New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 693289 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
Last visit > 30 days ago
Closed: Mar 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 2
Type: Bug

Blocking:
issue 625689



Sign in to add a comment

[FATAL:input_handler_proxy.cc(857)] Check failed: expect_scroll_update_end_

Project Member Reported by avayvod@chromium.org, Feb 17 2017

Issue description

Chrome Version       : trunk/master
OS Version:  Android LMY48I, Nexus 5
URLs (if applicable) : chrome://media-internals

What steps will reproduce the problem?
1. Not sure, I play a video in one tab to test and then switch to chrome://media-internals tab using the tab switcher.

What is the expected result?
Chrome doesn't crash.

What happens instead of that?
Chrome's renderer crashes (sad tab)

Happened to me yesterday and now today. The stack trace is attached.
 
stack.txt
19.8 KB View Download

Comment 1 by bokan@chromium.org, Feb 23 2017

Cc: sahel@chromium.org
Labels: Hotlist-Input-Dev
Status: Assigned (was: Untriaged)
Cc: dtapu...@chromium.org
Labels: -Pri-3 Pri-2
Owner: chongz@chromium.org
Status: Started (was: Assigned)
This should be caused by the incorrect order of gesture fling events. I'm working on the fix.
Project Member

Comment 3 by bugdroid1@chromium.org, Mar 14 2017

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/ad977926ecd213a1063fb7d429d6fd1d5ee7dce7

commit ad977926ecd213a1063fb7d429d6fd1d5ee7dce7
Author: chongz <chongz@chromium.org>
Date: Tue Mar 14 18:45:37 2017

[Compositor event queue] Queue GestureFlingStart/Cancel together with scroll/pinch

Currently only |GestureScroll*| and |GesturePinch*| will be put into the queue. We
should cover |GestureFlingStart/Cancel| as well since it's order-sensitive.

BUG= 693289 

Review-Url: https://codereview.chromium.org/2746513002
Cr-Commit-Position: refs/heads/master@{#456772}

[modify] https://crrev.com/ad977926ecd213a1063fb7d429d6fd1d5ee7dce7/ui/events/blink/blink_event_util.cc
[modify] https://crrev.com/ad977926ecd213a1063fb7d429d6fd1d5ee7dce7/ui/events/blink/blink_event_util.h
[modify] https://crrev.com/ad977926ecd213a1063fb7d429d6fd1d5ee7dce7/ui/events/blink/input_handler_proxy.cc
[modify] https://crrev.com/ad977926ecd213a1063fb7d429d6fd1d5ee7dce7/ui/events/blink/input_handler_proxy_unittest.cc

Comment 4 by chongz@chromium.org, Mar 14 2017

Blocking: 625689
Labels: M-59
Status: Fixed (was: Started)

Sign in to add a comment