New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 714232 link

Starred by 1 user
Status: WontFix
Owner:
█ amineer@chromium.org
Last visit > 30 days ago
Closed: Sep 8
Cc:
█ hyunse@google.com
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 1
Type: Bug



Sign in to add a comment

AndroidWebView: Crash Report - FreeTypeLibrary::FreeTypeLibrary

Project Member Reported by satyavat...@chromium.org, Apr 21 2017 
Number of reports: 151
Ranking: 2/ top 5
Note: new to M58 (first seen on 58.0.3029.21). Seems blink related issue.

Product name: AndroidWebView
Magic Signature: FreeTypeLibrary::FreeTypeLibrary

Current link:
https://crash.corp.google.com/browse?q=product.name%3D'AndroidWebView'%20AND%20product.version%3D'58.0.3029.83'%20AND%20custom_data.ChromeCrashProto.magic_signature_1.name%3D'FreeTypeLibrary%3A%3AFreeTypeLibrary'&ignore_case=false&enable_rewrite=true&omit_field_name=&omit_field_value=&omit_field_opt=#reports


Stack:
	
0x85713810	(libRiskStub.so + 0x00078810 )	
0x7abd1a17	(libwebviewchromium.so -SkFontHost_FreeType.cpp:123 )	FreeTypeLibrary::FreeTypeLibrary()
0x7abd1ab1	(libwebviewchromium.so -SkFontHost_FreeType.cpp:209 )	ref_ft_library
0x7abd2a3f	(libwebviewchromium.so -SkFontHost_FreeType.cpp:822 )	SkScalerContext_FreeType::SkScalerContext_FreeType(sk_sp<SkTypeface>, SkScalerContextEffects const&, SkDescriptor const*)
0x7abd2e2f	(libwebviewchromium.so -SkMakeUnique.h:18 )	SkTypeface_FreeType::onCreateScalerContext(SkScalerContextEffects const&, SkDescriptor const*) const
0x7aa87981	(libwebviewchromium.so -SkScalerContext.cpp:868 )	SkTypeface::createScalerContext(SkScalerContextEffects const&, SkDescriptor const*, bool) const
0x7aa2839d	(libwebviewchromium.so -SkGlyphCache.cpp:508 )	SkGlyphCache::VisitCache(SkTypeface*, SkScalerContextEffects const&, SkDescriptor const*, bool (*)(SkGlyphCache const*, void*), void*)
0x7aa61029	(libwebviewchromium.so -SkPaint.cpp:919 )	FontMetricsDescProc
0x7aa63653	(libwebviewchromium.so -SkPaint.cpp:1735 )	SkPaint::descriptorProc(SkSurfaceProps const*, unsigned int, SkMatrix const*, void (*)(SkTypeface*, SkScalerContextEffects const&, SkDescriptor const*, void*), void*) const
0x7aa6371d	(libwebviewchromium.so -SkPaint.cpp:938 )	SkPaint::getFontMetrics(SkPaint::FontMetrics*, float) const
0x7b818b1f	(libwebviewchromium.so -SimpleFontData.cpp:105 )	blink::SimpleFontData::platformInit(bool)
0x7b818e6b	(libwebviewchromium.so -SimpleFontData.cpp:71 )	blink::SimpleFontData::SimpleFontData(blink::FontPlatformData const&, WTF::PassRefPtr<blink::CustomFontData>, bool, bool)
0x7b8151a9	(libwebviewchromium.so -SimpleFontData.h:75 )	blink::FontDataCache::get(blink::FontPlatformData const*, blink::ShouldRetain, bool)
0x7b811aeb	(libwebviewchromium.so -FontCache.cpp:296 )	blink::FontCache::fontDataFromFontPlatformData(blink::FontPlatformData const*, blink::ShouldRetain, bool)
0x7b813437	(libwebviewchromium.so -FontCache.cpp:278 )	blink::FontCache::getFontData(blink::FontDescription const&, WTF::AtomicString const&, blink::AlternateFontName, blink::ShouldRetain)
0x7b816aa7	(libwebviewchromium.so -FontFallbackList.cpp:165 )	blink::FontFallbackList::getFontData(blink::FontDescription const&, int&) const
0x7b816caf	(libwebviewchromium.so -FontFallbackList.cpp:234 )	blink::FontFallbackList::fontDataAt(blink::FontDescription const&, unsigned int) const
0x7b816d1b	(libwebviewchromium.so -FontFallbackList.cpp:102 )	blink::FontFallbackList::determinePrimarySimpleFontData(blink::FontDescription const&) const
0x7b806653	(libwebviewchromium.so -FontFallbackList.h:77 )	blink::Font::primaryFont() const
0x7c4746e3	(libwebviewchromium.so -ComputedStyle.cpp:1927 )	blink::ComputedStyle::computedLineHeight() const
0x7c380391	(libwebviewchromium.so -LayoutBlock.cpp:1659 )	blink::LayoutBlock::lineHeight(bool, blink::LineDirectionMode, blink::LinePositionMode) const
0x7c381353	(libwebviewchromium.so -LayoutBlock.cpp:1742 )	blink::LayoutBlock::minLineHeightForReplacedObject(bool, blink::LayoutUnit) const
0x7c3eceb5	(libwebviewchromium.so -LineLayoutBlockFlow.h:95 )	blink::LineWidth::updateAvailableWidth(blink::LayoutUnit)
0x7c3ecf2b	(libwebviewchromium.so -LineWidth.cpp:47 )	blink::LineWidth::LineWidth(blink::LineLayoutBlockFlow, bool, blink::IndentTextOrNot)
0x7c3eca0d	(libwebviewchromium.so -LineBreaker.cpp:72 )	blink::LineBreaker::nextLineBreak(blink::BidiResolver<blink::InlineIterator, blink::BidiRun, blink::BidiIsolatedRun>&, blink::LineInfo&, blink::LayoutTextInfo&, WTF::Vector<blink::WordMeasurement, 64u, WTF::PartitionAllocator>&)
0x7c38cd93	(libwebviewchromium.so -LayoutBlockFlowLine.cpp:1118 )	blink::LayoutBlockFlow::layoutRunsAndFloatsInRange(blink::LineLayoutState&, blink::BidiResolver<blink::InlineIterator, blink::BidiRun, blink::BidiIsolatedRun>&, blink::InlineIterator const&, blink::BidiStatus const&)
0x7c38d77d	(libwebviewchromium.so -LayoutBlockFlowLine.cpp:1001 )	blink::LayoutBlockFlow::layoutRunsAndFloats(blink::LineLayoutState&)
0x7c38d991	(libwebviewchromium.so -LayoutBlockFlowLine.cpp:1964 )	blink::LayoutBlockFlow::layoutInlineChildren(bool, blink::LayoutUnit)
0x7c388615	(libwebviewchromium.so -LayoutBlockFlow.cpp:549 )	blink::LayoutBlockFlow::layoutChildren(bool, blink::SubtreeLayoutScope&)
0x7c3893df	(libwebviewchromium.so -LayoutBlockFlow.cpp:430 )	blink::LayoutBlockFlow::layoutBlock(bool)
0x7c38316f	(libwebviewchromium.so -LayoutBlock.cpp:417 )	blink::LayoutBlock::layout()
0x7c386cc3	(libwebviewchromium.so -LayoutBlockFlow.cpp:738 )	blink::LayoutBlockFlow::positionAndLayoutOnceIfNeeded(blink::LayoutBox&, blink::LayoutUnit, blink::BlockChildrenLayoutInfo&)
0x7c387ec7	(libwebviewchromium.so -LayoutBlockFlow.cpp:801 )	blink::LayoutBlockFlow::layoutBlockChild(blink::LayoutBox&, blink::BlockChildrenLayoutInfo&)
0x7c388241	(libwebviewchromium.so -LayoutBlockFlow.cpp:1489 )	blink::LayoutBlockFlow::layoutBlockChildren(bool, blink::SubtreeLayoutScope&, blink::LayoutUnit, blink::LayoutUnit)
0x7c388625	(libwebviewchromium.so -LayoutBlockFlow.cpp:551 )	blink::LayoutBlockFlow::layoutChildren(bool, blink::SubtreeLayoutScope&)
0x7c3893df	(libwebviewchromium.so -LayoutBlockFlow.cpp:430 )	blink::LayoutBlockFlow::layoutBlock(bool)
0x7c38316f	(libwebviewchromium.so -LayoutBlock.cpp:417 )	blink::LayoutBlock::layout()
0x7c386cc3	(libwebviewchromium.so -LayoutBlockFlow.cpp:738 )	blink::LayoutBlockFlow::positionAndLayoutOnceIfNeeded(blink::LayoutBox&, blink::LayoutUnit, blink::BlockChildrenLayoutInfo&)
0x7c387ec7	(libwebviewchromium.so -LayoutBlockFlow.cpp:801 )	blink::LayoutBlockFlow::layoutBlockChild(blink::LayoutBox&, blink::BlockChildrenLayoutInfo&)
0x7c388241	(libwebviewchromium.so -LayoutBlockFlow.cpp:1489 )	blink::LayoutBlockFlow::layoutBlockChildren(bool, blink::SubtreeLayoutScope&, blink::LayoutUnit, blink::LayoutUnit)
0x7c388625	(libwebviewchromium.so -LayoutBlockFlow.cpp:551 )	blink::LayoutBlockFlow::layoutChildren(bool, blink::SubtreeLayoutScope&)
0x7c3893df	(libwebviewchromium.so -LayoutBlockFlow.cpp:430 )	blink::LayoutBlockFlow::layoutBlock(bool)
0x7c38316f	(libwebviewchromium.so -LayoutBlock.cpp:417 )	blink::LayoutBlock::layout()
0x7c3d17d1	(libwebviewchromium.so -LayoutView.cpp:194 )	blink::LayoutView::layout()
0x7c28b311	(libwebviewchromium.so -FrameView.cpp:1120 )	blink::FrameView::performLayout(bool)
0x7c28adeb	(libwebviewchromium.so -FrameView.cpp:1288 )	blink::FrameView::layout()
0x7c1e7cf3	(libwebviewchromium.so -Document.cpp:2206 )	blink::Document::updateStyleAndLayout()
0x7c1e7e03	(libwebviewchromium.so -Document.cpp:2293 )	blink::Document::updateStyleAndLayoutIgnorePendingStylesheets(blink::Document::RunPostLayoutTasks)
0x7c2935e5	(libwebviewchromium.so -LocalDOMWindow.cpp:970 )	blink::LocalDOMWindow::getViewportSize(blink::IncludeScrollbarsInRect) const
0x7c293611	(libwebviewchromium.so -LocalDOMWindow.cpp:990 )	blink::LocalDOMWindow::innerHeight() const
0x7c108d49	(libwebviewchromium.so -V8Window.cpp:939 )	blink::V8Window::innerHeightAttributeGetterCallback(v8::FunctionCallbackInfo<v8::Value> const&)
0x7b2f31df	(libwebviewchromium.so -api-arguments.cc:25 )	v8::internal::FunctionCallbackArguments::Call(void (*)(v8::FunctionCallbackInfo<v8::Value> const&))
0x7b344e6f	(libwebviewchromium.so -builtins-api.cc:111 )	HandleApiCallHelper<false>
0x7b34547f	(libwebviewchromium.so -builtins-api.cc:217 )	v8::internal::Builtins::InvokeApiFunction(v8::internal::Isolate*, bool, v8::internal::Handle<v8::internal::HeapObject>, v8::internal::Handle<v8::internal::Object>, int, v8::internal::Handle<v8::internal::Object>*, v8::internal::Handle<v8::internal::HeapObject>)
0x7b5e6f27	(libwebviewchromium.so -objects.cc:1413 )	v8::internal::Object::GetPropertyWithAccessor(v8::internal::LookupIterator*)
0x7b5e69a5	(libwebviewchromium.so -objects.cc:1036 )	v8::internal::Object::GetProperty(v8::internal::LookupIterator*)
0x7b5830fd	(libwebviewchromium.so -ic.cc:685 )	v8::internal::LoadIC::Load(v8::internal::Handle<v8::internal::Object>, v8::internal::Handle<v8::internal::Name>)
0x7b583ceb	(libwebviewchromium.so -ic.cc:2561 )	v8::internal::Runtime_LoadIC_Miss(int, v8::internal::Object**, v8::internal::Isolate*)
0x9dc8633a

Comment 1 by wangxianzhu@chromium.org, Apr 21 2017

Status: WontFix (was: Available)
It seems that for most of the reports the crash is in libRiskStub.so. Googled libRiskStub.so and it seems an anti-cheating module of the game "Endless Frontier".

Searching for libRiskStub.so or endlessfrontier resulted just the same set or a subset of reports of this bug:

https://crash.corp.google.com/browse?q=OMIT%20RECORD%20IF%20SUM(ModuleWithoutSymbols.CodeFile%3D%27libRiskStub.so%27)%20%3D%200&ignore_case=false&enable_rewrite=true&omit_field_name=ModuleWithoutSymbols.CodeFile&omit_field_value=libRiskStub.so&omit_field_opt=%3D#samplereports:5,productversion,magicsignature

I think a bug in libRiskStub.so causes the crashes. The library might hooks up library loading and crashes when we loading the FreeType library.

There seems nothing to do at our side.

Comment 2 by wangxianzhu@chromium.org, Apr 21 2017

Labels: Needs-Evangelism
Owner: amineer@chromium.org
Status: Assigned (was: WontFix)
Stat of the crashes by package names:

1	com.ekkorr.endlessfrontier.global.100500.8590045411	75.00%	141	
2	com.ekkorr.endlessfrontier.100500.8590045411	14.36%	27	
3	com.gamevil.dragonblaze1.android.google.global.normal.100500.8590045411	6.38%	12	
4	com.ekkorr.endlessfrontier.global.line2.100500.8590045411	3.19%	6	
5	com.gamevil.psrforkakao.100500.8590045411	1.06%	2	
Total:	100.00%	188

All of them are in com.ekkorr.endlessfrontier or com.gamevil games.

Do we need outreach to the game developers?

Comment 3 by jinsuk...@chromium.org, Apr 23 2017

Labels: -Stability-Sheriff-Android

Comment 5 by amineer@chromium.org, Apr 25 2017

Cc: hyunse@google.com
+hyunse@ who is the BD partner for com.ekkorr.endlessfrontier.  hyunse@, would it be possible for you to put us in contact with someone from the ekkorr team that we could notify about these new app crashes, just in case they're not already aware?

Comment 6 by torne@chromium.org, Apr 27 2017 

Issue 714241 appears to be some of the same games and might be the same cause.

Comment 7 by alek...@chromium.org, Apr 27 2017 

we have tested on Pixel / NMF27E vs 60.0.3082.0 and don't see any crashes on: 
com.gamevil.dragonblaze1 AND com.ekkorr.endlessfrontier

Comment 8 by tobiasjs@chromium.org, Jul 12 2017

Labels: -Restrict-View-Google

Comment 9 by amineer@chromium.org, Sep 8

Status: WontFix (was: Assigned)
►

Sign in to add a comment