New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 765546 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 764206
Owner:
Closed: Sep 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows
Pri: 1
Type: Bug-Regression



Sign in to add a comment

Regression: browser crashes while running audit on any site.

Project Member Reported by keerthan...@techmahindra.com, Sep 15 2017

Issue description

Chrome Version:63.0.3216.0
OS: Ubuntu 14.04

What steps will reproduce the problem?
(1)Launch chrome and navigate to any site[Eg:https://www.online.citibank.co.in/]
(2)Open devtools and perform audit, while running audit hit cancel when about:blank page comes and click on back navigation button near omnibox

Expected:Browser shouldn't crash 
Actual: Instead browser crashes

Crash id: b1dbb0a11c9174ed 
          d96643e138820a6d

This is a Regression issue broken in M-63 will update other info soon..
 
AuditCrash.ogv
3.0 MB View Download
Unable to reproduce this issue on Ubuntu 14.04 and Windows-10 using chrome latest dev #63.0.3216.0. The about:blank page comes for few seconds and it disappears, not staying so long to press cancel as shown in the above screen cast.

keerthana.v@ If you are able to reproduce consistently please provide bisect information.

Stack Trace:
-------------
Thread 0 (id: 16069) CRASHED [SIGSEGV @ 0x0000182000000004 ] MAGIC SIGNATURE THREAD
Stack Quality77%Show frame trust levels
0x00007fedc954c520	(chrome -algorithm:995 )	<name omitted>
0x00007fedc93c56b5	(chrome -input_handler.cc:268 )	content::protocol::InputHandler::SetRenderFrameHost(content::RenderFrameHostImpl*)
0x00007fedc93b7297	(chrome -devtools_session.cc:44 )	content::DevToolsSession::SetRenderFrameHost(content::RenderFrameHostImpl*)
0x00007fedc93f3a3a	(chrome -render_frame_devtools_agent_host.cc:750 )	content::RenderFrameDevToolsAgentHost::UpdateFrameHost(content::RenderFrameHostImpl*)
0x00007fedc93f3ac1	(chrome -render_frame_devtools_agent_host.cc:668 )	non-virtual thunk to content::RenderFrameDevToolsAgentHost::ReadyToCommitNavigation(content::NavigationHandle*)
0x00007fedc96d1e4f	(chrome -web_contents_impl.cc:3737 )	content::WebContentsImpl::ReadyToCommitNavigation(content::NavigationHandle*)
0x00007fedc94641f7	(chrome -navigation_handle_impl.cc:746 )	content::NavigationHandleImpl::ReadyToCommitNavigation(content::RenderFrameHostImpl*)
0x00007fedc946268a	(chrome -navigation_handle_impl.cc:1089 )	content::NavigationHandleImpl::WillProcessResponse(content::RenderFrameHostImpl*, scoped_refptr<net::HttpResponseHeaders>, net::HttpResponseInfo::ConnectionInfo, content::SSLStatus const&, content::GlobalRequestID const&, bool, bool, bool, base::RepeatingCallback<void ()> const&, base::RepeatingCallback<void (content::NavigationThrottle::ThrottleCheckResult)> const&)
0x00007fedc9467fcc	(chrome -navigation_request.cc:735 )	content::NavigationRequest::OnResponseStarted(scoped_refptr<content::ResourceResponse> const&, std::__1::unique_ptr<content::StreamHandle, std::__1::default_delete<content::StreamHandle> >, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::SSLStatus const&, std::__1::unique_ptr<content::NavigationData, std::__1::default_delete<content::NavigationData> >, content::GlobalRequestID const&, bool, bool, mojo::InterfacePtrInfo<content::mojom::URLLoaderFactory>)
0x00007fedc951b692	(chrome -navigation_url_loader_impl.cc:106 )	content::NavigationURLLoaderImpl::NotifyResponseStarted(scoped_refptr<content::ResourceResponse> const&, std::__1::unique_ptr<content::StreamHandle, std::__1::default_delete<content::StreamHandle> >, content::SSLStatus const&, std::__1::unique_ptr<content::NavigationData, std::__1::default_delete<content::NavigationData> >, content::GlobalRequestID const&, bool, bool)
0x00007fedc951c508	(chrome -bind_internal.h:194 )	void base::internal::Invoker<base::internal::BindState<void (content::NavigationURLLoaderImpl::*)(scoped_refptr<content::ResourceResponse> const&, std::__1::unique_ptr<content::StreamHandle, std::__1::default_delete<content::StreamHandle> >, content::SSLStatus const&, std::__1::unique_ptr<content::NavigationData, std::__1::default_delete<content::NavigationData> >, content::GlobalRequestID const&, bool, bool), base::WeakPtr<content::NavigationURLLoaderImpl>, scoped_refptr<content::ResourceResponse>, base::internal::PassedWrapper<std::__1::unique_ptr<content::StreamHandle, std::__1::default_delete<content::StreamHandle> > >, content::SSLStatus, base::internal::PassedWrapper<std::__1::unique_ptr<content::NavigationData, std::__1::default_delete<content::NavigationData> > >, content::GlobalRequestID, bool, bool>, void ()>::RunImpl<void (content::NavigationURLLoaderImpl::*)(scoped_refptr<content::ResourceResponse> const&, std::__1::unique_ptr<content::StreamHandle, std::__1::default_delete<content::StreamHandle> >, content::SSLStatus const&, std::__1::unique_ptr<content::NavigationData, std::__1::default_delete<content::NavigationData> >, content::GlobalRequestID const&, bool, bool), std::__1::tuple<base::WeakPtr<content::NavigationURLLoaderImpl>, scoped_refptr<content::ResourceResponse>, base::internal::PassedWrapper<std::__1::unique_ptr<content::StreamHandle, std::__1::default_delete<content::StreamHandle> > >, content::SSLStatus, base::internal::PassedWrapper<std::__1::unique_ptr<content::NavigationData, std::__1::default_delete<content::NavigationData> > >, content::GlobalRequestID, bool, bool>, 0ul, 1ul, 2ul, 3ul, 4ul, 5ul, 6ul, 7ul>(void (content::NavigationURLLoaderImpl::*&&)(scoped_refptr<content::ResourceResponse> const&, std::__1::unique_ptr<content::StreamHandle, std::__1::default_delete<content::StreamHandle> >, content::SSLStatus const&, std::__1::unique_ptr<content::NavigationData, std::__1::default_delete<content::NavigationData> >, content::GlobalRequestID const&, bool, bool), std::__1::tuple<base::WeakPtr<content::NavigationURLLoaderImpl>, scoped_refptr<content::ResourceResponse>, base::internal::PassedWrapper<std::__1::unique_ptr<content::StreamHandle, std::__1::default_delete<content::StreamHandle> > >, content::SSLStatus, base::internal::PassedWrapper<std::__1::unique_ptr<content::NavigationData, std::__1::default_delete<content::NavigationData> > >, content::GlobalRequestID, bool, bool>&&, std::__1::integer_sequence<unsigned long, 0ul, 1ul, 2ul, 3ul, 4ul, 5ul, 6ul, 7ul>)
0x00007fedca536fd5	(chrome -callback.h:64 )	base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*)
0x00007fedca54f828	(chrome -message_loop.cc:406 )	base::MessageLoop::RunTask(base::PendingTask*)
0x00007fedca54ff21	(chrome -message_loop.cc:417 )	base::MessageLoop::DoWork()
0x00007fedca5518ac	(chrome -message_pump_glib.cc:313 )	base::MessagePumpGlib::Run(base::MessagePump::Delegate*)
0x00007fedca57092f	(chrome -run_loop.cc:123 )	base::RunLoop::Run()
0x00007fedca285c6f	(chrome -chrome_browser_main.cc:1922 )	ChromeBrowserMainParts::MainMessageLoopRun(int*)
0x00007fedc93696ec	(chrome -browser_main_loop.cc:1188 )	content::BrowserMainLoop::RunMainMessageLoopParts()
0x00007fedc936bffc	(chrome -browser_main_runner.cc:148 )	content::BrowserMainRunnerImpl::Run()
0x00007fedc9364ca5	(chrome -browser_main.cc:46 )	content::BrowserMain(content::MainFunctionParams const&)
0x00007fedca268c00	(chrome -content_main_runner.cc:703 )	content::ContentMainRunnerImpl::Run()
0x00007fedca271380	(chrome -main.cc:469 )	service_manager::Main(service_manager::MainParams const&)
0x00007fedca267581	(chrome -content_main.cc:19 )	content::ContentMain(content::ContentMainParams const&)
0x00007fedc8d97083	(chrome -chrome_main.cc:122 )	ChromeMain
0x00007fedc10caf44	(libc-2.19.so + 0x00021f44 )	
0x00007fedc8d96fdf	(chrome + 0x017ccfdf )	
0x00007fedc8c8afff	(chrome + 0x016c0fff )	
0x00007fedc73b51f2	(ld-2.19.so + 0x000101f2 )	
0x00007fedc8c8afff	(chrome + 0x016c0fff )	
0x00007fedc8c8b028	(chrome + 0x016c1028 )	_start
0x00007ffd04f4b3a7	

	
Thanks!
Labels: -Needs-Bisect OS-Linux OS-Windows
Owner: alex...@chromium.org
Status: Assigned (was: Unconfirmed)
Unable to perform the bisect as getting all good builds.Hence, assigning it manually.

Manual Bisect Info:
===================
Good Build:62.0.3214.0
Bad Build: 62.0.3215.0


Change Log URL:
https://chromium.googlesource.com/chromium/src/+log/63.0.3214.0..63.0.3215.0?pretty=fuller&n=10000

Suspecting 0b409c439665e83096af5cbc6ae6edc0bb67467b  from the above changelog.

@alexmos: Could you please take a look and reassign to the right owner if it is not related to your change.

Thanks!
Labels: ReleaseBlock-Stable
**Correction**

Manual Bisect Info:
===================
Good Build:63.0.3214.0
Bad Build: 63.0.3215.0

Since this is a recent regression adding stable blocker. Please feel free to remove if not required.
Mergedinto: 764206
Status: Duplicate (was: Assigned)
I think this is the same as  issue 764206 .  From the video, the renderer crashes first, most likely due to  issue 764519 .  This likely gets us into a bad state so that the browser crashes on the back button click.

Sign in to add a comment