ac
     sp = 0xd15ca660    pc = 0xe343842b
    Found by: call frame info
16  libwebviewchromium.so!base::debug::TaskAnnotator::RunTask [callback.h : 394 + 0x5]
     r4 = 0xd15ca810    r5 = 0xd15ca6f8    r6 = 0xd15ca6f0    r7 = 0xe4d1bf8a
     r8 = 0xdcb8bba8    r9 = 0x00000000   r10 = 0xdededefe    fp = 0xe48f49ac
     sp = 0xd15ca688    pc = 0xe44b7667
    Found by: call frame info
17  libwebviewchromium.so!base::MessageLoop::RunTask [message_loop.cc : 476 + 0xd]
     r4 = 0xdcb8bb00    r5 = 0xe4d1bf80    r6 = 0xd15ca810    r7 = 0x00000000
     r8 = 0x00000000    r9 = 0xd15ca818   r10 = 0xdededefe    fp = 0x0000005e
     sp = 0xd15ca748    pc = 0xe44c435b
    Found by: call frame info
18  libwebviewchromium.so!base::MessageLoop::DeferOrRunPendingTask [message_loop.cc : 485 + 0x7]
     r4 = 0xdcb8bb00    r5 = 0x00000001    r6 = 0xd15ca810    r7 = 0xdcb8bb0c
     r8 = 0xd15ca820    r9 = 0xd15ca818   r10 = 0xdededefe    fp = 0x0000005e
     sp = 0xd15ca7f0    pc = 0xe44c47b7
    Found by: call frame info
19  libwebviewchromium.so!base::MessageLoop::DoWork [message_loop.cc : 597 + 0x3]
     r3 = 0x00000000    r4 = 0xdcb8bb00    r5 = 0xd15ca810    r6 = 0xc0c0c0c1
     r7 = 0xdcb8bb0c    r8 = 0xd15ca820    r9 = 0xd15ca818   r10 = 0xdededefe
     fp = 0x0000005e    sp = 0xd15ca810    pc = 0xe44c4a49
    Found by: call frame info
20  libwebviewchromium.so!base::MessagePumpDefault::Run [message_pump_default.cc : 33 + 0x7]
     r4 = 0x00000001    r5 = 0xdcb8bb00    r6 = 0x4075180b    r7 = 0x0000006b
     r8 = 0xd67120f8    r9 = 0xd6712108   r10 = 0xd14cc000    fp = 0xe44deef5
     sp = 0xd15ca868    pc = 0xe44c57c3
    Found by: call frame info
21  libwebviewchromium.so!base::RunLoop::Run [run_loop.cc : 35 + 0x5]
     r4 = 0xd15ca8c0    r5 = 0xd15ca89c    r6 = 0xdd3983a8    r7 = 0xdcb8bb00
     r8 = 0xf7346b9c    r9 = 0xff7f0d04   r10 = 0xd14cc000    fp = 0xe44deef5
     sp = 0xd15ca898    pc = 0xe44d0025
    Found by: call frame info
22  libwebviewchromium.so!base::MessageLoop::Run [message_loop.cc : 293 + 0x5]
     r4 = 0xdd3983a0    r5 = 0xf70ddec0    r6 = 0xdd3983a8    r7 = 0xdcb8bb00
     r8 = 0xf7346b9c    r9 = 0xff7f0d04   r10 = 0xd14cc000    fp = 0xe44deef5
     sp = 0xd15ca8c0    pc = 0xe44c3d09
    Found by: call frame info
23  libwebviewchromium.so!base::Thread::ThreadMain [thread.cc : 202 + 0x3]
     r4 = 0xdd3983a0    r5 = 0xf70ddec0    r6 = 0xdd3983a8    r7 = 0xdcb8bb00
     r8 = 0xf7346b9c    r9 = 0xff7f0d04   r10 = 0xd14cc000    fp = 0xe44deef5
     sp = 0xd15ca8e0    pc = 0xe44e1761
    Found by: call frame info
24  libwebviewchromium.so!base::::ThreadFunc [platform_thread_posix.cc : 68 + 0x7]
     r4 = 0xd15ca930    r5 = 0xdd3983a0    r6 = 0xdd214260    r7 = 0x00000078
     r8 = 0xf7346b9c    r9 = 0xff7f0d04   r10 = 0xd14cc000    fp = 0xe44deef5
     sp = 0xd15ca908    pc = 0xe44def29
    Found by: call frame info
25  libc.so + 0x3fca3
     r4 = 0xd15ca930    r5 = 0xd15ca970    r6 = 0xd15ca930    r7 = 0x00000078
     r8 = 0xf7346b9c    r9 = 0xff7f0d04   r10 = 0xd14cc000    fp = 0xe44deef5
     sp = 0xd15ca918    pc = 0xf70a2ca5
    Found by: call frame info
26  libc.so + 0x3fc83
     sp = 0xd15ca91c    pc = 0xf70a2c85
    Found by: stack scanning
27  libc.so + 0x3fc83
     sp = 0xd15ca924    pc = 0xf70a2c85
    Found by: stack scanning
28  libc.so + 0x1a39b
     sp = 0xd15ca928    pc = 0xf707d39d
    Found by: stack scanning
29  libwebviewchromium.so + 0x18a0ef3
     sp = 0xd15ca964    pc = 0xe44deef5
    Found by: stack scanning

Comment 3 by torne@chromium.org, Jun 8 2016

Mergedinto: 524337
Status: Duplicate (was: Unconfirmed)
This is almost certainly issue 524337, which is fixed in M51 (currently being incrementally rolled out to stable, so devices will have it within the next ~week or so).

Comment 4 by torne@chromium.org, Jun 8 2016

Mergedinto: -524337 569822
Apologies, I mixed up two different issues.

This is issue 569822, which we can't find any explanation for other than a hardware issue :(

Sign in to add a comment