New issue
Advanced search Search tips

Issue 742329 link

Starred by 1 user

Issue metadata

Status: Archived
Owner:
Closed: Jul 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Bug



Sign in to add a comment

Crash in PaymentRequestWebContentsManager::DestroyRequest

Project Member Reported by rouslan@chromium.org, Jul 13 2017

Issue description

Chrome Version       : 59.0.3071.91

go/crash/2533028268000000

Thread 0 (id: 25156) CRASHED [SIGABRT @ 0x000003e800006224 ] MAGIC SIGNATURE THREAD
Stack Quality97%Show frame trust levels
0x000057e0eea3c717	(chrome + 0x04f4d717 )	payments::PaymentRequestWebContentsManager::DestroyRequest(payments::PaymentRequest*)
0x000057e0eb542183	(chrome + 0x01a53183 )	content::WebContentsImpl::RenderFrameDeleted(content::RenderFrameHost*)
0x000057e0eb30848b	(chrome + 0x0181948b )	content::RenderFrameHostImpl::~RenderFrameHostImpl()
0x000057e0eb308b38	(chrome + 0x01819b38 )	content::RenderFrameHostImpl::~RenderFrameHostImpl()
0x000057e0eb31e021	(chrome + 0x0182f021 )	content::RenderFrameHostManager::~RenderFrameHostManager()
0x000057e0eb2edd24	(chrome + 0x017fed24 )	content::FrameTreeNode::~FrameTreeNode()
0x000057e0eb2ed89f	(chrome + 0x017fe89f )	content::FrameTreeNode::~FrameTreeNode()
0x000057e0eb2ee1cf	(chrome + 0x017ff1cf )	content::FrameTreeNode::ResetForNewProcess()
0x000057e0eb52f218	(chrome + 0x01a40218 )	content::WebContentsImpl::~WebContentsImpl()
0x000057e0eb530198	(chrome + 0x01a41198 )	content::WebContentsImpl::~WebContentsImpl()
0x000057e0ec592a98	(chrome + 0x02aa3a98 )	BrowserCloseManager::CloseBrowsers()
0x000057e0ec47b863	(chrome + 0x0298c863 )	chrome::CloseAllBrowsers()
0x000057e0ec47c3c0	(chrome + 0x0298d3c0 )	chrome::ExitCleanly()
0x000057e0ec585105	(chrome + 0x02a96105 )	(anonymous namespace)::ExitHandler::ExitWhenPossibleOnUIThread()
0x000057e0eaae9ffc	(chrome + 0x00ffaffc )	base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*)
0x000057e0eaad34c5	(chrome + 0x00fe44c5 )	base::MessageLoop::RunTask(base::PendingTask*)
0x000057e0eaad47fe	(chrome + 0x00fe57fe )	base::MessageLoop::DoWork()
0x000057e0ec7bb91a	(chrome + 0x02ccc91a )	base::MessagePumpLibevent::Run(base::MessagePump::Delegate*)
0x000057e0ec7d6e9d	(chrome + 0x02ce7e9d )	base::RunLoop::Run()
0x000057e0ec452055	(chrome + 0x02963055 )	ChromeBrowserMainParts::MainMessageLoopRun(int*)
0x000057e0eb22d050	(chrome + 0x0173e050 )	content::BrowserMainLoop::RunMainMessageLoopParts()
0x000057e0eb22f93c	(chrome + 0x0174093c )	content::BrowserMainRunnerImpl::Run()
0x000057e0eb228705	(chrome + 0x01739705 )	content::BrowserMain(content::MainFunctionParams const&)
0x000057e0ec40f587	(chrome + 0x02920587 )	content::ContentMainRunnerImpl::Run()
0x000057e0ed917fda	(chrome + 0x03e28fda )	service_manager::Main(service_manager::MainParams const&)
0x000057e0ec40e531	(chrome + 0x0291f531 )	content::ContentMain(content::ContentMainParams const&)
0x000057e0ead4b443	(chrome + 0x0125c443 )	ChromeMain
0x00007a0033684815	(libc-2.23.so -libc-start.c:289 )	__libc_start_main
0x000057e0ead4b278	(chrome + 0x0125c278 )	_start
0x00007ffc874cc867		
 
Owner: anthonyvd@chromium.org
Anthony: Can you investigate why this is happening? There're 19 crashes in Chrome 59.
Status: Started (was: Untriaged)
Project Member

Comment 3 by bugdroid1@chromium.org, Jul 17 2017

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/dc1dbf1aa56e4dd4cbfaab61c4d30a35adce5f40

commit dc1dbf1aa56e4dd4cbfaab61c4d30a35adce5f40
Author: Anthony Vallee-Dubois <anthonyvd@chromium.org>
Date: Mon Jul 17 15:01:13 2017

[Web Payments] User weak ptr in Payment Request's error callback

Bug:  742329 
Change-Id: I73b2043c63f814d0394ed745eb6b1e55814db339
Reviewed-on: https://chromium-review.googlesource.com/570982
Commit-Queue: Anthony Vallee-Dubois <anthonyvd@chromium.org>
Reviewed-by: Mathieu Perreault <mathp@chromium.org>
Cr-Commit-Position: refs/heads/master@{#487077}
[modify] https://crrev.com/dc1dbf1aa56e4dd4cbfaab61c4d30a35adce5f40/components/payments/content/payment_request.cc
[modify] https://crrev.com/dc1dbf1aa56e4dd4cbfaab61c4d30a35adce5f40/components/payments/content/payment_request.h

Status: Fixed (was: Started)
I can't see this crash in go/crash after 59 so tentatively closing this bug.

Comment 5 by dchan@chromium.org, Jan 22 2018

Status: Archived (was: Fixed)

Sign in to add a comment