New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 741627 link

Starred by 2 users
Status: Closed
Owner:
edchin@chromium.org
Closed: Aug 8
Cc:
█ jif@chromium.org
ios-bugs@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: iOS
Pri: 2
Type: Bug-Regression
Team-Accessibility



Sign in to add a comment

While voice over on, selecting a tab in tab grid will crash the application in ipad only.

Project Member Reported by rakurati@chromium.org, Jul 12 2017 
App Version: 60.0.3112.66
iOS Version: 10.3.2, 11.0.0, 9.3.5
Device: iPad

Steps to reproduce:
1. Launch chrome
2. Turn on the device voice over
3. Tap on tab switcher
4. Select a tab

Observed results:
The application crashes

Expected results:
The application shouldn’t crash

Number of times you were able to reproduce: 5/5
Bug reproducible after clean install: Yes
Bug reproducible after clearing cache and cookies: Yes
Bug reproducible on Chrome Mobile on Android: No
Bug reproducible on Safari/Firefox: Firefox: NA, Safari: NA
Bug reproducible on current stable build (App Version, iOS Version): No on M59
Bug reproducible on the current beta channel build (App Version, iOS Version): Yes on M60

Link to crash URL: https://crash.corp.google.com/browse?stbtiq=b681713fb8000000

Stack Trace: Thread 0 (id: 1027) CRASHED [EXC_SOFTWARE / UNCAUGHT_NS_EXCEPTION @ 0x000000018e592fe0 ] MAGIC SIGNATURE THREAD
Stack Quality81%Show frame trust levels
0x000000018e592fe0	(CoreFoundation + 0x0012cfe0 )	__exceptionPreprocess
0x000000018cff4534	(libobjc.A.dylib + 0x00008534 )	objc_exception_throw
0x000000018e474894	(CoreFoundation + 0x0000e894 )	-[__NSArrayM insertObject:atIndex:]
0x00000001003ba06c	(Chrome -tab_switcher_panel_cell.mm:316 )	-[TabSwitcherLocalSessionCell accessibilityCustomActions]
0x000000019b0255d0	(UIAccessibility + 0x000145d0 )	-[NSObject(AXPrivCategory) _retrieveCustomActions]
0x000000019b025818	(UIAccessibility + 0x00014818 )	-[NSObject(AXPrivCategory) _accessibilityCustomActions]
0x000000019b027458	(UIAccessibility + 0x00016458 )	-[NSObject(AXPrivCategory) _accessibilityCustomActionNamesAndIdentifiers]
0x000000019b02afa8	(UIAccessibility + 0x00019fa8 )	-[NSObject(AXPrivCategory) accessibilityAttributeValue:]
0x000000019b014440	(UIAccessibility + 0x00003440 )	_copyMultipleAttributeValuesCallback
0x000000019a3f6350	(AXRuntime + 0x00009350 )	_AXXMIGCopyMultipleAttributeValues
0x000000019a3f1a3c	(AXRuntime + 0x00004a3c )	_XCopyMultipleAttributeValues
0x000000019a400440	(AXRuntime + 0x00013440 )	mshMIGPerform
0x000000018e541ae0	(CoreFoundation + 0x000dbae0 )	__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE1_PERFORM_FUNCTION__
0x000000018e541280	(CoreFoundation + 0x000db280 )	__CFRunLoopDoSource1
0x000000018e53ed94	(CoreFoundation + 0x000d8d94 )	__CFRunLoopRun
0x000000018e46eda0	(CoreFoundation + 0x00008da0 )	CFRunLoopRunSpecific
0x000000018fed8070	(GraphicsServices + 0x0000c070 )	GSEventRunModal
0x0000000194722054	(UIKit + 0x00075054 )	UIApplicationMain
0x00000001000232ac	(Chrome -chrome_exe_main.mm:63 )	main
0x000000018d47d598	(libdyld.dylib + 0x00004598 )	start

Link to video/image:
M60 behavior:
https://drive.google.com/a/google.com/file/d/0B8Cek8RsDbF8SVY3RFB1cmFQcFU/view?usp=sharing
M59 behavior:
https://drive.google.com/a/google.com/file/d/0B8Cek8RsDbF8QlRWMGhEMkxURVE/view?usp=sharing

Comment 1 by rakurati@chromium.org, Jul 13 2017

Labels: -Type-Bug Type-Bug-Regression

Comment 2 by kkhorimoto@chromium.org, Jul 13 2017

Owner: jif@chromium.org
Status: Assigned (was: Untriaged)
Project Member

Comment 3 by sheriffbot@chromium.org, Jul 14 2017

Labels: Fracas FoundIn-M-60
Users experienced this crash on the following builds:

Ios Beta 60.0.3112.66 -  117.99 CPM, 1 reports, 1 clients (signature -[TabSwitcherLocalSessionCell accessibilityCustomActions])

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas

Comment 4 by eugene...@chromium.org, Jun 18 2018

Owner: ----
Status: Untriaged (was: Assigned)
jif@ is no longer on the team. Releasing his bugs.

Comment 5 by kkhorimoto@chromium.org, Jun 21 2018

Owner: edchin@chromium.org
Status: Assigned (was: Untriaged)
Ed could you take a look at this tab switcher bug?

Comment 6 by edchin@chromium.org, Jun 29 2018

Labels: -Pri-1 Pri-2

Comment 7 by edchin@chromium.org, Jun 29 2018 

Focusing on tab grid over tab switcher.

Comment 8 by pinkerton@chromium.org, Jul 10

Labels: -Pri-2 ReleaseBlock-Stable M-69 Pri-1
Summary: While voice over on, selecting a tab in tab grid will crash the application in ipad only. (was: While voice over on, selecting a tab in tab switcher will crash the application in ipad only.)
There is no "tab switcher" on iPad, this means "tab grid", so this still needs to be fixed.

Comment 9 by edchin@chromium.org, Jul 10 

This crash does not happen on tab grid on iPad. It only happens on the previous "tab switcher" on iPad.

Comment 10 by pinkerton@chromium.org, Jul 11 

I realize now that the *old* tab grid was called "tab switcher" for some reason. Sorry for the confusion.

We do still need to fix this for those users in M69 who are in the holdback and get the old UI, though now I now understand the lower priority.

Comment 11 by edchin@chromium.org, Jul 17

Labels: -Pri-1 Pri-2

Comment 12 by kariahda@chromium.org, Aug 2 

Hi Ed, any update here?

Comment 13 by edchin@chromium.org, Aug 8

Status: Closed (was: Assigned)
This is an old crash since M60. The last reported crash was M63.
https://crash.corp.google.com/browse?stbtiq=product%3AChrome_iOS%20TabSwitcherLocalSessionCell%20accessibilityCustomActions

Comment 14 by edchin@chromium.org, Aug 8

Labels: -ReleaseBlock-Stable -M-69
►

Sign in to add a comment