New issue
Advanced search Search tips

Issue 652547 link

Starred by 1 user

Issue metadata

Status: Assigned
Owner:
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 3
Type: Bug



Sign in to add a comment

Debug build of Chromium crashes when remote-debugged with Dev Tools

Project Member Reported by pwnall@chromium.org, Oct 4 2016

Issue description

Version: debug build from master
OS: Android 5.1.1

What steps will reproduce the problem?
(1) Set up an Android device for USB debugging
(2) Build a debug APK of Chromium: ninja -C out/Android chrome_public_apk
(3) Install the APK: build/android/adb_install_apk.py --apk out/Android/apks/ChromePublic.apk
(4) Start Chromium
(5) On a computer, go to chrome://inspect, find the tab for Chromium running on the Android device, and click on "inspect"

What is the expected output?
I should be able to use Dev Tools to drive Chromium on my device.

What do you see instead?
When I do step (5), Chromium on the Android device crashes.

--------- beginning of crash
F/libc    (19648): Fatal signal 6 (SIGABRT), code -6 in tid 19648 (chromium.chrome)
I/DEBUG   (  184): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG   (  184): Build fingerprint: 'google/razor/flo:5.1.1/LMY49S/3276206:userdebug/dev-keys'
I/DEBUG   (  184): Revision: '0'
I/DEBUG   (  184): ABI: 'arm'
I/DEBUG   (  184): pid: 19648, tid: 19648, name: chromium.chrome  >>> org.chromium.chrome <<<
I/DEBUG   (  184): signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
I/DEBUG   (  184): Abort message: '[FATAL:jni_weak_ref.cc(29)] Check failed: obj_. 
I/DEBUG   (  184): 
I/DEBUG   (  184): '
I/DEBUG   (  184):     r0 00000000  r1 00004cc0  r2 00000006  r3 00000000
I/DEBUG   (  184):     r4 b6f45e38  r5 00000006  r6 0000000b  r7 0000010c
I/DEBUG   (  184):     r8 b6e19df4  r9 bee7e84c  sl 00000000  fp b6e19df4
I/DEBUG   (  184):     ip 00004cc0  sp bee7e298  lr b6dc33c5  pc b6de6744  cpsr 600f0010
I/DEBUG   (  184): 
I/DEBUG   (  184): backtrace:
I/DEBUG   (  184):     #00 pc 0003a744  /system/lib/libc.so (tgkill+12)
I/DEBUG   (  184):     #01 pc 000173c1  /system/lib/libc.so (pthread_kill+52)
I/DEBUG   (  184):     #02 pc 00017fd3  /system/lib/libc.so (raise+10)
I/DEBUG   (  184):     #03 pc 00014795  /system/lib/libc.so (__libc_android_abort+36)
I/DEBUG   (  184):     #04 pc 00012f44  /system/lib/libc.so (abort+4)
I/DEBUG   (  184):     #05 pc 000bbe99  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #06 pc 000cd88d  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #07 pc 000b2d25  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #08 pc 00a813ad  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #09 pc 00a815c3  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #10 pc 013ab17b  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #11 pc 013ab441  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #12 pc 01198857  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #13 pc 011988a1  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #14 pc 01180c81  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #15 pc 01180c81  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #16 pc 011822bf  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #17 pc 01184197  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #18 pc 000bdd2d  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #19 pc 000d4a7d  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #20 pc 000d4ce9  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #21 pc 000d4deb  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #22 pc 000d6769  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #23 pc 000d68ad  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #24 pc 002d7e43  /data/dalvik-cache/arm/data@app@org.chromium.chrome-1@base.apk@classes.dex

[FATAL:jni_weak_ref.cc(29)] Check failed: obj_. 
signal 6 (SIGABRT), code -6 in tid 19648 (chromium.chrome)
pid: 19648, tid: 19648, name: chromium.chrome  >>> org.chromium.chrome <<<
signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
[FATAL:jni_weak_ref.cc(29)] Check failed: obj_. 
     r0 00000000  r1 00004cc0  r2 00000006  r3 00000000
     r4 b6f45e38  r5 00000006  r6 0000000b  r7 0000010c
     r8 b6e19df4  r9 bee7e84c  sl 00000000  fp b6e19df4
     ip 00004cc0  sp bee7e298  lr b6dc33c5  pc b6de6744

Stack Trace:
  RELADDR   FUNCTION                                                                                                                                                                                                                                                                                                                                                                                                                 FILE:LINE
  0003a744  tgkill+12                                                                                                                                                                                                                                                                                                                                                                                                                /system/lib/libc.so
  000173c1  pthread_kill+52                                                                                                                                                                                                                                                                                                                                                                                                          /system/lib/libc.so
  00017fd3  raise+10                                                                                                                                                                                                                                                                                                                                                                                                                 /system/lib/libc.so
  00014795  __libc_android_abort+36                                                                                                                                                                                                                                                                                                                                                                                                  /system/lib/libc.so
  00012f44  abort+4                                                                                                                                                                                                                                                                                                                                                                                                                  /system/lib/libc.so
  000bbe99  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  000cd88d  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  000b2d25  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  v------>  std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> >::__get_short_size() const                                                                                                                                                                                                                                                                                                 /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/string:1764
  v------>  std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> >::size() const                                                                                                                                                                                                                                                                                                             /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/string:1479
  v------>  std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> >::find(char const*, unsigned int) const                                                                                                                                                                                                                                                                                    /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/string:3452
  00a813ad  SetFragmentSamplerType                                                                                                                                                                                                                                                                                                                                                                                                   /usr/local/google/home/costan/chromium/src/cc/output/shader.cc:135
  v------>  char const* std::__ndk1::__search<bool (*&)(char, char), char const*, char const*>(char const*, char const*, char const*, char const*, bool (*&)(char, char), std::__ndk1::random_access_iterator_tag, std::__ndk1::random_access_iterator_tag)                                                                                                                                                                          /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/algorithm:1463
  v------>  char const* std::__ndk1::search<char const*, char const*, bool (*)(char, char)>(char const*, char const*, char const*, char const*, bool (*)(char, char))                                                                                                                                                                                                                                                                /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/algorithm:1563
  v------>  unsigned int std::__ndk1::__find<char, unsigned int, std::__ndk1::char_traits<char>, 4294967295u>(char const*, unsigned int, char const*, unsigned int, unsigned int)                                                                                                                                                                                                                                                    /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/string:1019
  v------>  std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> >::find(char const*, unsigned int) const                                                                                                                                                                                                                                                                                    /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/string:3452
  00a815c3  SetFragmentSamplerType                                                                                                                                                                                                                                                                                                                                                                                                   /usr/local/google/home/costan/chromium/src/cc/output/shader.cc:135
  013ab17b  base::internal::Invoker<base::internal::BindState<base::Callback<void (std::__ndk1::vector<content::CacheStorageUsageInfo, std::__ndk1::allocator<content::CacheStorageUsageInfo> > const&), (base::internal::CopyMode)1, (base::internal::RepeatMode)1>, std::__ndk1::vector<content::CacheStorageUsageInfo, std::__ndk1::allocator<content::CacheStorageUsageInfo> > >, void ()>::Run(base::internal::BindStateBase*)  /usr/local/google/home/costan/chromium/src/base/bind_internal.h:332
  013ab441  content::CacheStorageContextImpl::CreateCacheStorageManager(base::FilePath const&, scoped_refptr<base::SequencedTaskRunner>, scoped_refptr<storage::QuotaManagerProxy>)                                                                                                                                                                                                                                                  /usr/local/google/home/costan/chromium/src/content/browser/cache_storage/cache_storage_context_impl.cc:106
  v------>  __RT_impl_Runtime_GeneratorClose                                                                                                                                                                                                                                                                                                                                                                                         /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-generator.cc:87
  v------>  Stats_Runtime_GeneratorClose                                                                                                                                                                                                                                                                                                                                                                                             /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-generator.cc:85
  01198857  v8::internal::Runtime_GeneratorClose(int, v8::internal::Object**, v8::internal::Isolate*)                                                                                                                                                                                                                                                                                                                                /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-generator.cc:85
  v------>  v8::internal::tracing::ScopedTracer::~ScopedTracer()                                                                                                                                                                                                                                                                                                                                                                     /usr/local/google/home/costan/chromium/src/v8/src/tracing/trace-event.h:590
  v------>  Stats_Runtime_GeneratorClose                                                                                                                                                                                                                                                                                                                                                                                             /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-generator.cc:85
  011988a1  v8::internal::Runtime_GeneratorClose(int, v8::internal::Object**, v8::internal::Isolate*)                                                                                                                                                                                                                                                                                                                                /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-generator.cc:85
  01180c81  __RT_impl_Runtime_GetFunctionScopeDetails                                                                                                                                                                                                                                                                                                                                                                                /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-debug.cc:913
  01180c81  __RT_impl_Runtime_GetFunctionScopeDetails                                                                                                                                                                                                                                                                                                                                                                                /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-debug.cc:913
  011822bf  __RT_impl_Runtime_SetScopeVariableValue                                                                                                                                                                                                                                                                                                                                                                                  /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-debug.cc:1020
  v------>  v8::internal::NumberToInt32(v8::internal::Object*)                                                                                                                                                                                                                                                                                                                                                                       /usr/local/google/home/costan/chromium/src/v8/src/conversions-inl.h:127
  v------>  __RT_impl_Runtime_PrepareStep                                                                                                                                                                                                                                                                                                                                                                                            /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-debug.cc:1213
  v------>  Stats_Runtime_PrepareStep                                                                                                                                                                                                                                                                                                                                                                                                /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-debug.cc:1202
  01184197  v8::internal::Runtime_PrepareStep(int, v8::internal::Object**, v8::internal::Isolate*)                                                                                                                                                                                                                                                                                                                                   /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-debug.cc:1202
  000bdd2d  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  000d4a7d  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  000d4ce9  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  000d4deb  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  000d6769  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  000d68ad  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  002d7e43  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                /data/dalvik-cache/arm/data@app@org.chromium.chrome-1@base.apk@classes.dex


Please use labels and text to provide additional information.

 
Here is another crash for the same bug.


E/chromium(28695): [ERROR:shell_integration_android.cc(27)] Not implemented reached in shell_integration::DefaultWebClientState shell_integration::GetDefaultBrowser()
F/chromium(28695): [FATAL:jni_weak_ref.cc(29)] Check failed: obj_. 
F/chromium(28695): 
--------- beginning of crash
F/libc    (28695): Fatal signal 6 (SIGABRT), code -6 in tid 28695 (chromium.chrome)
I/DEBUG   (  184): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG   (  184): Build fingerprint: 'google/razor/flo:5.1.1/LMY49S/3276206:userdebug/dev-keys'
I/DEBUG   (  184): Revision: '0'
I/DEBUG   (  184): ABI: 'arm'
I/DEBUG   (  184): pid: 28695, tid: 28695, name: chromium.chrome  >>> org.chromium.chrome <<<
I/DEBUG   (  184): signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
I/DEBUG   (  184): Abort message: '[FATAL:jni_weak_ref.cc(29)] Check failed: obj_. 
I/DEBUG   (  184): 
I/DEBUG   (  184): '
I/DEBUG   (  184):     r0 00000000  r1 00007017  r2 00000006  r3 00000000
I/DEBUG   (  184):     r4 b6f45e38  r5 00000006  r6 0000000b  r7 0000010c
I/DEBUG   (  184):     r8 b6e19df4  r9 bee7e84c  sl 00000000  fp b6e19df4
I/DEBUG   (  184):     ip 00007017  sp bee7e298  lr b6dc33c5  pc b6de6744  cpsr 600f0010
I/DEBUG   (  184): 
I/DEBUG   (  184): backtrace:
I/DEBUG   (  184):     #00 pc 0003a744  /system/lib/libc.so (tgkill+12)
I/DEBUG   (  184):     #01 pc 000173c1  /system/lib/libc.so (pthread_kill+52)
I/DEBUG   (  184):     #02 pc 00017fd3  /system/lib/libc.so (raise+10)
I/DEBUG   (  184):     #03 pc 00014795  /system/lib/libc.so (__libc_android_abort+36)
I/DEBUG   (  184):     #04 pc 00012f44  /system/lib/libc.so (abort+4)
I/DEBUG   (  184):     #05 pc 000bbec9  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #06 pc 000cd8bd  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #07 pc 000b2d55  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #08 pc 00a813ed  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #09 pc 00a81603  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #10 pc 013ab14b  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #11 pc 013ab411  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #12 pc 01198827  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #13 pc 01198871  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #14 pc 01180ca9  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #15 pc 01180ca9  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #16 pc 011822e7  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #17 pc 011841bf  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #18 pc 000bdd5d  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #19 pc 000d4aad  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #20 pc 000d4d19  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #21 pc 000d4e1b  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #22 pc 000d6799  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #23 pc 000d68dd  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
I/DEBUG   (  184):     #24 pc 002d7e43  /data/dalvik-cache/arm/data@app@org.chromium.chrome-1@base.apk@classes.dex


[FATAL:jni_weak_ref.cc(29)] Check failed: obj_. 
signal 6 (SIGABRT), code -6 in tid 28695 (chromium.chrome)
pid: 28695, tid: 28695, name: chromium.chrome  >>> org.chromium.chrome <<<
signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
[FATAL:jni_weak_ref.cc(29)] Check failed: obj_. 
     r0 00000000  r1 00007017  r2 00000006  r3 00000000
     r4 b6f45e38  r5 00000006  r6 0000000b  r7 0000010c
     r8 b6e19df4  r9 bee7e84c  sl 00000000  fp b6e19df4
     ip 00007017  sp bee7e298  lr b6dc33c5  pc b6de6744

Stack Trace:
  RELADDR   FUNCTION                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         FILE:LINE
  0003a744  tgkill+12                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        /system/lib/libc.so
  000173c1  pthread_kill+52                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  /system/lib/libc.so
  00017fd3  raise+10                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         /system/lib/libc.so
  00014795  __libc_android_abort+36                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          /system/lib/libc.so
  00012f44  abort+4                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          /system/lib/libc.so
  000bbec9  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  000cd8bd  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  000b2d55  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  v------>  std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> >::__get_short_size() const                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/string:1764
  v------>  std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> >::size() const                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/string:1479
  v------>  std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> >::find(char const*, unsigned int) const                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/string:3452
  00a813ed  SetFragmentSamplerType                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           /usr/local/google/home/costan/chromium/src/cc/output/shader.cc:135
  v------>  char const* std::__ndk1::__search<bool (*&)(char, char), char const*, char const*>(char const*, char const*, char const*, char const*, bool (*&)(char, char), std::__ndk1::random_access_iterator_tag, std::__ndk1::random_access_iterator_tag)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/algorithm:1463
  v------>  char const* std::__ndk1::search<char const*, char const*, bool (*)(char, char)>(char const*, char const*, char const*, char const*, bool (*)(char, char))                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/algorithm:1563
  v------>  unsigned int std::__ndk1::__find<char, unsigned int, std::__ndk1::char_traits<char>, 4294967295u>(char const*, unsigned int, char const*, unsigned int, unsigned int)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/string:1019
  v------>  std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> >::find(char const*, unsigned int) const                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            /usr/local/google/home/costan/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/string:3452
  00a81603  SetFragmentSamplerType                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           /usr/local/google/home/costan/chromium/src/cc/output/shader.cc:135
  v------>  void base::internal::FunctorTraits<void (content::CacheStorageContextImpl::*)(base::FilePath const&, scoped_refptr<base::SequencedTaskRunner>, scoped_refptr<storage::QuotaManagerProxy>), void>::Invoke<scoped_refptr<content::CacheStorageContextImpl> const&, base::FilePath const&, scoped_refptr<base::SequencedTaskRunner> const&, scoped_refptr<storage::QuotaManagerProxy> const&>(void (content::CacheStorageContextImpl::*)(base::FilePath const&, scoped_refptr<base::SequencedTaskRunner>, scoped_refptr<storage::QuotaManagerProxy>), scoped_refptr<content::CacheStorageContextImpl> const&, base::FilePath const&, scoped_refptr<base::SequencedTaskRunner> const&, scoped_refptr<storage::QuotaManagerProxy> const&)                                                                                                                                                                                                                                                                                                                                                                                                             /usr/local/google/home/costan/chromium/src/base/bind_internal.h:214
  v------>  void base::internal::InvokeHelper<false, void>::MakeItSo<void (content::CacheStorageContextImpl::* const&)(base::FilePath const&, scoped_refptr<base::SequencedTaskRunner>, scoped_refptr<storage::QuotaManagerProxy>), scoped_refptr<content::CacheStorageContextImpl> const&, base::FilePath const&, scoped_refptr<base::SequencedTaskRunner> const&, scoped_refptr<storage::QuotaManagerProxy> const&>(void (content::CacheStorageContextImpl::* const&)(base::FilePath const&, scoped_refptr<base::SequencedTaskRunner>, scoped_refptr<storage::QuotaManagerProxy>), scoped_refptr<content::CacheStorageContextImpl> const&, base::FilePath const&, scoped_refptr<base::SequencedTaskRunner> const&, scoped_refptr<storage::QuotaManagerProxy> const&)                                                                                                                                                                                                                                                                                                                                                                                       /usr/local/google/home/costan/chromium/src/base/bind_internal.h:286
  v------>  void base::internal::Invoker<base::internal::BindState<void (content::CacheStorageContextImpl::*)(base::FilePath const&, scoped_refptr<base::SequencedTaskRunner>, scoped_refptr<storage::QuotaManagerProxy>), scoped_refptr<content::CacheStorageContextImpl>, base::FilePath, scoped_refptr<base::SequencedTaskRunner>, scoped_refptr<storage::QuotaManagerProxy> >, void ()>::RunImpl<void (content::CacheStorageContextImpl::* const&)(base::FilePath const&, scoped_refptr<base::SequencedTaskRunner>, scoped_refptr<storage::QuotaManagerProxy>), std::__ndk1::tuple<scoped_refptr<content::CacheStorageContextImpl>, base::FilePath, scoped_refptr<base::SequencedTaskRunner>, scoped_refptr<storage::QuotaManagerProxy> > const&, 0u, 1u, 2u, 3u>(void (content::CacheStorageContextImpl::* const&)(base::FilePath const&, scoped_refptr<base::SequencedTaskRunner>, scoped_refptr<storage::QuotaManagerProxy>), std::__ndk1::tuple<scoped_refptr<content::CacheStorageContextImpl>, base::FilePath, scoped_refptr<base::SequencedTaskRunner>, scoped_refptr<storage::QuotaManagerProxy> > const&, base::IndexSequence<0u, 1u, 2u, 3u>)  /usr/local/google/home/costan/chromium/src/base/bind_internal.h:364
  013ab14b  base::internal::Invoker<base::internal::BindState<void (content::CacheStorageContextImpl::*)(base::FilePath const&, scoped_refptr<base::SequencedTaskRunner>, scoped_refptr<storage::QuotaManagerProxy>), scoped_refptr<content::CacheStorageContextImpl>, base::FilePath, scoped_refptr<base::SequencedTaskRunner>, scoped_refptr<storage::QuotaManagerProxy> >, void ()>::Run(base::internal::BindStateBase*)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  /usr/local/google/home/costan/chromium/src/base/bind_internal.h:342
  013ab411  content::CacheStorageContextImpl::DeleteForOrigin(GURL const&)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   /usr/local/google/home/costan/chromium/src/content/browser/cache_storage/cache_storage_context_impl.cc:97
  v------>  v8::base::NoBarrier_Load(int const volatile*)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    /usr/local/google/home/costan/chromium/src/v8/src/base/atomicops_internals_arm_gcc.h:280
  v------>  v8::internal::RuntimeCallTimerScope::RuntimeCallTimerScope(v8::internal::Isolate*, v8::internal::RuntimeCallCounter v8::internal::RuntimeCallStats::*)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           /usr/local/google/home/costan/chromium/src/v8/src/counters-inl.h:15
  v------>  Stats_Runtime_GeneratorClose                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-generator.cc:85
  01198827  v8::internal::Runtime_GeneratorClose(int, v8::internal::Object**, v8::internal::Isolate*)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-generator.cc:85
  v------>  Stats_Runtime_GeneratorClose                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-generator.cc:85
  01198871  v8::internal::Runtime_GeneratorClose(int, v8::internal::Object**, v8::internal::Isolate*)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-generator.cc:85
  v------>  v8::internal::Object::IsJSFunction() const                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       /usr/local/google/home/costan/chromium/src/v8/src/objects-inl.h:174
  01180ca9  __RT_impl_Runtime_GetFunctionScopeDetails                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-debug.cc:912
  v------>  v8::internal::Object::IsJSFunction() const                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       /usr/local/google/home/costan/chromium/src/v8/src/objects-inl.h:174
  01180ca9  __RT_impl_Runtime_GetFunctionScopeDetails                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-debug.cc:912
  011822e7  __RT_impl_Runtime_SetScopeVariableValue                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-debug.cc:1020
  v------>  v8::internal::Object::IsNumber() const                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           /usr/local/google/home/costan/chromium/src/v8/src/objects-inl.h:654
  v------>  __RT_impl_Runtime_PrepareStep                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-debug.cc:1208
  v------>  Stats_Runtime_PrepareStep                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-debug.cc:1202
  011841bf  v8::internal::Runtime_PrepareStep(int, v8::internal::Object**, v8::internal::Isolate*)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           /usr/local/google/home/costan/chromium/src/v8/src/runtime/runtime-debug.cc:1202
  000bdd5d  <unknown>

*** snipped because of comment length restriction ***                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        
Same crash on a Pixel C with Android N.


10-04 02:42:50.332 24303 24303 F chromium: [FATAL:jni_weak_ref.cc(29)] Check failed: obj_. 
10-04 02:42:50.332 24303 24303 F chromium: #00 0xb7406b5b /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x00106b5b
10-04 02:42:50.332 24303 24303 F chromium: #01 0xb73e7dff /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x000e7dff
10-04 02:42:50.332 24303 24303 F chromium: #02 0xb7facf1d /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x00cacf1d
10-04 02:42:50.332 24303 24303 F chromium: #03 0xb7fad155 /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x00cad155
10-04 02:42:50.332 24303 24303 F chromium: #04 0xb8a161c9 /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x017161c9
10-04 02:42:50.332 24303 24303 F chromium: #05 0xb8a16577 /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x01716577
10-04 02:42:50.332 24303 24303 F chromium: #06 0xb87aeb7d /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x014aeb7d
10-04 02:42:50.332 24303 24303 F chromium: #07 0xb87aebd1 /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x014aebd1
10-04 02:42:50.332 24303 24303 F chromium: #08 0xb87931c7 /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x014931c7
10-04 02:42:50.332 24303 24303 F chromium: #09 0xb87931c7 /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x014931c7
10-04 02:42:50.332 24303 24303 F chromium: #10 0xb87950f3 /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x014950f3
10-04 02:42:50.332 24303 24303 F chromium: #11 0xb879724f /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x0149724f
10-04 02:42:50.332 24303 24303 F chromium: #12 0xb73f387d /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x000f387d
10-04 02:42:50.332 24303 24303 F chromium: #13 0xb740cc4b /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x0010cc4b
10-04 02:42:50.332 24303 24303 F chromium: #14 0xb740d27f /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x0010d27f
10-04 02:42:50.332 24303 24303 F chromium: #15 0xb740d387 /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x0010d387
10-04 02:42:50.332 24303 24303 F chromium: #16 0xb740efc7 /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x0010efc7
10-04 02:42:50.332 24303 24303 F chromium: #17 0xb740f0cb /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x0010f0cb
10-04 02:42:50.332 24303 24303 F chromium: #18 0xd148b545 /data/app/org.chromium.chrome-1/oat/arm/base.odex+0x00a2e545
10-04 02:42:50.332 24303 24303 F chromium: 
--------- beginning of crash
10-04 02:42:50.333 24303 24303 F libc    : Fatal signal 6 (SIGABRT), code -6 in tid 24303 (chromium.chrome)
10-04 02:42:50.334   169   169 W         : debuggerd: handling request: pid=24303 uid=10098 gid=10098 tid=24303
10-04 02:42:50.402 24720 24720 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
10-04 02:42:50.402 24720 24720 F DEBUG   : Build fingerprint: 'google/ryu/dragon:7.0/NRD91N/3318108:userdebug/dev-keys'
10-04 02:42:50.402 24720 24720 F DEBUG   : Revision: '0'
10-04 02:42:50.402 24720 24720 F DEBUG   : ABI: 'arm'
10-04 02:42:50.402 24720 24720 F DEBUG   : pid: 24303, tid: 24303, name: chromium.chrome  >>> org.chromium.chrome <<<
10-04 02:42:50.402 24720 24720 F DEBUG   : signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
10-04 02:42:50.404 24720 24720 F DEBUG   : Abort message: '[FATAL:jni_weak_ref.cc(29)] Check failed: obj_. 
10-04 02:42:50.404 24720 24720 F DEBUG   : #00 0xb7406b5b /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x00106b5b
10-04 02:42:50.404 24720 24720 F DEBUG   : #01 0xb73e7dff /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x000e7dff
10-04 02:42:50.404 24720 24720 F DEBUG   : #02 0xb7facf1d /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x00cacf1d
10-04 02:42:50.404 24720 24720 F DEBUG   : #03 0xb7fad155 /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x00cad155
10-04 02:42:50.404 24720 24720 F DEBUG   : #04 0xb8a161c9 /data/app/org.chromium.chrome-1/lib/arm/libchrome.so+0x017161c9
10-04 02:42:50.404 24720 24720 F DEBUG   : #05 0xb8a16577 /data/app/org.chromium.chrome-1/lib/
10-04 02:42:50.404 24720 24720 F DEBUG   :     r0 00000000  r1 00005eef  r2 00000006  r3 00000008
10-04 02:42:50.404 24720 24720 F DEBUG   :     r4 ec7e258c  r5 00000006  r6 ec7e2534  r7 0000010c
10-04 02:42:50.404 24720 24720 F DEBUG   :     r8 ffd9fba0  r9 ffd9ffe4  sl 00000000  fp 0000000a
10-04 02:42:50.404 24720 24720 F DEBUG   :     ip 0000000b  sp ffd9fa28  lr eb169507  pc eb16bd64  cpsr 200e0010
10-04 02:42:50.411 24720 24720 F DEBUG   : 
10-04 02:42:50.411 24720 24720 F DEBUG   : backtrace:
10-04 02:42:50.411 24720 24720 F DEBUG   :     #00 pc 00049d64  /system/lib/libc.so (tgkill+12)
10-04 02:42:50.411 24720 24720 F DEBUG   :     #01 pc 00047503  /system/lib/libc.so (pthread_kill+34)
10-04 02:42:50.411 24720 24720 F DEBUG   :     #02 pc 0001d855  /system/lib/libc.so (raise+10)
10-04 02:42:50.411 24720 24720 F DEBUG   :     #03 pc 000193a1  /system/lib/libc.so (__libc_android_abort+34)
10-04 02:42:50.411 24720 24720 F DEBUG   :     #04 pc 00017014  /system/lib/libc.so (abort+4)
10-04 02:42:50.411 24720 24720 F DEBUG   :     #05 pc 0039d477  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #06 pc 003b3cad  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #07 pc 00394dfd  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #08 pc 00f59f1d  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #09 pc 00f5a153  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #10 pc 019c31c9  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #11 pc 019c3575  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #12 pc 0175bb7b  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #13 pc 0175bbcf  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #14 pc 017401c7  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #15 pc 017401c7  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #16 pc 017420f3  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #17 pc 0174424d  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #18 pc 003a087d  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #19 pc 003b9c49  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #20 pc 003ba27d  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #21 pc 003ba385  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #22 pc 003bbfc7  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #23 pc 003bc0c9  /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
10-04 02:42:50.412 24720 24720 F DEBUG   :     #24 pc 00a2e545  /data/app/org.chromium.chrome-1/oat/arm/base.odex (offset 0xa04000) 


[FATAL:jni_weak_ref.cc(29)] Check failed: obj_. 

Stack Trace:
  RELADDR   FUNCTION                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 FILE:LINE
  00106b5b  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  000e7dff  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  00cacf1d  std::__ndk1::deque<std::__ndk1::unique_ptr<cc::StagingBuffer, std::__ndk1::default_delete<cc::StagingBuffer> >, std::__ndk1::allocator<std::__ndk1::unique_ptr<cc::StagingBuffer, std::__ndk1::default_delete<cc::StagingBuffer> > > >::erase(std::__ndk1::__deque_iterator<std::__ndk1::unique_ptr<cc::StagingBuffer, std::__ndk1::default_delete<cc::StagingBuffer> >, std::__ndk1::unique_ptr<cc::StagingBuffer, std::__ndk1::default_delete<cc::StagingBuffer> > const*, std::__ndk1::unique_ptr<cc::StagingBuffer, std::__ndk1::default_delete<cc::StagingBuffer> > const&, std::__ndk1::unique_ptr<cc::StagingBuffer, std::__ndk1::default_delete<cc::StagingBuffer> > const* const*, int, 1024>)  /home/pwnall/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/deque:2720
  v------>  AddTraceEvent                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            /home/pwnall/chromium/src/base/trace_event/trace_event.h:839
  v------>  WaitForQueryResult                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       /home/pwnall/chromium/src/cc/raster/staging_buffer_pool.cc:40
  00cad155  cc::StagingBufferPool::AcquireStagingBuffer(cc::Resource const*, unsigned long long)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     /home/pwnall/chromium/src/cc/raster/staging_buffer_pool.cc:277
  017161c9  bool IPC::MessageT<BrowserPluginHostMsg_SetEditCommandsForNextKeyEvent_Meta, std::__ndk1::tuple<int, std::__ndk1::vector<content::EditCommand, std::__ndk1::allocator<content::EditCommand> > >, void>::Dispatch<content::BrowserPluginGuest, content::BrowserPluginGuest, void, void (content::BrowserPluginGuest::*)(int, std::__ndk1::vector<content::EditCommand, std::__ndk1::allocator<content::EditCommand> > const&)>(IPC::Message const*, content::BrowserPluginGuest*, content::BrowserPluginGuest*, void*, void (content::BrowserPluginGuest::*)(int, std::__ndk1::vector<content::EditCommand, std::__ndk1::allocator<content::EditCommand> > const&))                                       /home/pwnall/chromium/src/ipc/ipc_message_templates.h:120
  01716577  content::BrowserPluginGuest::~BrowserPluginGuest()                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       /home/pwnall/chromium/src/content/browser/browser_plugin/browser_plugin_guest.cc:352
  v------>  v8::internal::Isolate::counters()                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        /home/pwnall/chromium/src/v8/src/base/atomicops_internals_arm_gcc.h:267
  v------>  v8::internal::RuntimeCallTimerScope::Initialize(v8::internal::Isolate*, v8::internal::RuntimeCallCounter v8::internal::RuntimeCallStats::*)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              /home/pwnall/chromium/src/v8/src/counters.h:1265
  v------>  v8::internal::RuntimeCallTimerScope::RuntimeCallTimerScope(v8::internal::Isolate*, v8::internal::RuntimeCallCounter v8::internal::RuntimeCallStats::*)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   /home/pwnall/chromium/src/v8/src/counters-inl.h:17
  v------>  Stats_Runtime_SetGrow                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    /home/pwnall/chromium/src/v8/src/runtime/runtime-collections.cc:57
  014aeb7d  v8::internal::Runtime_SetGrow(int, v8::internal::Object**, v8::internal::Isolate*)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       /home/pwnall/chromium/src/v8/src/runtime/runtime-collections.cc:57
  014aebd1  v8::internal::Runtime_MapShrink(int, v8::internal::Object**, v8::internal::Isolate*)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     /home/pwnall/chromium/src/v8/src/runtime/runtime-collections.cc:152
  v------>  std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> >* v8::base::CheckNEImpl<int, v8::base::Flags<v8::internal::JSRegExp::Flag, int> >(int const&, v8::base::Flags<v8::internal::JSRegExp::Flag, int> const&, char const*)                                                                                                                                                                                                                                                                                                                                                                                                                                      /home/pwnall/chromium/src/v8/src/base/logging.h:125
  014931c7  v8::internal::RegExpImpl::GlobalCache::GlobalCache(v8::internal::Handle<v8::internal::JSRegExp>, v8::internal::Handle<v8::internal::String>, v8::internal::Isolate*)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     /home/pwnall/chromium/src/v8/src/regexp/jsregexp.cc:670
  v------>  std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> >* v8::base::CheckNEImpl<int, v8::base::Flags<v8::internal::JSRegExp::Flag, int> >(int const&, v8::base::Flags<v8::internal::JSRegExp::Flag, int> const&, char const*)                                                                                                                                                                                                                                                                                                                                                                                                                                      /home/pwnall/chromium/src/v8/src/base/logging.h:125
  014931c7  v8::internal::RegExpImpl::GlobalCache::GlobalCache(v8::internal::Handle<v8::internal::JSRegExp>, v8::internal::Handle<v8::internal::String>, v8::internal::Isolate*)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     /home/pwnall/chromium/src/v8/src/regexp/jsregexp.cc:670
  v------>  unibrow::Utf16::CombineSurrogatePair(unsigned int, unsigned int)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         /home/pwnall/chromium/src/v8/src/unicode.h:109
  014950f3  v8::internal::RegExpMacroAssembler::CaseInsensitiveCompareUC16(unsigned char*, unsigned char*, unsigned int, v8::internal::Isolate*)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     /home/pwnall/chromium/src/v8/src/regexp/regexp-macro-assembler.cc:59
  0149724f  unsigned short v8::internal::FlatStringReader::Get<unsigned short>(int)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  /home/pwnall/chromium/src/v8/src/objects-inl.h:513
  000f387d  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  0010cc4b  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  0010d27f  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  0010d387  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  0010efc7  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  0010f0cb  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  00a2e545  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/oat/arm/base.odex

-----------------------------------------------------

signal 6 (SIGABRT), code -6 in tid 24303 (chromium.chrome)
pid: 24303, tid: 24303, name: chromium.chrome  >>> org.chromium.chrome <<<
signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
[FATAL:jni_weak_ref.cc(29)] Check failed: obj_. 

Stack Trace:
  RELADDR   FUNCTION                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 FILE:LINE
  00106b5b  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  000e7dff  <unknown>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                /data/app/org.chromium.chrome-1/lib/arm/libchrome.so
  00cacf1d  std::__ndk1::deque<std::__ndk1::unique_ptr<cc::StagingBuffer, std::__ndk1::default_delete<cc::StagingBuffer> >, std::__ndk1::allocator<std::__ndk1::unique_ptr<cc::StagingBuffer, std::__ndk1::default_delete<cc::StagingBuffer> > > >::erase(std::__ndk1::__deque_iterator<std::__ndk1::unique_ptr<cc::StagingBuffer, std::__ndk1::default_delete<cc::StagingBuffer> >, std::__ndk1::unique_ptr<cc::StagingBuffer, std::__ndk1::default_delete<cc::StagingBuffer> > const*, std::__ndk1::unique_ptr<cc::StagingBuffer, std::__ndk1::default_delete<cc::StagingBuffer> > const&, std::__ndk1::unique_ptr<cc::StagingBuffer, std::__ndk1::default_delete<cc::StagingBuffer> > const* const*, int, 1024>)  /home/pwnall/chromium/src/third_party/android_tools/ndk/sources/cxx-stl/llvm-libc++/libcxx/include/deque:2720
  v------>  AddTraceEvent                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            /home/pwnall/chromium/src/base/trace_event/trace_event.h:839
  v------>  WaitForQueryResult                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       /home/pwnall/chromium/src/cc/raster/staging_buffer_pool.cc:40
  00cad155  cc::StagingBufferPool::AcquireStagingBuffer(cc::Resource const*, unsigned long long)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     /home/pwnall/chromium/src/cc/raster/staging_buffer_pool.cc:277
  017161c9  bool IPC::MessageT<BrowserPluginHostMsg_SetEditCommandsForNextKeyEvent_Meta, std::__ndk1::tuple<int, std::__ndk1::vector<content::EditCommand, std::__ndk1::allocator<content::EditCommand> > >, void>::Dispatch<content::BrowserPluginGuest, content::BrowserPluginGuest, void, void (content::BrowserPluginGuest::*)(int, std::__ndk1::vector<content::EditCommand, std::__ndk1::allocator<content::EditCommand> > const&)>(IPC::Message const*, content::BrowserPluginGuest*, content::BrowserPluginGuest*, void*, void (content::BrowserPluginGuest::*)(int, std::__ndk1::vector<content::EditCommand, std::__ndk1::allocator<content::EditCommand> > const&))                                       /home/pwnall/chromium/src/ipc/ipc_message_templates.h:120

-----------------------------------------------------

     r0 00000000  r1 00005eef  r2 00000006  r3 00000008
     r4 ec7e258c  r5 00000006  r6 ec7e2534  r7 0000010c
     r8 ffd9fba0  r9 ffd9ffe4  sl 00000000  fp 0000000a
     ip 0000000b  sp ffd9fa28  lr eb169507  pc eb16bd64

Stack Trace:
  RELADDR   FUNCTION                                                                                                                                                        FILE:LINE
  00049d64  tgkill+12                                                                                                                                                       /system/lib/libc.so
  00047503  pthread_kill+34                                                                                                                                                 /system/lib/libc.so
  0001d855  raise+10                                                                                                                                                        /system/lib/libc.so
  000193a1  __libc_android_abort+34                                                                                                                                         /system/lib/libc.so
  00017014  abort+4                                                                                                                                                         /system/lib/libc.so
  v------>  DebugBreak                                                                                                                                                      /home/pwnall/chromium/src/base/debug/debugger_posix.cc:219
  0039d477  base::debug::BreakDebugger()                                                                                                                                    /home/pwnall/chromium/src/base/debug/debugger_posix.cc:249
  003b3cad  logging::LogMessage::~LogMessage()                                                                                                                              /home/pwnall/chromium/src/base/logging.cc:748
  00394dfd  JavaObjectWeakGlobalRef::JavaObjectWeakGlobalRef(_JNIEnv*, _jobject*)                                                                                           /home/pwnall/chromium/src/base/android/jni_weak_ref.cc:29
  00f59f1d  ui::ViewAndroid::ScopedAnchorView::ScopedAnchorView(_JNIEnv*, base::android::JavaRef<_jobject*> const&, base::android::JavaRef<_jobject*> const&)               /home/pwnall/chromium/src/ui/android/view_android.cc:25
  00f5a153  ui::ViewAndroid::AcquireAnchorView()                                                                                                                            /home/pwnall/chromium/src/ui/android/view_android.cc:111
  019c31c9  device::PowerSaveBlocker::Delegate::ApplyBlock(ui::ViewAndroid*)                                                                                                /home/pwnall/chromium/src/device/power_save_blocker/power_save_blocker_android.cc:56
  019c3575  device::PowerSaveBlocker::InitDisplaySleepBlocker(ui::ViewAndroid*)                                                                                             /home/pwnall/chromium/src/device/power_save_blocker/power_save_blocker_android.cc:95
  0175bb7b  content::RenderFrameDevToolsAgentHost::CreatePowerSaveBlocker()                                                                                                 /home/pwnall/chromium/src/content/browser/devtools/render_frame_devtools_agent_host.cc:739
  0175bbcf  content::RenderFrameDevToolsAgentHost::OnClientAttached()                                                                                                       /home/pwnall/chromium/src/content/browser/devtools/render_frame_devtools_agent_host.cc:535
  017401c7  content::DevToolsAgentHostImpl::InnerAttach(content::DevToolsAgentHostClient*, bool)                                                                            /home/pwnall/chromium/src/content/browser/devtools/devtools_agent_host_impl.cc:140
  017401c7  content::DevToolsAgentHostImpl::InnerAttach(content::DevToolsAgentHostClient*, bool)                                                                            /home/pwnall/chromium/src/content/browser/devtools/devtools_agent_host_impl.cc:140
  017420f3  content::DevToolsAgentHostClientImpl::DevToolsAgentHostClientImpl(base::MessageLoop*, content::ServerWrapper*, int, scoped_refptr<content::DevToolsAgentHost>)  /home/pwnall/chromium/src/content/browser/devtools/devtools_http_handler.cc:267
  0174424d  content::DevToolsHttpHandler::OnWebSocketRequest(int, net::HttpServerRequestInfo const&)                                                                        /home/pwnall/chromium/src/content/browser/devtools/devtools_http_handler.cc:682
  v------>  base::internal::RunMixin<base::Callback<void (), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> >::Run() const                                     /home/pwnall/chromium/src/base/callback.h:64
  003a087d  base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask const&)                                                                                      /home/pwnall/chromium/src/base/debug/task_annotator.cc:54
  003b9c49  base::MessageLoop::RunTask(base::PendingTask const&)                                                                                                            /home/pwnall/chromium/src/base/message_loop/message_loop.cc:405
  003ba27d  base::MessageLoop::DeferOrRunPendingTask(base::PendingTask)                                                                                                     /home/pwnall/chromium/src/base/message_loop/message_loop.cc:414
  003ba385  base::MessageLoop::DoWork()                                                                                                                                     /home/pwnall/chromium/src/base/message_loop/message_loop.cc:513
  003bbfc7  DoRunLoopOnce                                                                                                                                                   /home/pwnall/chromium/src/base/message_loop/message_pump_android.cc:44
  003bc0c9  Java_org_chromium_base_SystemMessageHandler_nativeDoRunLoopOnce                                                                                                 /home/pwnall/chromium/src/out/Android/gen/base/base_jni_headers/base/jni/SystemMessageHandler_jni.h:45
  00a2e545  offset 0xa04000                                                                                                                                                 /data/app/org.chromium.chrome-1/oat/arm/base.odex

Comment 3 by alph@chromium.org, Oct 10 2016

Components: -Platform>DevTools>Platform Platform
Owner: torne@chromium.org
Doesn't seem to be related to DevTools. Could Android folks please take a look what's wrong at jni_weak_ref.cc:29

Status: Assigned (was: Untriaged)

Sign in to add a comment