1. Load plus.google.com/+BarackObama in Debug mode. Crashes with:
[1:1:0411/161221.604539:FATAL:FindPaintOffsetAndVisualRectNeedingUpdate.h(166)] Check failed: object_.IsText() || object_.IsSVGChild() || new_location == old_location_ || object_.EnclosingLayer()->SubtreeIsInvisible() || LayoutRect(-1, -1, 2, 2) .Contains(LayoutRect(LayoutPoint(new_location - old_location_), LayoutSize())). Location changed without needing update object="LayoutBlockFlow (positioned) DIV class='kPEoYc'" old="581.016,12.6406" new="580.344,11.2031"
2. Run tools/perf/run_benchmark run rasterize_and_record_micro.top_25 --browser=debug --story-filter=plus
It will crash with this failure:
[1:1:0411/160725.677444:FATAL:PrePaintTreeWalk.cpp(41)] Check failed: parent_context.tree_builder_context->is_actually_needed.
Perhaps this should be a P1 M59 blocker?
Comment 1 by wangxianzhu@chromium.org
, Apr 12 2017