New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 737513 link

Starred by 1 user

Issue metadata

Status: Untriaged
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Chrome: Crash Report - gfx::win::DirectManipulationHelper::SetBounds

Reported by a.sheno...@gmail.com, Jun 28 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36

Steps to reproduce the problem:
1. Open chrome browser with multiple tabs open, and keep it as the active window on machine A
2. from Machine B that has a different screen size, remote desktop to machine A
3. 

What is the expected behavior?
Chrome browser like other open applications should resize to the new screen size on machine B

What went wrong?
Chrome browser crash

Crashed report ID: Crash ID 150be98e-0530-4413-882c-ab5dc071396f (Server ID: a43ee6bc68000000)

How much crashed? Just one tab

Is it a problem with a plugin? N/A 

Did this work before? N/A 

Chrome version: 59.0.3071.115  Channel: stable
OS Version: 10.0
Flash Version: Shockwave Flash 26.0 r0

It resizes correctly if it is not the active window. It reproduces all the time for me, on windows 10, windows 8.1
 
The whole browser crashed, not just one tab

Comment 2 Deleted

Labels: Needs-Triage-M59
Cc: kkaluri@chromium.org nyerramilli@chromium.org ajha@chromium.org
Components: Enterprise
Stack trace for the Crash ID provided:

Thread 0 (id: 34300) CRASHED [EXCEPTION_ACCESS_VIOLATION_READ @ 0x00000000 ] MAGIC SIGNATURE THREAD
Stack Quality95%Show frame trust levels
0x00007ffbb5005c06	(chrome.dll -direct_manipulation.cc:77 )	gfx::win::DirectManipulationHelper::SetBounds(gfx::Rect const &)
0x00007ffbb607a40d	(chrome.dll -hwnd_message_handler.cc:2889 )	views::HWNDMessageHandler::SetBoundsInternal(gfx::Rect const &,bool)
0x00007ffbb6060389	(chrome.dll -desktop_window_tree_host_win.cc:547 )	views::DesktopWindowTreeHostWin::SetBoundsInPixels(gfx::Rect const &)
0x00007ffbb601bf50	(chrome.dll -desktop_native_widget_aura.cc:699 )	views::DesktopNativeWidgetAura::SetBounds(gfx::Rect const &)
0x00007ffbb5cdaed9	(chrome.dll -status_bubble_views.cc:695 )	StatusBubbleViews::RepositionPopup()
0x00007ffbb5cdaf4a	(chrome.dll -status_bubble_views.cc:709 )	StatusBubbleViews::SetBounds(int,int,int,int)
0x00007ffbb5cdadfc	(chrome.dll -status_bubble_views.cc:684 )	StatusBubbleViews::Reposition()
0x00007ffbb5cedbc8	(chrome.dll -contents_web_view.cc:41 )	ContentsWebView::OnVisibleBoundsChanged()
0x00007ffbb6021d29	(chrome.dll -view.cc:2179 )	views::View::BoundsChanged(gfx::Rect const &)
0x00007ffbb601dee9	(chrome.dll -view.cc:346 )	views::View::SetBoundsRect(gfx::Rect const &)
0x00007ffbb5cd66f0	(chrome.dll -contents_layout_manager.cc:62 )	ContentsLayoutManager::Layout(views::View *)
0x00007ffbb601ea73	(chrome.dll -view.cc:619 )	views::View::Layout()
0x00007ffbb6021d0d	(chrome.dll -view.cc:2175 )	views::View::BoundsChanged(gfx::Rect const &)
0x00007ffbb601dee9	(chrome.dll -view.cc:346 )	views::View::SetBoundsRect(gfx::Rect const &)
0x00007ffbb5cd722a	(chrome.dll -browser_view_layout.cc:343 )	BrowserViewLayout::Layout(views::View *)
0x00007ffbb601ea73	(chrome.dll -view.cc:619 )	views::View::Layout()
0x00007ffbb5cc4d32	(chrome.dll -browser_view.cc:1975 )	BrowserView::Layout()
0x00007ffbb6021d0d	(chrome.dll -view.cc:2175 )	views::View::BoundsChanged(gfx::Rect const &)
0x00007ffbb601dee9	(chrome.dll -view.cc:346 )	views::View::SetBoundsRect(gfx::Rect const &)
0x00007ffbb60236c1	(chrome.dll -non_client_view.cc:176 )	views::NonClientView::Layout()
0x00007ffbb6021d0d	(chrome.dll -view.cc:2175 )	views::View::BoundsChanged(gfx::Rect const &)
0x00007ffbb601dee9	(chrome.dll -view.cc:346 )	views::View::SetBoundsRect(gfx::Rect const &)
0x00007ffbb6037682	(chrome.dll -fill_layout.cc:20 )	views::FillLayout::Layout(views::View *)
0x00007ffbb601ea73	(chrome.dll -view.cc:619 )	views::View::Layout()
0x00007ffbb6021d0d	(chrome.dll -view.cc:2175 )	views::View::BoundsChanged(gfx::Rect const &)
0x00007ffbb601dee9	(chrome.dll -view.cc:346 )	views::View::SetBoundsRect(gfx::Rect const &)
0x00007ffbb601ddfc	(chrome.dll -view.cc:325 )	views::View::SetBounds(int,int,int,int)
0x00007ffbb60190bb	(chrome.dll -widget.cc:1121 )	views::Widget::OnNativeWidgetSizeChanged(gfx::Size const &)
0x00007ffbb601ccca	(chrome.dll -desktop_native_widget_aura.cc:1173 )	views::DesktopNativeWidgetAura::OnHostResized(aura::WindowTreeHost const *)
0x00007ffbb55696ca	(chrome.dll -window_tree_host.cc:303 )	aura::WindowTreeHost::OnHostResizedInPixels(gfx::Size const &)
0x00007ffbb6060d92	(chrome.dll -desktop_window_tree_host_win.cc:817 )	views::DesktopWindowTreeHostWin::HandleClientSizeChanged(gfx::Size const &)
0x00007ffbb6076933	(chrome.dll -hwnd_message_handler.cc:1145 )	views::HWNDMessageHandler::ClientAreaSizeChanged()
0x00007ffbb60798b9	(chrome.dll -hwnd_message_handler.cc:2516 )	views::HWNDMessageHandler::OnWindowPosChanged(tagWINDOWPOS *)
0x00007ffbb6074a18	(chrome.dll -hwnd_message_handler.h:440 )	views::HWNDMessageHandler::_ProcessWindowMessage(HWND__ *,unsigned int,unsigned __int64,__int64,__int64 &,unsigned long)
0x00007ffbb6075f1f	(chrome.dll -hwnd_message_handler.cc:914 )	views::HWNDMessageHandler::OnWndProc(unsigned int,unsigned __int64,__int64)
0x00007ffbb501eccc	(chrome.dll -window_impl.cc:303 )	gfx::WindowImpl::WndProc(HWND__ *,unsigned int,unsigned __int64,__int64)
0x00007ffbb501ecf2	(chrome.dll -wrapped_window_proc.h:76 )	base::win::WrappedWindowProc<&gfx::WindowImpl::WndProc(HWND__ *,unsigned int,unsigned __int64,__int64)>(HWND__ *,unsigned int,unsigned __int64,__int64)
0x00007ffbf5321c23	(USER32.dll + 0x00011c23 )	UserCallWinProcCheckWow
0x00007ffbf5321916	(USER32.dll + 0x00011916 )	DispatchClientMessage
0x00007ffbf5335e7f	(USER32.dll + 0x00025e7f )	_fnINLPWINDOWPOS
0x00007ffbf7e29c53	(ntdll.dll + 0x000a9c53 )	KiUserCallbackDispatch
0x00007ffbf52f1523	(win32u.dll + 0x00001523 )	NtUserSetWindowPos
0x000003570000064f		
Owner: georgesak@chromium.org
Hi George, I think you can triage this better than I can :)
Cc: georgesak@chromium.org ligim...@chromium.org
Components: -Enterprise Internals
Labels: ReleaseBlock-Stable M-61
Owner: ananta@chromium.org
Status: Assigned (was: Unconfirmed)
Summary: Chrome: Crash Report - gfx::win::DirectManipulationHelper::SetBounds (was: Chrome browser crash when screen size changed due to remote desktop)
This is a longstanding crash and is not specific to Enterprise.Below is the historical data in stable channels.

56.0.2924.87	30.99%	644	
57.0.2987.133	22.67%	471
58.0.3029.110	33.16%	689
59.0.3071.115	0.96%	20

Link to the builds which introduced the crash
=============================================			

https://crash.corp.google.com/browse?q=custom_data.ChromeCrashProto.ptype%3D%27browser%27%20AND%20custom_data.ChromeCrashProto.magic_signature_1.name%3D%27gfx%3A%3Awin%3A%3ADirectManipulationHelper%3A%3ASetBounds%27&ignore_case=false&enable_rewrite=true&omit_field_name=&omit_field_value=&omit_field_opt=%3D#-property-selector,samplereports:5,productversion:1000,isenterprise

Possible suspect
================
https://chromium.googlesource.com/chromium/src.git/+/ed6530c9ab6cd4a56ffd70612be526dbc7db1552

Ananta, could you please have a fix during before M61 hits stable.

Comment 7 by ajha@chromium.org, Jul 7 2017

Just to update, there have been no crashes seen on the latest Beta(60.0.3112.50) or on the canary/dev channel(M-61) of Windows. Majority of the crashes with these magic signatures have been showing only on the stable releases.

Comment 8 by gov...@chromium.org, Jul 11 2017

A friendly reminder that M61 branch is coming soon on 07/20! Your bug is labelled as Stable ReleaseBlock, pls make sure to land the fix ASAP to trunk. This way we branch M61 from a high quality trunk. Thank you.
URGENT - PTAL.
Your bug is labelled as Stable ReleaseBlock, pls make sure to land the fix and get it merged into the M61 branch #3163 ASAP to have enough baking time in Beta before Stable promotion. Thank you!

Know that this issue shouldn't block the release?  Remove the ReleaseBlock-Stable label.

Just to update the latest behavior of the Crash.

This crash is seen on latest Beta channel. Below are the instances.

60.0.3112.78	0.30%	7	-      Beta

Link to the list of builds:
===================
https://crash.corp.google.com/browse?q=custom_data.ChromeCrashProto.ptype%3D%27browser%27%20AND%20custom_data.ChromeCrashProto.magic_signature_1.name%3D%27gfx%3A%3Awin%3A%3ADirectManipulationHelper%3A%3ASetBounds%27&ignore_case=false&enable_rewrite=true&omit_field_name=&omit_field_value=&omit_field_opt=%3D#-property-selector,samplereports:5,productversion:1000,isenterprise

@ananta: Is there any latest update's available on this issue? since it's tagged with Release Block Stable.

Thanks!!
Cc: ranjitkan@chromium.org
Labels: -ReleaseBlock-Stable
Just to update, No instances for this crash is reported after build# 60.0.3112.90 and any M61 builds.  Below link gives in detail about the same.

https://crash.corp.google.com/browse?q=custom_data.ChromeCrashProto.ptype%3D%27browser%27%20AND%20custom_data.ChromeCrashProto.magic_signature_1.name%3D%27gfx%3A%3Awin%3A%3ADirectManipulationHelper%3A%3ASetBounds%27%20AND%20product.name%3D%27Chrome%27&ignore_case=false&enable_rewrite=true&omit_field_name=&omit_field_value=&omit_field_opt=%3D#samplereports:5,productversion:1000

Removing blocker label for M61. Please add again if not the case.

Thanks.!


Owner: ----
Status: Untriaged (was: Assigned)
Unassigning all bugs for ananta@chromium.org

Sign in to add a comment