Crash when reloading a site using CompositorWorker |
||
Issue descriptionVersion: 55.0.2859.0 (Developer Build) (64-bit) OS: Linux What steps will reproduce the problem? (1) Run chrome with --enable-blink-features=GeometryInterfaces,CompositorWorker (2) Visit http://flackr.github.io/compositor-worker/parallax-static/parallax.html (3) Refresh the page. What is the expected output? Expect it to refresh What do you see instead? It crashes with the following trace: Received signal 11 SEGV_MAPERR 000000000088 #0 0x7f117f6812d7 base::debug::(anonymous namespace)::StackDumpSignalHandler() #1 0x7f117f395330 <unknown> #2 0x7f117a9a9de0 <unknown> #3 0x7f117ae80487 [10455:10455:0912/114529:792687649701:INFO:CONSOLE(44)] "init main", source: http://flackr.github.io/compositor-worker/parallax-static/parallax.js (44) blink::InspectorInstrumentation::NativeBreakpoint::NativeBreakpoint() #4 0x7f117ab5741a blink::FrameRequestCallbackCollection::executeCallbacks() #5 0x7f117a027813 blink::CompositorWorkerGlobalScope::executeAnimationFrameCallbacks() #6 0x7f117bbb90a0 blink::CompositorProxyClientImpl::executeAnimationFrameCallbacks() #7 0x7f117bbb8ea2 blink::CompositorProxyClientImpl::mutate() #8 0x7f117bbb7dd5 blink::CompositorMutatorImpl::mutate() #9 0x7f117c586a03 blink::CompositorMutatorClient::Mutate() #10 0x7f117d52c981 cc::LayerTreeHostImpl::Mutate() #11 0x7f117d52c5b0 cc::LayerTreeHostImpl::AnimateInternal() #12 0x7f117d532681 cc::LayerTreeHostImpl::WillBeginImplFrame() #13 0x7f117d4f7eab cc::Scheduler::BeginImplFrame() #14 0x7f117d4f7977 cc::Scheduler::BeginImplFrameWithDeadline() #15 0x7f117d4f7272 cc::Scheduler::OnBeginFrameDerivedImpl() #16 0x7f117d4efe70 cc::BeginFrameObserverBase::OnBeginFrame() #17 0x7f117d4f14ec cc::ExternalBeginFrameSource::OnBeginFrame() #18 0x7f117eb9e32b _ZN3IPC8MessageTI23ViewMsg_BeginFrame_MetaSt5tupleIJN2cc14BeginFrameArgsEEEvE8DispatchIN7content34CompositorExternalBeginFrameSourceES9_vMS9_FvRKS4_EEEbPKNS_7MessageEPT_PT0_PT1_T2_ #19 0x7f117eb9e102 content::CompositorExternalBeginFrameSource::OnMessageReceived() #20 0x7f117eb9e959 content::CompositorForwardingMessageFilter::ProcessMessageOnCompositorThread() #21 0x7f117f682281 base::debug::TaskAnnotator::RunTask() #22 0x7f117f6a2705 base::MessageLoop::RunTask() #23 0x7f117f6a2ab8 base::MessageLoop::DeferOrRunPendingTask() #24 0x7f117f6a2edb base::MessageLoop::DoWork() #25 0x7f117f6a40ba base::MessagePumpDefault::Run() #26 0x7f117f6c5c3e base::RunLoop::Run() #27 0x7f117f6f2f1d base::Thread::ThreadMain() #28 0x7f117f6ee0d3 base::(anonymous namespace)::ThreadFunc() #29 0x7f117f38d184 start_thread #30 0x7f117782537d clone Please use labels and text to provide additional information.
,
Sep 12 2016
,
Sep 13 2016
keishi fixed this before I could land my fix with an explicit dispose call added in https://codereview.chromium.org/2204183002. |
||
►
Sign in to add a comment |
||
Comment 1 by flackr@chromium.org
, Sep 12 2016Owner: flackr@chromium.org
Status: Started (was: Untriaged)