New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 620366 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Jun 2016
Cc:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

SIGSEGV on button callbacks that invoke window.prompt()

Reported by mpe...@raineyelectronics.com, Jun 15 2016

Issue description

UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36

Steps to reproduce the problem:
1. Click button that issues a call to prompt() on the callback.

What is the expected behavior?

What went wrong?
This is the stack trace:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fff86ffd700 (LWP 15864)]
0x0000555557fcd124 in blink::ResourceLoader::setDefersLoading(bool) ()
(gdb) bt
#0  0x0000555557fcd124 in blink::ResourceLoader::setDefersLoading(bool) ()
#1  0x0000555557fce2ac in blink::ResourceLoaderSet::setAllDefersLoading(bool) ()
#2  0x00005555580a4466 in blink::FrameLoader::setDefersLoading(bool) ()
#3  0x00005555580cd541 in blink::Page::setDefersLoading(bool) ()
#4  0x00005555580d4d0b in blink::ScopedPageLoadDeferrer::ScopedPageLoadDeferrer(blink::Page*) ()
#5  0x00005555580bf803 in blink::ChromeClient::openJavaScriptPrompt(blink::LocalFrame*, WTF::String const&, WTF::String const&, WTF::String&) ()
#6  0x0000555557ff8620 in blink::LocalDOMWindow::prompt(WTF::String const&, WTF::String const&) ()
#7  0x000055555851773b in blink::DOMWindowV8Internal::promptMethodCallback(v8::FunctionCallbackInfo<v8::Value> const&) ()
#8  0x0000555557598f3d in v8::internal::FunctionCallbackArguments::Call(void (*)(v8::FunctionCallbackInfo<v8::Value> const&)) ()
#9  0x0000555557162baf in v8::internal::MaybeHandle<v8::internal::Object> v8::internal::(anonymous namespace)::HandleApiCallHelper<false>(v8::internal::Isolate*, v8::internal::(anonymous namespace)::BuiltinArguments<(v8::internal::BuiltinExtraArguments)1>) ()
#10 0x000055555716d5b8 in v8::internal::Builtin_HandleApiCall(int, v8::internal::Object**, v8::internal::Isolate*) ()

Crashed report ID: 

How much crashed? Just one tab

Is it a problem with a plugin? No 

Did this work before? Yes A recent, prior version of Chrome, but I do not have the version number.

Chrome version: 51.0.2704.84  Channel: stable
OS Version: 4.5.0
Flash Version: Shockwave Flash 21.0 r0

We are seeing this issue on the latest versions of Chrome and Chromium on both Windows 10 and Debian Jessie Linux.

We are using jQuery, and the page has video files and a websocket active.  I'm going to try and create a stripped down file to better isolate the issue.
 
Cc: brajkumar@chromium.org
Labels: Needs-Feedback
mpekar@ - Any sample test case is there to reproduce this crash? Else it will be better if you could provide the sample crash report ID's for further investigation.

Thanks!
I'm working on trimming down the page to the relevant elements.  For now here is a crash ID:

Crash ID: crash/1530800600000000

Project Member

Comment 3 by sheriffbot@chromium.org, Jun 17 2016

Labels: -Needs-Feedback Needs-Review
Owner: brajkumar@chromium.org
Thank you for providing more feedback. Adding requester "brajkumar@chromium.org" for another review and adding "Needs-Review" label for tracking.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: -Needs-Review Needs-Feedback
Owner: ----
As per provided report ID this crash is last seen on previous stable M51-51.0.2704.103 with 13 instances. No new crash instances seen on latest stable build.

This issue is seen from M51 - 51.0.2704.22, Below link gives in details of the number of instances in which the crash has occurred for associated builds:
https://crash.corp.google.com/browse?q=product.name%3D%27Chrome_Linux%27%20%20AND%20custom_data.ChromeCrashProto.ptype%3D%27renderer%27%20AND%20custom_data.ChromeCrashProto.magic_signature_1.name%3D%27blink%3A%3AResourceLoader%3A%3AsetDefersLoading%27&ignore_case=false&enable_rewrite=true&omit_field_name=&omit_field_value=&omit_field_opt=%3D

mpekar@ - Could you please recheck this issue on latest chrome stable M51- 51.0.2704.106 and let us know if issue still persists or not.

Thanks!
I am having no luck recreating the issue on M51- 51.0.2704.106.  I will close the ticket.  Thanks!
Actually I can't close it, but someone else is free to.
Labels: -Needs-Feedback
Status: WontFix (was: Unconfirmed)
Thanks for the feedback. As per comment #5 closing this issue, Please raise a new issue if you come across the similar one on latest version of chrome.

Thanks!

Sign in to add a comment