Email crashed in Android 7.1.1 pre-built WebView
Reported by
julian....@mediatek.com,
Jan 24 2017
|
|||
Issue description
Email crashed in Android 7.1.1 pre-built WebView, it occurred several times, crash trace are the same.
We don't have the symbols of pre-built WebView, please help to symbolize crash stacks.
Thank you.
Device name: Mediatek MT6737T platform
Android version: Android 7.1.1 (NMF26O)
WebView version: 52.0.2743.100 (code 275610050)
Application: Email (com.android.email)
Application version: v7008110 (7.1.1)
URLs (if applicable): html file attached
Steps to reproduce:
(1) Monkey test:
# adb run command "adb shell monkey -p com.android.email -p com.andriod.contact --ignore-crashes --ignore-security-exceptions --ignore-timeouts --kill-process-after-error --throttle 1200 -s 6516 28880"
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
Build fingerprint: 'alps/full_k37tv1_64_op02/k37tv1_64:7.1.1/NMF26O/1484545087:eng/dev-keys'
Revision: '0'
ABI: 'arm64'
pid: 3059, tid: 3059, name: m.android.email >>> com.android.email <<<
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0
x0 0000000000000000 x1 0000007612a49010 x2 00000075fe54e000 x3 0000007fe542f400
x4 0000007fe542f408 x5 0000007612a49010 x6 000000002af8cab0 x7 00000000754d3628
x8 0000000000000000 x9 0000000000000000 x10 0000000000430000 x11 0000007fe542f3b8
x12 0000000000000002 x13 0000007fe542f43c x14 0000000000000000 x15 000000760f9ebfd8
x16 00000075fb39ae34 x17 0000000000561575 x18 8bb5ea6c3485259a x19 0000007fe542f338
x20 0000007fe542f350 x21 0000007612a49010 x22 00000075fe54e000 x23 0000007fe542f368
x24 0000000000000000 x25 0000007fe542f400 x26 000000006fa84e00 x27 0000000000000043
x28 0000007fe542f440 x29 0000007fe542f2c0 x30 00000075fb39ada0
sp 0000007fe542f2c0 pc 00000075fb36c444 pstate 0000000080000000
backtrace:
#00 pc 0000000000682444 /system/app/webview/webview.apk (offset 0x93f000)
#01 pc 00000000006b0d9c /system/app/webview/webview.apk (offset 0x93f000)
,
Jan 24 2017
Also, you shouldn't be using such an old webview in the first place, it's possible this is a known bug already fixed, and it's definitely not a secure version any more. You should be building the latest stable version from chromium (currently 55). The prebuilt is provided purely to have AOSP working out of the box and is not intended to be used in real builds.
,
Jan 25 2017
We don't have the breakpad microdump, it failed every time since Android 7.0 on our platform: 01-16 18:19:23.506001 3059 3059 W google-breakpad: Microdump crash handler failed. We know M52 is an old version, but it is the latest version Chromium released to AOSP: https://android.googlesource.com/platform/external/chromium-webview/+/master Is it possible to release a newer version of WebView to AOSP, or via Google Security Patch?
,
Jan 25 2017
If breakpad doesn't work this is a critical thing to fix; you need to work out why and deal with it. We absolutely depend on breakpad to be able to debug webview crashes. Please provide a full log so we can try to investigate what's up here, even if there's no microdump; we need to see what else happened to guess why the crash handler didn't work. If you're building AOSP you are expected to build your own WebView from the chromium sources, not wait for a new prebuilt to be provided. See the README accompanying the prebuilts and https://www.chromium.org/developers/how-tos/build-instructions-android-webview
,
Jan 25 2017
Actually, in this particular case you are lucky and the two frames in the debuggerd dump is enough to identify the crash: this is issue 645515, a bug in CleanupReference that causes objects to be touched after they've been destroyed. This was fixed in M54 and up. You need to use a newer version. (do not use M54, there is a bug with certificate transparency that prevents loading some popular sites; use M55, the current stable). You need to investigate why breakpad doesn't work on your platform; this is critical. You can file a new bug about this problem with *full* logs attached and we can try to help.
,
Jan 25 2017
Hi Torne, Thanks for the help. We do build our own WebView from Chromium source, but since Google Security Patch may update the AOSP WebView to newer version (CVE-2016-6754 https://source.android.com/security/bulletin/2016-11-01.html ), we think it's too risky to release our own build WebView Chromium as a Security Patch. That's the reason we use AOSP prebuilt WebView in Android 7.1.1 For the breakpad issue, we will investigate it. Thanks again.
,
Jan 25 2017
I don't understand why that means you shouldn't release your own build of WebView. That security bulletin's WebView was just a prebuilt of the current stable version of WebView - if you had built the current stable version already yourself it would have been exactly the same and contained exactly the same security fixes. You should not wait for Google to provide you with new prebuilts, or wait for security bulletins to appear - EVERY webview update is a security update. You should keep up with the current stable version by building it yourself.
,
Jan 25 2017
I understand, we will discuss the WebView update policy internally. Thank you.
,
Feb 3 2017
Hi Torne, We found breakpad doesn't work on my Nexus 6 running Android 7.1.1 I file a new bug for the breakpad issue: https://bugs.chromium.org/p/chromium/issues/detail?id=688252 |
|||
►
Sign in to add a comment |
|||
Comment 1 by torne@chromium.org
, Jan 24 2017