New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 731732 link

Starred by 2 users

Issue metadata

Status: Duplicate
Owner:
Closed: Jun 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 2
Type: Bug-Regression



Sign in to add a comment

Crash after pasting text into webview then trying to type

Reported by edba...@blackberry.com, Jun 9 2017

Issue description

Steps to reproduce the problem:
1. Compose email in BlackBerry Hub
2. Paste text into email body area
3. Use keyboard to start typing
4. Webview crashes

What is the expected behavior?
4. Input from keyboard appears in body area inside the webview

What went wrong?
Webview crashed when trying to type, included logout from breakpad

Did this work before? Yes 59.0.3071

Does this work in other browsers? N/A

Chrome version: 60.0.3112.20  Channel: stable
OS Version: 6.0.1
Flash Version: 

Issue occurred after updating to the latest beta chromium build 60.0.3112
 
crash.txt
60.5 KB View Download
Components: Mobile>WebView
symbolized stack:

 0  libwebviewchromium.so!JavaObjectWeakGlobalRef::get(_JNIEnv*) const [jni_weak_ref.cc : 59 + 0x0]
 1  libwebviewchromium.so!content::SelectionPopupController::OnSelectionEvent(ui::SelectionEventType, gfx::RectF const&) [selection_popup_controller.cc : 56 + 0xc]
 2  libwebviewchromium.so!content::RenderWidgetHostViewAndroid::OnSelectionEvent(ui::SelectionEventType) [render_widget_host_view_android.cc : 1350 + 0x4]
 3  libwebviewchromium.so!ui::TouchSelectionController::OnInsertionChanged() [touch_selection_controller.cc : 433 + 0x8]
 4  libwebviewchromium.so!ui::TouchSelectionController::OnSelectionBoundsChanged(gfx::SelectionBound const&, gfx::SelectionBound const&) [touch_selection_controller.cc : 134 + 0x4]
 5  libwebviewchromium.so!content::RenderWidgetHostViewAndroid::OnFrameMetadataUpdated(cc::CompositorFrameMetadata const&, bool) [render_widget_host_view_android.cc : 1431 + 0x8]
 6  libwebviewchromium.so!content::RenderWidgetHostViewAndroid::SynchronousFrameMetadata(cc::CompositorFrameMetadata) [render_widget_host_view_android.cc : 1285 + 0xc]
 7  libwebviewchromium.so!content::SynchronousCompositorHost::UpdateFrameMetaData(cc::CompositorFrameMetadata) [synchronous_compositor_host.cc : 150 + 0x8]
 8  libwebviewchromium.so!content::SynchronousCompositorBrowserFilter::ProcessFrameMetadataOnUIThread(int, cc::CompositorFrameMetadata) [synchronous_compositor_browser_filter.cc : 111 + 0x8]
 9  libwebviewchromium.so!base::internal::Invoker<base::internal::BindState<void (content::SynchronousCompositorBrowserFilter::*)(int, cc::CompositorFrameMetadata), scoped_refptr<content::SynchronousCompositorBrowserFilter>, int, base::internal::PassedWrapper<cc::CompositorFrameMetadata> >, void ()>::Run(base::internal::BindStateBase*) [bind_internal.h : 214 + 0xc]
10  libwebviewchromium.so!base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) [callback.h : 91 + 0x8]
11  libwebviewchromium.so!base::MessageLoop::RunTask(base::PendingTask*) [message_loop.cc : 409 + 0x10]
12  libwebviewchromium.so!base::MessageLoop::DeferOrRunPendingTask(base::PendingTask) [message_loop.cc : 420 + 0x0]
13  libwebviewchromium.so!base::MessageLoop::DoWork() [message_loop.cc : 508 + 0x8]
14  libwebviewchromium.so!Java_org_chromium_base_SystemMessageHandler_nativeDoRunLoopOnce [message_pump_android.cc : 44 + 0x4]

Owner: jinsuk...@chromium.org
Hi jinsukkim@, do you know what might be causing this? (given that you looked into crbug.com/715826).
Mergedinto: 715918
Status: Duplicate (was: Unconfirmed)
Looks like a duplicated bug. I'll take a look.
I have put together a reduced test case and believe the issue is caused by calling evaluateJavascript() on the webview before the DOM is ready then trying to input text. I've attached the test case and confirmed it crashes on beta 60.0.3112.20 and works on 59.0.3071.
app-debug.apk
1.2 MB Download
Testwebview.zip
753 KB Download
Cc: edba...@blackberry.com
edbaker@blackberry.com Thanks for the apk for debugging. Do you need a physical keyboard to reproduce the bug or a soft keyboard on screen also causes crash? That would help narrow the scope.
I could reproduce it without a physical keyboard and started working on a fix. Will update 60 branch as well. Thanks for the report.
The crash is reproducible using the default Google software keyboard

Sign in to add a comment