New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 623275 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner:
Last visit > 30 days ago
Closed: Sep 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Bug-Regression

Blocked on:
issue 601854
issue 610902
issue 628040



Sign in to add a comment

GMail renderer crashes when I click on a Google Form link in an email

Project Member Reported by w...@chromium.org, Jun 25 2016

Issue description

Version: 53.0.2773.0
OS: ChromeOS

What steps will reproduce the problem?
(1) Get someone to send you an email with a link to a Google Form.
(2) Click on the link.

What is the expected output?

Expect that the form loads.

What do you see instead?

Instead the GMail tab crashes.

Crash Ids ef4e9a2600000000 and ef8c421600000000 correspond to this (though note that neither dump seems to be symbolized).
 

Comment 1 by w...@chromium.org, Jun 29 2016

Components: UI>Browser>Navigation
Labels: ReleaseBlock-Beta
Adding UI>Browser>Navigation component, since this is navigation-related, ish.

Comment 2 by creis@chromium.org, Jun 29 2016

I'm not able to repro on Linux 53.0.2774.3.  Can you repro on other platforms?  Without symbols in the crash dump, there's not much we can do here.

Comment 3 by w...@chromium.org, Jun 30 2016

Labels: -ReleaseBlock-Beta ReleaseBlock-Dev

Comment 4 by w...@chromium.org, Jun 30 2016

Re #2: I'm able to repro on both my Chromebox and another ChromeOS device.

I found that my personal account, in a different profile on the same device, does not have the problem, so I suspect it's tickled by some extension or other.

Comment 5 by w...@chromium.org, Jun 30 2016

Status: WontFix (was: Untriaged)
Does not repro on 53.0.2773.3, nor 2782.6 for me, only on 2773.0.  

Comment 6 by w...@chromium.org, Jul 7 2016

Owner: creis@chromium.org
Status: Assigned (was: WontFix)
This issue has started reproing again; seems it may be related to up-time or installed extensions injecting stuff into pages, perhaps, hence only repros after a while?

See report Ids 7e53a23600000000, 35b2623600000000, 3d7a623600000000 and 7b4327f100000000.

Comment 7 by w...@chromium.org, Jul 7 2016

FYI,  issue 610902  is tracking the symbolization problem.

Comment 8 by creis@chromium.org, Jul 7 2016

Cc: creis@chromium.org
Owner: ----
Status: Available (was: Assigned)
Sorry, I'm not able to help here.  I don't have a ChromeOS debugging setup, and there's no indication of what code this is happening in.  Since it doesn't repro on other platforms, it's unlikely to be navigation code.  I'd suggest pinging someone on ChromeOS?
Have we checked what extensions were installed at the time? Is this reproing on the build under test today? 8530.6.0 and 53.0.2785.4.
dchan@ can you please confirm on comment #9 above?
Labels: -ReleaseBlock-Dev ReleaseBlock-Beta
Making this a RBB instead since we don't yet have confirmation on whether this exists on today's build.

Comment 12 by w...@chromium.org, Jul 11 2016

Blockedon: 610902
Owner: warx@chromium.org
Status: Assigned (was: Available)

Comment 14 by w...@chromium.org, Jul 12 2016

Cc: mmand...@chromium.org dgarr...@chromium.org
Labels: Stability-Crash
Adding dgarrett@ and mmandlis@ because of the symbolization issue w/ the crash reports.
The symbols that were missing when these reports were processed, were uploaded since.
Let me try to resubmit these reports, and see if the stacktraces look better in the new version. I'll update the bug with new report IDs shortly.

Comment 16 by w...@chromium.org, Jul 12 2016

Looking at the first report I uploaded, I see two chrome modules listed as
missing symbols, one with a null identifier, so I'd guess we're hitting the
issue w/ multiple executable segments in the binary?
I resubmitted and resulting report IDs are: f88cddb600000000, ac21850900000000
Unfortunately, this hasn't helped much, because the processor is still trying to use the invalid debug ID 000000000000000000000000000000000.
I'll check if there is anything else that I could do.

Comment 18 by warx@chromium.org, Jul 13 2016

cannot reproduce on veyron_speedy 54.0.2794.0, is this M53 only? Btw, I am also interested in comment 9, any updates?

Since there is a symbolization issue with this crash report, I really want a repro.

Comment 19 by w...@chromium.org, Jul 13 2016

Blockedon: 601854

Comment 20 by w...@chromium.org, Jul 13 2016

Unfortunately I don't have a repro; it just happened (reliably) when I filed the report, and then after a reboot (not sure if there was an update or not) it no longer happened.  I then observed it once again and re-opened the bug. Right now it isn't repro'ing.

However, I did also file  issue 627137  (browser crashes if you click Details for any Extension under chrome://extension), which still reliably repros, though I'm not sure it's the same issue.

Comment 21 by w...@chromium.org, Jul 14 2016

Blockedon: 628040

Comment 22 by warx@chromium.org, Jul 18 2016

Are they (this bug and 627137) happened on the same DUT, same profile? Then it might be related. But from the comments in 627137, I cannot see a relation with this. I tried several times today and was not able to repro. Any luck on your side? wez@

Comment 23 by w...@chromium.org, Jul 18 2016

Re #22: No, I have not repro'd this issue recently. I did just file  issue 629247 , another browser crasher, but I suspect that's another case of  issue 627137 .

All I can suggest is to grab one of the minidumps I uploaded, hack the modules-stream to fix the memory maps to show the chrome binary correctly (see issue 628040) and then use dump_syms to get correctly symbolized stacks. :P
Since we don't have a reliable repro currently wez@ can we make this non-RBB? 

Comment 25 by w...@chromium.org, Jul 21 2016

Since it doesn't seem to be reproing on the current dev, that seems reasonable, yes
Labels: -ReleaseBlock-Beta
Marking this as non-RBB.

Comment 27 by warx@chromium.org, Jul 21 2016

Status: Started (was: Assigned)
Project Member

Comment 28 by sheriffbot@chromium.org, Jul 22 2016

Labels: -M-53 M-54 MovedFrom-53
Moving this nonessential bug to the next milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 29 by warx@chromium.org, Sep 1 2016

Status: WontFix (was: Started)
mark as wontfix, please reopen it when this becomes an issue again.

Sign in to add a comment