Chrome Version: 55.0.2883.91 and 57.0.2974.0

OS: Android 5.1.1

What steps will reproduce the problem?
(1) Add a credit card in Settings->Autofill forms->Credit cards
(2) Visit https://dump-truck.appspot.com/usecase-address_and_cc_on_same_page/address_and_cc.html
(3) Accept the auto fill prompt at the bottom to fill in the credit card fields.
(4) Enter the CVC

Chrome crashes here.

What is the expected result?

Should accept the auto fill entry in the form

What happens instead?

Aw, Snap!

I tried with the lasted build on head and I could reproduce the crash.
There were two stacks I got, so could be 2 different bugs:

01-06 16:24:36.537 F/libc    (32004): Fatal signal 11 (SIGSEGV), code 1, fault addr 0x80 in tid 32031 (CrRendererMain)^M

01-06 16:24:36.639 I/DEBUG   (  186): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***^M
01-06 16:24:36.639 I/DEBUG   (  186): Build fingerprint: 'google/hammerhead/hammerhead:5.1.1/LMY48T/2237560:user/release-keys'^M
01-06 16:24:36.639 I/DEBUG   (  186): Revision: '11'^M
01-06 16:24:36.639 I/DEBUG   (  186): ABI: 'arm'^M
01-06 16:24:36.639 I/DEBUG   (  186): pid: 32004, tid: 32031, name: CrRendererMain  >>> org.chromium.chrome:sandboxed_process3 <<<^M
01-06 16:24:36.639 I/DEBUG   (  186): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x80^M
01-06 16:24:36.669 I/DEBUG   (  186):     r0 00000000  r1 00000000  r2 b3507240  r3 00000000^M
01-06 16:24:36.669 I/DEBUG   (  186):     r4 aec5b540  r5 aec5b558  r6 aec5b67c  r7 b3507170^M
01-06 16:24:36.670 I/DEBUG   (  186):     r8 b3507240  r9 b3507240  sl b3507220  fp 00000000^M
01-06 16:24:36.670 I/DEBUG   (  186):     ip 9b0debec  sp b3507170  lr 9ca1cc61  pc 9ca1cc60  cpsr 80010030^M
01-06 16:24:36.670 I/DEBUG   (  186): ^M
01-06 16:24:36.670 I/DEBUG   (  186): backtrace:^M
01-06 16:24:36.670 I/DEBUG   (  186):     #00 pc 000cdc60  /data/app/org.chromium.chrome-1/lib/arm/libblink_web.cr.so (blink::WebFormControlElement::isAutofilled() const+9)^M
01-06 16:24:36.670 I/DEBUG   (  186):     #01 pc 00bcbb75  /data/app/org.chromium.chrome-1/lib/arm/libchrome.cr.so^M
01-06 16:24:36.670 I/DEBUG   (  186):     #02 pc 0031298b  /data/app/org.chromium.chrome-1/lib/arm/libchrome.cr.so^M
01-06 16:24:36.670 I/DEBUG   (  186):     #03 pc 000179ad  /data/app/org.chromium.chrome-1/lib/arm/libbindings.cr.so (mojo::InterfaceEndpointClient::HandleValidatedMessage(mojo::Message*)+744)^M
...


The other stack trace:

01-06 16:28:52.334 I/DEBUG   (  186): Abort message: '[FATAL:credit_card.cc(268)] Check failed: CREDIT_CARD == AutofillType(type).group() (9 vs. 5)^M

However, I think the first stack trace is what happened on the production build because check failed is a debug check.


Please use labels and text to provide additional information.


For graphics-related bugs, please copy/paste the contents of the about:gpu
page at the end of this report.