New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 681730 link

Starred by 3 users

Issue metadata

Status: Duplicate
Merged: issue 679787
Owner: ----
Closed: Jan 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Bug



Sign in to add a comment

SEGV in compositor_vsync_manager.cc ui::CompositorVSyncManager::NotifyObservers(base::TimeTicks, base::TimeDelta)

Project Member Reported by djkurtz@chromium.org, Jan 17 2017

Issue description

Chrome Version: 57.0.2977.0 & 57.0.2978.0
OS: Chrome OS 
Platform: Looks like any with ARC++ enabled, with largest spikes in elm, veyron_speedy, lulu and veyron_minnie:

https://crash.corp.google.com/browse?q=product.Version%20LIKE%20%2757.0.297%25%27%20AND%20product.name%3D%27Chrome_ChromeOS%27%20OMIT%20RECORD%20IF%20SUM(CrashedStackTrace.StackFrame.FunctionName%3D%27ui%3A%3ACompositorVSyncManager%3A%3ANotifyObservers(base%3A%3ATimeTicks%2C%20base%3A%3ATimeDelta)%27)%20%3D%200&ignore_case=false&enable_rewrite=true&omit_field_name=CrashedStackTrace.StackFrame.FunctionName&omit_field_value=ui%3A%3ACompositorVSyncManager%3A%3ANotifyObservers(base%3A%3ATimeTicks%2C%20base%3A%3ATimeDelta)&omit_field_opt=%3D#samplereports:5,magicsignature,devicemodel,day,stablesignature2

What steps will reproduce the problem?
(1) Start Play Store
(2)
(3)

What is the expected result?

As reported in this feedback report [0]: 
Play store starts, Chrome doesn't crash.

[0] https://feedback.corp.google.com/product/208/neutron?lView=rd&lReport=51580870464

What happens instead?
Chrome crashes.

Please use labels and text to provide additional information.

The above feedback report corresponds to two crash reports, with the same backtrace:
https://crash.corp.google.com/browse?q=ReportID=161e71b080000000
https://crash.corp.google.com/browse?q=ReportID=707f71b080000000

Report ID             161e71b080000000
Product, version      Chrome_ChromeOS, 57.0.2978.0
Process type          browser
Magic Signature       ui::CompositorVSyncManager::NotifyObservers
Stable Signature      ui::CompositorVSyncManager::NotifyObservers-38155fff
Report Time           Fri, 13 Jan 2017 23:37:06 GMT
Uptime                267298 ms

Thread 0 CRASHED [SIGSEGV @ 0x00000000 ] MAGIC SIGNATURE THREAD

0xacfc11da (chrome -compositor_vsync_manager.cc:43 ) ui::CompositorVSyncManager::NotifyObservers(base::TimeTicks, base::TimeDelta)
0xabd66bf5 (chrome -bind_internal.h:234 ) base::internal::Invoker<base::internal::BindState<void (base::CancelableCallback<void (base::TimeTicks, base::TimeDelta)>::*)(base::TimeTicks, base::TimeDelta) const, base::WeakPtr<base::CancelableCallback<void (base::TimeTicks, base::TimeDelta)> > >, void (base::TimeTicks, base::TimeDelta)>::Run(base::internal::BindStateBase*, base::TimeTicks&&, base::TimeDelta&&)
0xab5765bb (chrome -callback.h:85 ) gpu::CommandBufferProxyImpl::OnUpdateVSyncParameters(base::TimeTicks, base::TimeDelta)
0xab57965b (chrome -tuple.h:91 ) gpu::CommandBufferProxyImpl::OnMessageReceived(IPC::Message const&)
0xaf21213e (chrome + 0x045f513e ) _fini
0xaf2121a2 (chrome + 0x045f51a2 ) _fini
0xaf21213e (chrome + 0x045f513e ) _fini
0xaf23ddde (chrome + 0x04620dde ) _fini
0xab5795f3 (chrome -command_buffer_proxy_impl.cc:119 ) gpu::CommandBufferProxyImpl::OnMessageReceived(IPC::Message const&)
0xe947fbbd (libgcc_s.so.1 -bpabi.c:41 ) __gnu_ldivmod_helper
0x000003e6
0xe947fbbd (libgcc_s.so.1 -bpabi.c:41 ) __gnu_ldivmod_helper
0xe9477b5f (libgcc_s.so.1 + 0x0000eb5f ) __aeabi_ldivmod
0xab221a4b (chrome -time.cc:82 ) base::TimeDelta::InMilliseconds() const
0xac1b7703 (chrome -server.cc:137 ) NowInMilliseconds
0xab22418d (chrome -tracked_objects.cc:459 ) tracked_objects::TaskStopwatch::Start()
0xab226ec3 (chrome -callback.h:68 ) base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*)
0xaf36bb02 (chrome + 0x0474eb02 ) _fini
0xaf36bb02 (chrome + 0x0474eb02 ) _fini
0xab57b11b (chrome -gpu_channel_host.cc:356 ) gpu::GpuChannelHost::MessageFilter::OnMessageReceived(IPC::Message const&)
0xab2187bd (chrome -message_loop.cc:421 ) base::MessageLoop::DoWork()
0xe947fbbd (libgcc_s.so.1 -bpabi.c:41 ) __gnu_ldivmod_helper
0x788ee9fe
0xaf23e10a (chrome + 0x0462110a ) _fini
0xab218ecd (chrome -message_pump_libevent.cc:96 ) base::MessagePumpLibevent::OnLibeventNotification(int, short, void*)
0xaf67a96e (chrome + 0x04a5d96e ) _fini
0xaf23e10a (chrome + 0x0462110a ) _fini
0xab57b11b (chrome -gpu_channel_host.cc:356 ) gpu::GpuChannelHost::MessageFilter::OnMessageReceived(IPC::Message const&)
0xe99c9c37 (libpthread-2.23.so + 0x0000cc37 ) read
 
This should be  issue 679787 , fixed in ToT.
Mergedinto: 679787
Status: Duplicate (was: Available)
Components: -Internals>Graphics Internals>GPU
Moving old issues out of Internal>Graphics to delete this obsolete component ( crbug.com/685425  for details)

Sign in to add a comment