New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 774033 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
Closed: Oct 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 1
Type: Bug-Regression



Sign in to add a comment

Regression: Browser crash is seen on editing password field for Gmail.

Reported by aiman.an...@etouch.net, Oct 12 2017

Issue description

Chrome Version: 63.0.3238.0 (Official Build)fc7c1e473dfde53eb32f2e6528d6b0f957f850f5-refs/heads/master@{#508208}(64-bit).

OS: Mac(10.12.6).

Test URL: https://www.google.com/gmail/about/#

Steps to reproduce:
1.Launch Chrome, go to the above link and log in with valid credentials 
2.On save password bubble click on the eye icon to edit password.
3.Enter long text in password field and click on save.
4.Observe. 

Actual Result: Browser crash is seen on entering text in save password field and saving it.
Expected Result: Browser crash should not be seen.

Uploaded Crash Report ID fc14b719f0c53741 (Local Crash ID: b50b797e-bfe9-4ceb-98e1-0938d399860b)

This is regression issue broken in ‘M-63’ and will soon update other info.

Using the per-revision bisect providing the bisect results,
Good Build: 63.0.3236.0
Bad Build: 63.0.3237.7

 
Actual Result.mov
6.4 MB Download
Expected Result.mov
5.0 MB Download
Stack trace for the Crash ID provided:

CRASHED [EXC_BAD_INSTRUCTION / EXC_I386_INVOP @ 0x0000000106dc119c ] MAGIC SIGNATURE THREAD
Stack Quality79%Show frame trust levels
0x0000000106dc119c	(Google Chrome Framework -objc_zombie.mm:231 )	(anonymous namespace)::ZombieObjectCrash(objc_object*, objc_selector*, objc_selector*)
0x0000000106dc11d1	(Google Chrome Framework -objc_zombie.mm:274 )	-[CrZombie respondsToSelector:]
0x00007fff8662cef5	(AppKit + 0x00211ef5 )	-[NSCell _delegateValidation:object:uiHandled:]
0x00007fff8662cd7f	(AppKit + 0x00211d7f )	-[NSCell _validateEntryString:uiHandled:]
0x00007fff8662cb5b	(AppKit + 0x00211b5b )	-[NSTextField textShouldEndEditing:]
0x00007fff8661af1e	(AppKit + 0x001fff1e )	-[NSTextView(NSSharing) resignFirstResponder]
0x00007fff8651c922	(AppKit + 0x00101922 )	-[NSWindow _realMakeFirstResponder:]
0x00007fff8651c7e3	(AppKit + 0x001017e3 )	-[NSWindow makeFirstResponder:]
0x00007fff865405b3	(AppKit + 0x001255b3 )	-[NSWindow endEditingFor:]
0x00007fff86446407	(AppKit + 0x0002b407 )	-[NSView removeFromSuperview]
0x00007fff8651847c	(AppKit + 0x000fd47c )	-[NSView setSubviews:]
0x0000000108337248	(Google Chrome Framework -passwords_bubble_controller.mm:181 )	-[ManagePasswordsBubbleController refreshBubble]
0x000000010833b2c1	(Google Chrome Framework -save_pending_password_view_controller.mm:158 )	-[SavePendingPasswordViewController onSaveClicked:]
0x00007fff9e8d63a6	(libsystem_trace.dylib + 0x000033a6 )	_os_activity_initiate_impl
0x00007fff86bdf720	(AppKit + 0x007c4720 )	-[NSApplication(NSResponder) sendAction:to:from:]
0x000000010585508a	(Google Chrome Framework -chrome_browser_application_mac.mm:243 )	__43-[BrowserCrApplication sendAction:to:from:]_block_invoke
0x0000000105c047d9	(Google Chrome Framework + 0x01c4a7d9 )	base::mac::CallWithEHFrame(void () block_pointer)
0x0000000105854f9b	(Google Chrome Framework -chrome_browser_application_mac.mm:242 )	-[BrowserCrApplication sendAction:to:from:]
0x00007fff866c3cc3	(AppKit + 0x002a8cc3 )	-[NSControl sendAction:to:]
0x00007fff866c3beb	(AppKit + 0x002a8beb )	__26-[NSCell _sendActionFrom:]_block_invoke
0x00007fff9e8d63a6	(libsystem_trace.dylib + 0x000033a6 )	_os_activity_initiate_impl
0x00007fff866c3b43	(AppKit + 0x002a8b43 )	-[NSCell _sendActionFrom:]
0x00007fff86706538	(AppKit + 0x002eb538 )	-[NSButtonCell _sendActionFrom:]
0x00007fff9e8d63a6	(libsystem_trace.dylib + 0x000033a6 )	_os_activity_initiate_impl
0x00007fff866c2425	(AppKit + 0x002a7425 )	-[NSCell trackMouse:inRect:ofView:untilMouseUp:]
0x00007fff86706271	(AppKit + 0x002eb271 )	-[NSButtonCell trackMouse:inRect:ofView:untilMouseUp:]
0x00007fff866c0dda	(AppKit + 0x002a5dda )	-[NSControl mouseDown:]
0x00007fff86d5b24e	(AppKit + 0x0094024e )	-[NSWindow(NSEventRouting) _handleMouseDownEvent:isDelayedEvent:]
0x00007fff86d57a6b	(AppKit + 0x0093ca6b )	-[NSWindow(NSEventRouting) _reallySendEvent:isDelayedEvent:]
0x00007fff86d56f09	(AppKit + 0x0093bf09 )	-[NSWindow(NSEventRouting) sendEvent:]
0x00000001082b93de	(Google Chrome Framework -chrome_event_processing_window.mm:78 )	-[ChromeEventProcessingWindow sendEvent:]
0x00000001083028e4	(Google Chrome Framework -info_bubble_window.mm:253 )	-[InfoBubbleWindow sendEvent:]
0x00007fff86bdb680	(AppKit + 0x007c0680 )	-[NSApplication(NSEvent) sendEvent:]
0x000000010585549b	(Google Chrome Framework -chrome_browser_application_mac.mm:277 )	__34-[BrowserCrApplication sendEvent:]_block_invoke
0x0000000105c047d9	(Google Chrome Framework + 0x01c4a7d9 )	base::mac::CallWithEHFrame(void () block_pointer)
0x0000000105855283	(Google Chrome Framework -chrome_browser_application_mac.mm:261 )	-[BrowserCrApplication sendEvent:]
0x00007fff86456426	(AppKit + 0x0003b426 )	-[NSApplication run]
0x0000000105c13ec6	(Google Chrome Framework -message_pump_mac.mm:801 )	base::MessagePumpNSApplication::DoRun(base::MessagePump::Delegate*)
0x0000000105c12a4d	(Google Chrome Framework -message_pump_mac.mm:179 )	base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*)
0x0000000105c357c9	(Google Chrome Framework -run_loop.cc:118 )	<name omitted>
0x000000010585a477	(Google Chrome Framework -chrome_browser_main.cc:1917 )	ChromeBrowserMainParts::MainMessageLoopRun(int*)
0x00000001046dfc83	(Google Chrome Framework -browser_main_loop.cc:1160 )	content::BrowserMainLoop::RunMainMessageLoopParts()
0x00000001046e2501	(Google Chrome Framework -browser_main_runner.cc:140 )	content::BrowserMainRunnerImpl::Run()
0x00000001046dc42b	(Google Chrome Framework -browser_main.cc:46 )	content::BrowserMain(content::MainFunctionParams const&)
0x0000000105811b99	(Google Chrome Framework -content_main_runner.cc:710 )	content::ContentMainRunnerImpl::Run()
0x00000001070174b9	(Google Chrome Framework -main.cc:469 )	service_manager::Main(service_manager::MainParams const&)
0x0000000105811143	(Google Chrome Framework -content_main.cc:19 )	content::ContentMain(content::ContentMainParams const&)
0x0000000103fbe26e	(Google Chrome Framework -chrome_main.cc:123 )	ChromeMain
0x0000000103f42dd3	(Google Chrome -chrome_exe_main_mac.cc:165 )	main
0x00007fff9e6a4234	(libdyld.dylib + 0x00005234 )	start
0x00007fff9e6a4234	(libdyld.dylib + 0x00005234 )	start

P.S: This was fixed in issue 756121, 
Labels: hasbisect-per-revision
Owner: vasi...@chromium.org
Status: Assigned (was: Unconfirmed)
Summary: Regression: Browser crash is seen on editing password field for Gmail. (was: Regression: Browser crash is seen on on edit password field for Gmail.)
Using the per-revision bisect providing the bisect results,
Good Build: 63.0.3236.0 (Revision:507287)
Bad Build: 63.0.3237.7 (Revision:507841)

You are probably looking for a change made after 507638 (known good), but no later than 507639 (first known bad).

CHANGE-LOG URL:

The script might not always return single CL as suspect as some perf builds might get missing due to failure.

https://chromium.googlesource.com/chromium/src/+log/edb9b8c351be1048294578fe1a2f97bad7fbcc1a..cb22bad2eb6379beb3c9c2ca0ac2aec7eed63dcc


Suspect: https://chromium.googlesource.com/chromium/src/+/cb22bad2eb6379beb3c9c2ca0ac2aec7eed63dcc

@vasilii: Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Note: Above issue is not seen on Linux(14.04 LTS) and Win(7,8,10) OS.

Thank You!



Labels: ReleaseBlock-Beta
Tagging with blocker label, please undo if not the case.

Comment 4 by ajha@chromium.org, Oct 13 2017

Cc: melandory@chromium.org
Friendly ping for an update on this issue marked as Beta blocker.
Project Member

Comment 5 by bugdroid1@chromium.org, Oct 13 2017

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/b0e8a53a83569be65979a3984895126b2d87aac1

commit b0e8a53a83569be65979a3984895126b2d87aac1
Author: Vasilii Sukhanov <vasilii@chromium.org>
Date: Fri Oct 13 13:44:16 2017

Fix the crash when the password bubble moves to the promo state on Mac.

SavePendingPasswordViewController sets itself as a delegate to NSComboBox. When the save password bubble moves to the promo state, the controller is destroyed synchronously. The views in the bubble still exist for some time and the combobox may ping the delegate.

Bug:  774033 
Change-Id: I1131806e32aec7f038d94f1e58b72655092b73ed
Reviewed-on: https://chromium-review.googlesource.com/718208
Reviewed-by: Tatiana Gornak <melandory@chromium.org>
Commit-Queue: Vasilii Sukhanov <vasilii@chromium.org>
Cr-Commit-Position: refs/heads/master@{#508691}
[modify] https://crrev.com/b0e8a53a83569be65979a3984895126b2d87aac1/chrome/browser/ui/cocoa/passwords/passwords_bubble_controller_unittest.mm
[modify] https://crrev.com/b0e8a53a83569be65979a3984895126b2d87aac1/chrome/browser/ui/cocoa/passwords/save_pending_password_view_controller.mm
[modify] https://crrev.com/b0e8a53a83569be65979a3984895126b2d87aac1/chrome/browser/ui/passwords/manage_passwords_bubble_model.h

Thanks for the quick turnaround. 
aiman.ansari@, please verify in next canary.
Labels: Merge-Request-63
I want to merge r508691 because it's a crash fix.
Labels: TE-Verified-M64 TE-Verified-64.0.3241.0
Rechecked this issue on Mac 10.12.6 using chrome version 64.0.3241.0 and fix is working as intended. No crash is observed after trying to save a long text from password bubble. Adding TE-verified label for M64.

Comment 9 by gov...@chromium.org, Oct 16 2017

M63 beta promotion is coming VERY soon. Your bug is labelled as Beta ReleaseBlock, pls make sure to land the fix and get it merged into the release branch ASAP. Thank you.
This is exactly what I want to do and I'm blocked on your permission.
Project Member

Comment 11 by sheriffbot@chromium.org, Oct 17 2017

Labels: -Merge-Request-63 Hotlist-Merge-Approved Merge-Approved-63
Your change meets the bar and is auto-approved for M63. Please go ahead and merge the CL to branch 3239 manually. Please contact milestone owner if you have questions.
Owners: cmasso@(Android), cmasso@(iOS), gkihumba@(ChromeOS), govind@(Desktop)

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 12 by bugdroid1@chromium.org, Oct 17 2017

Labels: -merge-approved-63 merge-merged-3239
The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/c11e7281573aba648bd9d8c551e5cb96c760c411

commit c11e7281573aba648bd9d8c551e5cb96c760c411
Author: Vasilii Sukhanov <vasilii@chromium.org>
Date: Tue Oct 17 11:51:58 2017

Fix the crash when the password bubble moves to the promo state on Mac.

SavePendingPasswordViewController sets itself as a delegate to NSComboBox. When the save password bubble moves to the promo state, the controller is destroyed synchronously. The views in the bubble still exist for some time and the combobox may ping the delegate.

TBR=vasilii@chromium.org

(cherry picked from commit b0e8a53a83569be65979a3984895126b2d87aac1)

Bug:  774033 
Change-Id: I1131806e32aec7f038d94f1e58b72655092b73ed
Reviewed-on: https://chromium-review.googlesource.com/718208
Reviewed-by: Tatiana Gornak <melandory@chromium.org>
Commit-Queue: Vasilii Sukhanov <vasilii@chromium.org>
Cr-Original-Commit-Position: refs/heads/master@{#508691}
Reviewed-on: https://chromium-review.googlesource.com/723021
Reviewed-by: Vasilii Sukhanov <vasilii@chromium.org>
Cr-Commit-Position: refs/branch-heads/3239@{#27}
Cr-Branched-From: adb61db19020ed8ecee5e91b1a0ea4c924ae2988-refs/heads/master@{#508578}
[modify] https://crrev.com/c11e7281573aba648bd9d8c551e5cb96c760c411/chrome/browser/ui/cocoa/passwords/passwords_bubble_controller_unittest.mm
[modify] https://crrev.com/c11e7281573aba648bd9d8c551e5cb96c760c411/chrome/browser/ui/cocoa/passwords/save_pending_password_view_controller.mm
[modify] https://crrev.com/c11e7281573aba648bd9d8c551e5cb96c760c411/chrome/browser/ui/passwords/manage_passwords_bubble_model.h

Status: Fixed (was: Assigned)

Sign in to add a comment