New issue
Advanced search Search tips

Issue 681289 link

Starred by 3 users

Issue metadata

Status: WontFix
Owner:
Closed: Apr 2017
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 2
Type: Bug



Sign in to add a comment

Crash in sandbox IPC

Project Member Reported by marc...@chromium.org, Jan 14 2017

Issue description

I can get this crash on Chrome OS with a bot that randomly opens/close lots of tabs, then killing the bot:

#0  0x00007ff6b6186e32 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54
#1  0x00007ff6b6188c56 in __GI_abort () at abort.c:89
#2  0x00007ff6ba611715 in base::debug::BreakDebugger() () at ../base/debug/debugger_posix.cc:251
#3  0x00007ff6ba62a875 in logging::LogMessage::~LogMessage() () at ../base/logging.cc:759
#4  0x00007ff6ba62ba5e in logging::ErrnoLogMessage::~ErrnoLogMessage() () at ../base/logging.cc:889
#5  0x00007ff6ba625725 in base::internal::ScopedFDCloseTraits::Free(int) () at ../base/files/scoped_file.cc:40
#6  0x00007ff6b986ce74 in content::SandboxIPCHandler::HandleRequestFromRenderer(int) () at ../base/scoped_generic.h:146
#7  0x00007ff6b986d11e in content::SandboxIPCHandler::Run() () at ../content/browser/renderer_host/sandbox_ipc_linux.cc:113
#8  0x00007ff6ba67e1a5 in base::SimpleThread::ThreadMain() () at ../base/threading/simple_thread.cc:68
#9  0x00007ff6ba679ef6 in base::(anonymous namespace)::ThreadFunc(void*) () at ../base/threading/platform_thread_posix.cc:71
#10 0x00007ff6b74f4578 in start_thread (arg=0x7ff6b5143700) at pthread_create.c:333
#11 0x00007ff6b62496dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Jorge do you have an idea who to route this to? You wrote that code back then.
 
Actually it seems like we have general file descriptor issues, here is another repro:

Thread 56 "AudioThread" received signal SIGPIPE, Broken pipe.
[Switching to Thread 0x7f4982a9d700 (LWP 5774)]
0x00007f49a33ad62d in write () at ../sysdeps/unix/syscall-template.S:84
84      ../sysdeps/unix/syscall-template.S: No such file or directory.
(gdb) bt
#0  0x00007f49a33ad62d in write () at ../sysdeps/unix/syscall-template.S:84
#1  0x00007f49a64d1f18 in base::WriteFileDescriptor(int, char const*, int) () at ../base/files/file_util_posix.cc:761
#2  0x00007f49a651a1f3 in base::CancelableSyncSocket::Send(void const*, unsigned long) () at ../base/sync_socket_posix.cc:41
#3  0x00007f49a56b8826 in content::AudioSyncReader::RequestMoreData(base::TimeDelta, base::TimeTicks, int) ()
    at ../content/browser/renderer_host/media/audio_sync_reader.cc:170
#4  0x00007f49a47fb772 in media::AudioOutputController::OnMoreData(base::TimeDelta, base::TimeTicks, int, media::AudioBus*) ()
    at ../media/audio/audio_output_controller.cc:315
#5  0x00007f49a4801dba in media::OnMoreDataConverter::ProvideInput(media::AudioBus*, unsigned int) () at ../media/audio/audio_output_resampler.cc:452
#6  0x00007f49a72094b8 in media::AudioConverter::SourceCallback(int, media::AudioBus*) () at ../media/base/audio_converter.cc:206
#7  0x00007f49a72097fd in media::AudioConverter::ConvertWithDelay(unsigned int, media::AudioBus*) () at ../media/base/audio_converter.cc:143
#8  0x00007f49a4801e5f in media::OnMoreDataConverter::OnMoreData(base::TimeDelta, base::TimeTicks, int, media::AudioBus*) ()
    at ../media/audio/audio_output_resampler.cc:438
#9  0x00007f49a4811886 in media::CrasUnifiedStream::WriteAudio(unsigned long, unsigned char*, timespec const*) () at ../media/audio/cras/cras_unified.cc:298
#10 0x00007f49a2bf577d in ?? () from /usr/lib64/libcras.so.0
#11 0x00007f4982a9ceb0 in ?? ()
#12 0x00002f833a181cf0 in ?? ()
#13 0x0000000000000000 in ?? ()


I can look at the SandboxIPCThread one, but yeah, it looks like this is a more general problem.
FWIW I got the sandbox IPC crash three times, and the AudioThread crash once.
Does it repro on Linux? Or CrOS only?
I haven't tried on linux, only on Chrome OS.
Can you share the bot you used to trigger this?
Status: WontFix (was: Untriaged)
Oh this went away a long time ago.

Sign in to add a comment