New issue
Advanced search Search tips

Issue 682088 link

Starred by 2 users

Issue metadata

Status: Archived
Owner: ----
Closed: Sep 13
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug



Sign in to add a comment

FATAL:find_request_manager.cc(212)] Check failed : pending_find_next_reply_ == rfh

Project Member Reported by ukai@chromium.org, Jan 18 2017

Issue description

Chrome Version: 57.0.2984.0 (Developer Build) (64-bit) with dcheck_always_on=1
OS: Linux

What steps will reproduce the problem?
(1) searching in page.
(2)
(3)

What is the expected result?
What happens instead?

browser crashed.
FATAL:find_request_manager.cc(212)] Check failed: pending_find_next_reply_ == rfh (0 vs. 0x3c906f610900)
Program received signal SIGABRT, Aborted.
0x00007fffee0b9c37 in __GI_raise (sig=sig@entry=6)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
56      ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0  0x00007fffee0b9c37 in __GI_raise (sig=sig@entry=6)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007fffee0bd028 in __GI_abort () at abort.c:89
#2  0x00007ffff7a4b782 in base::debug::BreakDebugger() ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libbase.so
#3  0x00007ffff7a72152 in logging::LogMessage::~LogMessage() ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libbase.so
#4  0x00007ffff5316104 in content::FindRequestManager::OnFindReply(content::RenderFrameHost*, int, int, gfx::Rect const&, int, bool) ()
   from /usr/local/google/home/ukai/src/chromium-git/src/out.0/Release/./libcontent.so
#5  0x0000000000000000 in ?? ()


Please use labels and text to provide additional information.


For graphics-related bugs, please copy/paste the contents of the about:gpu
page at the end of this report.

 
FWIW, stumbled on this while looking around in chrome://histograms:


[85824:85824:0227/100349.273273:FATAL:find_request_manager.cc(370)] Check failed: pending_find_next_reply_ == rfh ((nil) vs. 0x338ef63cf020)
#0 0x563c076427bd base::debug::StackTrace::StackTrace()
#1 0x563c07640e0c base::debug::StackTrace::StackTrace()
#2 0x563c076a693a logging::LogMessage::~LogMessage()
#3 0x563c03aef2ac content::FindRequestManager::OnFindReply()
#4 0x563c04460fe4 content::WebContentsImpl::OnFindReply()
#5 0x563c044902a6 _ZN3IPC20DispatchToMethodImplIN7content15WebContentsImplEMS2_FvPNS1_19RenderFrameHostImplEiiRKN3gfx4RectEibES3_NSt3__15tupleIJiiS6_ibEEEJLm0ELm1ELm2ELm3ELm4EEEEvPT_T0_PT1_OT2_NSB_16integer_sequenceImJXspT3_EEEE
#6 0x563c04490110 _ZN3IPC16DispatchToMethodIN7content15WebContentsImplENS1_19RenderFrameHostImplEJiiRKN3gfx4RectEibENSt3__15tupleIJiiS5_ibEEEEENS8_9enable_ifIXeqsZT1_sr3std10tuple_sizeINS8_5decayIT2_E4typeEEE5valueEvE4typeEPT_MSI_FvPT0_DpT1_ESL_OSD_
#7 0x563c0448b651 _ZN3IPC8MessageTI28FrameHostMsg_Find_Reply_MetaNSt3__15tupleIJiiN3gfx4RectEibEEEvE8DispatchIN7content15WebContentsImplESA_NS9_19RenderFrameHostImplEMSA_FvPSB_iiRKS5_ibEEEbPKNS_7MessageEPT_PT0_PT1_T2_
#8 0x563c0446032d content::WebContentsImpl::OnMessageReceived()
#9 0x563c03b8c44c content::RenderFrameHostImpl::OnMessageReceived()
#10 0x563c0413e4e3 content::RenderProcessHostImpl::OnMessageReceived()
#11 0x563c08501905 IPC::ChannelProxy::Context::OnDispatchMessage()
#12 0x563c02175e5f _ZN4base8internal13FunctorTraitsIMN5media20AudioInputControllerEFvRKNSt3__112basic_stringIcNS4_11char_traitsIcEENS4_9allocatorIcEEEEEvE6InvokeIRK13scoped_refptrIS3_EJSC_EEEvSE_OT_DpOT0_
#13 0x563c02175dbf _ZN4base8internal12InvokeHelperILb0EvE8MakeItSoIRKMN5media20AudioInputControllerEFvRKNSt3__112basic_stringIcNS6_11char_traitsIcEENS6_9allocatorIcEEEEEJRK13scoped_refptrIS5_ESE_EEEvOT_DpOT0_
#14 0x563c021c08fd _ZN4base8internal7InvokerINS0_9BindStateIMN5media21AudioOutputStreamSinkEFvRKNS3_15AudioParametersEEJ13scoped_refptrIS4_ES5_EEEFvvEE7RunImplIRKS9_RKNSt3__15tupleIJSB_S5_EEEJLm0ELm1EEEEvOT_OT0_NSI_16integer_sequenceImJXspT1_EEEE
#15 0x563c021c080c _ZN4base8internal7InvokerINS0_9BindStateIMN5media21AudioOutputStreamSinkEFvRKNS3_15AudioParametersEEJ13scoped_refptrIS4_ES5_EEEFvvEE3RunEPNS0_13BindStateBaseE
#16 0x563c019b3cf1 _ZNO4base12OnceCallbackIFvvEE3RunEv
#17 0x563c0764835a base::debug::TaskAnnotator::RunTask()

Don't have exact reproduction instructions, sadly.

Status: Archived (was: Untriaged)
Archiving old bugs that haven't been actively assigned in over 180 days.

If you feel this issue should still be addressed, feel free to reopen it or to file a new issue. Thanks!

Sign in to add a comment