New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 645991 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Closed: Sep 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 3
Type: Bug



Sign in to add a comment

Crash when reloading a site using CompositorWorker

Project Member Reported by flackr@chromium.org, Sep 12 2016

Issue description

Version: 55.0.2859.0 (Developer Build) (64-bit)
OS: Linux

What steps will reproduce the problem?
(1) Run chrome with --enable-blink-features=GeometryInterfaces,CompositorWorker
(2) Visit http://flackr.github.io/compositor-worker/parallax-static/parallax.html
(3) Refresh the page.

What is the expected output?
Expect it to refresh

What do you see instead?
It crashes with the following trace:
Received signal 11 SEGV_MAPERR 000000000088
#0 0x7f117f6812d7 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#1 0x7f117f395330 <unknown>
#2 0x7f117a9a9de0 <unknown>
#3 0x7f117ae80487 [10455:10455:0912/114529:792687649701:INFO:CONSOLE(44)] "init main", source: http://flackr.github.io/compositor-worker/parallax-static/parallax.js (44)
blink::InspectorInstrumentation::NativeBreakpoint::NativeBreakpoint()
#4 0x7f117ab5741a blink::FrameRequestCallbackCollection::executeCallbacks()
#5 0x7f117a027813 blink::CompositorWorkerGlobalScope::executeAnimationFrameCallbacks()
#6 0x7f117bbb90a0 blink::CompositorProxyClientImpl::executeAnimationFrameCallbacks()
#7 0x7f117bbb8ea2 blink::CompositorProxyClientImpl::mutate()
#8 0x7f117bbb7dd5 blink::CompositorMutatorImpl::mutate()
#9 0x7f117c586a03 blink::CompositorMutatorClient::Mutate()
#10 0x7f117d52c981 cc::LayerTreeHostImpl::Mutate()
#11 0x7f117d52c5b0 cc::LayerTreeHostImpl::AnimateInternal()
#12 0x7f117d532681 cc::LayerTreeHostImpl::WillBeginImplFrame()
#13 0x7f117d4f7eab cc::Scheduler::BeginImplFrame()
#14 0x7f117d4f7977 cc::Scheduler::BeginImplFrameWithDeadline()
#15 0x7f117d4f7272 cc::Scheduler::OnBeginFrameDerivedImpl()
#16 0x7f117d4efe70 cc::BeginFrameObserverBase::OnBeginFrame()
#17 0x7f117d4f14ec cc::ExternalBeginFrameSource::OnBeginFrame()
#18 0x7f117eb9e32b _ZN3IPC8MessageTI23ViewMsg_BeginFrame_MetaSt5tupleIJN2cc14BeginFrameArgsEEEvE8DispatchIN7content34CompositorExternalBeginFrameSourceES9_vMS9_FvRKS4_EEEbPKNS_7MessageEPT_PT0_PT1_T2_
#19 0x7f117eb9e102 content::CompositorExternalBeginFrameSource::OnMessageReceived()
#20 0x7f117eb9e959 content::CompositorForwardingMessageFilter::ProcessMessageOnCompositorThread()
#21 0x7f117f682281 base::debug::TaskAnnotator::RunTask()
#22 0x7f117f6a2705 base::MessageLoop::RunTask()
#23 0x7f117f6a2ab8 base::MessageLoop::DeferOrRunPendingTask()
#24 0x7f117f6a2edb base::MessageLoop::DoWork()
#25 0x7f117f6a40ba base::MessagePumpDefault::Run()
#26 0x7f117f6c5c3e base::RunLoop::Run()
#27 0x7f117f6f2f1d base::Thread::ThreadMain()
#28 0x7f117f6ee0d3 base::(anonymous namespace)::ThreadFunc()
#29 0x7f117f38d184 start_thread
#30 0x7f117782537d clone

Please use labels and text to provide additional information.

 

Comment 1 by flackr@chromium.org, Sep 12 2016

Labels: -OS-Linux OS-All
Owner: flackr@chromium.org
Status: Started (was: Untriaged)
Looks like we need to not run our animation frame callbacks after calling WorkerGlobalScope::dispose. I'm putting a patch together.

Comment 3 by flackr@chromium.org, Sep 13 2016

Cc: keishi@chromium.org
Status: WontFix (was: Started)
keishi fixed this before I could land my fix with an explicit dispose call added in https://codereview.chromium.org/2204183002.

Sign in to add a comment