Version: 55.0.2862.0 (Developer Build) (64-bit) #419072
I saw this crash stack trace while running with Compositor Worker on the page https://flackr.github.io/houdini-samples/animation-worklet/sync-scroller/
../../third_party/tcmalloc/chromium/src/free_list.h:118] Memory corruption detected.
Received signal 11 SEGV_MAPERR 000000000039
#0 0x7f377f579357 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#1 0x7f377f28d330 <unknown>
#2 0x7f377f61e0e0 <unknown>
#3 0x7f377f621e17 tcmalloc::Log()
#4 0x7f377f62174a tcmalloc::FL_PopRange()
#5 0x7f377f625d57 tcmalloc::ThreadCache::ReleaseToCentralCache()
#6 0x7f377f625f37 tcmalloc::ThreadCache::ListTooLong()
#7 0x7f377f628e3b (anonymous namespace)::do_free_with_callback()
#8 0x7f377a51135f _ZN4base8internal9BindStateIMN5blink25CompositorMutationsTargetEFvPNS2_19CompositorMutationsEEJNS0_17UnretainedWrapperIS3_EENS0_12OwnedWrapperIS4_EEEE7DestroyEPNS0_13BindStateBaseE
#9 0x7f377c676808 cc::BeginMainFrameAndCommitState::~BeginMainFrameAndCommitState()
#10 0x7f377c6862bb _ZN4base8internal7InvokerINS0_9BindStateIMN2cc9ProxyMainEFvSt10unique_ptrINS3_28BeginMainFrameAndCommitStateESt14default_deleteIS6_EEEJNS_7WeakPtrIS4_EENS0_13PassedWrapperIS9_EEEEEFvvEE7RunImplIRKSB_RKSt5tupleIJSD_SF_EEJLm0ELm1EEEEvOT_OT0_NS_13IndexSequenceIJXspT1_EEEE
#11 0x7f377f57a301 base::debug::TaskAnnotator::RunTask()
#12 0x7f377a59bc1c blink::scheduler::TaskQueueManager::ProcessTaskFromWorkQueue()
#13 0x7f377a59a845 blink::scheduler::TaskQueueManager::DoWork()
#14 0x7f377f57a301 base::debug::TaskAnnotator::RunTask()
#15 0x7f377f59b6d5 base::MessageLoop::RunTask()
#16 0x7f377f59ba88 base::MessageLoop::DeferOrRunPendingTask()
#17 0x7f377f59beab base::MessageLoop::DoWork()
#18 0x7f377f59d06a base::MessagePumpDefault::Run()
#19 0x7f377f5be8ee base::RunLoop::Run()
#20 0x7f377d90495b content::RendererMain()
#21 0x7f377d9d4311 content::RunZygote()
#22 0x7f377d9d53f7 content::ContentMainRunnerImpl::Run()
#23 0x7f377d9d3ee0 content::ContentMain()
#24 0x7f377fba551b ChromeMain
#25 0x7f3776f10f45 __libc_start_main
#26 0x7f377fba53ed <unknown>
r8: 0000000000000001 r9: cccccccccccccccd r10: 00007ffca9251270 r11: 0000000000000000
r12: 00007ffca9251270 r13: 00007ffca9251250 r14: 00007ffca9251128 r15: 0000000000000001
di: 0000000000000000 si: 00007ffca9251128 bp: 00007ffca9251201 bx: 0000000000000056
dx: 0000000000000056 ax: 0000000000000000 cx: ffffffffffffffff sp: 00007ffca92510f8
ip: 00007f377f61e0e0 efl: 0000000000010297 cgf: 0000000000000033 erf: 0000000000000006
trp: 000000000000000e msk: 0000000000000000 cr2: 0000000000000039
[end of stack trace]
Comment 1 by majidvp@chromium.org
, Oct 20 2017