Version: 56.0.2888.0 (Developer Build) (64-bit) with dcheck_always_on=1
OS: Linux

What steps will reproduce the problem?
(1) enter "foo :" in address bar
(2)
(3)

What is the expected output?
What do you see instead?

browser crashed
[10798:10798:1012/114959:FATAL:scored_history_match.cc(513)] Check failed: at_word_boundary.
Program received signal SIGABRT, Aborted.
0x00007fffee7cfc37 in __GI_raise (sig=sig@entry=6)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
56      ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0  0x00007fffee7cfc37 in __GI_raise (sig=sig@entry=6)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007fffee7d3028 in __GI_abort () at abort.c:89
#2  0x00007ffff7a6ac92 in base::debug::BreakDebugger() ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libbase.so
#3  0x00007ffff7a93b1a in logging::LogMessage::~LogMessage() ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libbase.so
#4  0x000055555690c1d9 in ScoredHistoryMatch::GetTopicalityScore(int, std::basic_string<unsigned short, base::string16_char_traits, std::allocator<unsigned short> > const&, std::vector<unsigned long, std::allocator<unsigned long> > const&, 
RowWordStarts const&) ()
#5  0x000055555690b53f in ScoredHistoryMatch::ScoredHistoryMatch(history::URLRow const&, std::vector<std::pair<base::Time, ui::PageTransition>, std::allocator<std::pair<base::Time, ui::PageTransition> > > const&, std::basic_string<unsigned short, base::string16_char_traits, std::allocator<unsigned short> > const&, std::vector<std::basic_string<unsigned short, base::string16_char_traits, std::allocator<unsigned short> >, std::allocator<std::basic_string<unsigned short, base::string16_char_traits, std::allocator<unsigned short> > > > const&, std::vector<unsigned long, std::allocator<unsigned long> > const&, RowWordStarts const&, bool, TemplateURLService*, base::Time) ()
#6  0x00005555568fce2f in URLIndexPrivateData::AddHistoryMatch::operator()(long) ()
#7  0x00005555568f489c in URLIndexPrivateData::HistoryItemsForTerms(std::basic_string<unsigned short, base::string16_char_traits, std::allocator<unsigned short> >, unsigned long, unsigned long, bookmarks::BookmarkModel*, TemplateURLService*) ()
#8  0x00005555568e83ee in InMemoryURLIndex::HistoryItemsForTerms(std::basic_string<unsigned short, base::string16_char_traits, std::allocator<unsigned short> > 
const&, unsigned long, unsigned long) ()
#9  0x0000555557367c68 in HistoryQuickProvider::DoAutocomplete() ()
#10 0x0000555557367b93 in HistoryQuickProvider::Start(AutocompleteInput const&, bool) ()
#11 0x00005555573621cd in AutocompleteController::Start(AutocompleteInput const&) ()
#12 0x000055555736c926 in OmniboxEditModel::StartAutocomplete(bool, bool, bool)    ()
#13 0x0000555556a92017 in OmniboxViewViews::UpdatePopup() ()
#14 0x000055555736f3f3 in OmniboxEditModel::OnAfterPossibleChange(OmniboxView::StateChanges const&, bool) ()
#15 0x0000555556a9233a in OmniboxViewViews::OnAfterPossibleChange(bool) ()
#16 0x00007ffff30d30e7 in views::Textfield::DoInsertChar(unsigned short) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libviews.so
#17 0x00007ffff30d219c in views::Textfield::InsertChar(ui::KeyEvent const&) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libviews.so
#18 0x00007ffff2f631bc in ui::InputMethodAuraLinux::ProcessKeyEventDone(ui::KeyEvent*, bool, bool) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libui_base_ime.so
#19 0x00007ffff2f62c64 in ui::InputMethodAuraLinux::DispatchKeyEvent(ui::KeyEvent*) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libui_base_ime.so
#20 0x00007ffff3121954 in views::DesktopWindowTreeHostX11::DispatchEvent(_XEvent* const&) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libviews.so
#21 0x00007ffff3122b6d in non-virtual thunk to views::DesktopWindowTreeHostX11::DispatchEvent(_XEvent* const&) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libviews.so
#22 0x00007ffff7e31afb in ui::PlatformEventSource::DispatchEvent(_XEvent*) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libplatform.so
#23 0x00007fffee03f74a in ui::X11EventSource::ExtractCookieDataDispatchEvent(_XEvent*) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libx11_events_platform.so
#24 0x00007ffff2670098 in libgtk2ui::Gtk2EventLoop::ProcessGdkEventKey(_GdkEventKey const&) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libgtk2ui.so
#25 0x00007ffff266ffb6 in libgtk2ui::Gtk2EventLoop::DispatchGdkEvent(_GdkEvent*, void*) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libgtk2ui.so
#26 0x00007fffeb31b3ec in gdk_event_dispatch (source=<optimized out>,
    callback=<optimized out>, user_data=<optimized out>)
    at /build/gtk+2.0-KsZSEA/gtk+2.0-2.24.23/gdk/x11/gdkevents-x11.c:2425
#27 0x00007ffff13cae04 in g_main_dispatch (context=0x1885aa718b40)
    at /build/buildd/glib2.0-2.40.2/./glib/gmain.c:3064
#28 g_main_context_dispatch (context=context@entry=0x1885aa718b40)
    at /build/buildd/glib2.0-2.40.2/./glib/gmain.c:3663
#29 0x00007ffff13cb048 in g_main_context_iterate (
    context=context@entry=0x1885aa718b40, block=block@entry=0,
    dispatch=dispatch@entry=1, self=<optimized out>)
    at /build/buildd/glib2.0-2.40.2/./glib/gmain.c:3734
#30 0x00007ffff13cb0ec in g_main_context_iteration (context=0x1885aa718b40,
    may_block=0) at /build/buildd/glib2.0-2.40.2/./glib/gmain.c:3795
#31 0x00007ffff7aa13c6 in base::MessagePumpGlib::Run(base::MessagePump::Delegate*) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libbase.so
#32 0x00007ffff7a9eca4 in base::MessageLoop::RunHandler() ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libbase.so
#33 0x00007ffff7acc0c0 in base::RunLoop::Run() ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libbase.so
#34 0x00005555560365da in ChromeBrowserMainParts::MainMessageLoopRun(int*) ()
#35 0x00007ffff556d079 in content::BrowserMainLoop::RunMainMessageLoopParts()    ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libcontent.so
#36 0x00007ffff557040f in content::BrowserMainRunnerImpl::Run() ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libcontent.so
#37 0x00007ffff5568ade in content::BrowserMain(content::MainFunctionParams const&) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libcontent.so
#38 0x00007ffff5c6fe2e in content::RunNamedProcessTypeMain(std::string const&, content::MainFunctionParams const&, content::ContentMainDelegate*) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libcontent.so
#39 0x00007ffff5c7088b in content::ContentMainRunnerImpl::Run() ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libcontent.so
#40 0x00007ffff5c6f120 in content::ContentMain(content::ContentMainParams const&) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libcontent.so
#41 0x0000555555a37c6d in ChromeMain ()
#42 0x00007fffee7baf45 in __libc_start_main (main=0x555555a37c20 <main>,
    argc=2, argv=0x7fffffffdb68, init=<optimized out>, fini=<optimized out>,
    rtld_fini=<optimized out>, stack_end=0x7fffffffdb58) at libc-start.c:287
#43 0x0000555555a37b49 in _start ()


Please use labels and text to provide additional information.
https://chromium.googlesource.com/chromium/src/+/c38a45a25bac176d98e91aed57d87ff9c4d14e31