New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 777641 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner: ----
Closed: Jan 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 3
Type: Bug



Sign in to add a comment

DCHECK in url_request.cc on redirect

Project Member Reported by s...@chromium.org, Oct 23 2017

Issue description

ToT build on Linux,
1. Sign in, enable syncing.
2. Visit http://maps.google.com/
3. Open chrome://settings/searchEngines and delete the entry for google maps
4. Open a new tab, navigate to http://maps.google.com/ , wait maybe 10 seconds
5. Navigate to http://maps.google.com/ in a new tab
6. Crash (if you haven't crashed, try opening http://maps.google.com/ in another tab)

I'm able to repro the crash like ~60% of the time, on clean profile directories.

[34924:35012:1023/161507.688059:FATAL:url_request.cc(849)] Check failed: status_.is_success(). 
#0 0x7fa1f147400d base::debug::StackTrace::StackTrace()
#1 0x7fa1f147243c base::debug::StackTrace::StackTrace()
#2 0x7fa1f14f93aa logging::LogMessage::~LogMessage()
#3 0x7fa1ef5db36f net::URLRequest::FollowDeferredRedirect()
#4 0x7fa1ec067059 content::ResourceLoader::FollowDeferredRedirectInternal()
#5 0x7fa1ec0666c0 content::ResourceLoader::Resume()
#6 0x7fa1ec06947b content::ResourceLoader::Controller::Resume()
#7 0x7fa1ec07b578 content::StreamResourceHandler::OnRequestRedirected()
#8 0x7fa1ebff6e2a content::LayeredResourceHandler::OnRequestRedirected()
#9 0x7fa1ec0808fd content::ThrottlingResourceHandler::OnRequestRedirected()
#10 0x7fa1ec0820af content::ThrottlingResourceHandler::ResumeRedirect()
#11 0x7fa1ec081b11 content::ThrottlingResourceHandler::Resume()
#12 0x7fa1ea8acc5a content::ResourceThrottle::Resume()
#13 0x562f96a97471 prerender::PrerenderResourceThrottle::ResumeHandler()
#14 0x562f95151f8f _ZN4base8internal13FunctorTraitsIMN11google_apis19UrlFetchRequestBaseEFvvEvE6InvokeIRKNS_7WeakPtrINS2_5drive30SingleBatchableDelegateRequestEEEJEEEvS5_OT_DpOT0_
#15 0x562f95151f0a _ZN4base8internal12InvokeHelperILb1EvE8MakeItSoIRKMN11google_apis19UrlFetchRequestBaseEFvvERKNS_7WeakPtrINS4_5drive30SingleBatchableDelegateRequestEEEJEEEvOT_OT0_DpOT1_
#16 0x562f95151ea0 _ZN4base8internal7InvokerINS0_9BindStateIMN11google_apis19UrlFetchRequestBaseEFvvEJNS_7WeakPtrINS3_5drive30SingleBatchableDelegateRequestEEEEEEFvvEE7RunImplIRKS6_RKNSt3__15tupleIJSA_EEEJLm0EEEEvOT_OT0_NSH_16integer_sequenceImJXspT1_EEEE
#17 0x562f95be3bf9 _ZN4base8internal7InvokerINS0_9BindStateIMN5prefs20PrefStoreManagerImplEFvvEJNS_7WeakPtrIS4_EEEEEFvvEE7RunOnceEPNS0_13BindStateBaseE
#18 0x7fa1f1422fc1 _ZNO4base12OnceCallbackIFvvEE3RunEv
#19 0x7fa1f147830a base::debug::TaskAnnotator::RunTask()
#20 0x7fa1f1517d35 base::internal::IncomingTaskQueue::RunTask()
#21 0x7fa1f1520b84 base::MessageLoop::RunTask()
#22 0x7fa1f1520e26 base::MessageLoop::DeferOrRunPendingTask()
#23 0x7fa1f1521173 base::MessageLoop::DoWork()
#24 0x7fa1f1526f69 base::MessagePumpLibevent::Run()
#25 0x7fa1f1520324 base::MessageLoop::Run()
#26 0x7fa1f15c9c05 base::RunLoop::Run()
#27 0x7fa1f168b944 base::Thread::Run()
#28 0x7fa1eb9a9d86 content::BrowserThreadImpl::IOThreadRun()
#29 0x7fa1eb9aa08b content::BrowserThreadImpl::Run()
#30 0x7fa1f168c564 base::Thread::ThreadMain()
#31 0x7fa1f1671e21 base::(anonymous namespace)::ThreadFunc()
#32 0x7fa1f1a08184 start_thread
#33 0x7fa1d7f48ffd clone

Received signal 6
#0 0x7fa1f147400d base::debug::StackTrace::StackTrace()
#1 0x7fa1f147243c base::debug::StackTrace::StackTrace()
#2 0x7fa1f14739c5 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#3 0x7fa1f1a10330 <unknown>
#4 0x7fa1d7e81c37 gsignal
#5 0x7fa1d7e85028 abort
#6 0x7fa1f146f406 base::debug::(anonymous namespace)::DebugBreak()
#7 0x7fa1f146f3e8 base::debug::BreakDebugger()
#8 0x7fa1f14f9fac logging::LogMessage::~LogMessage()
#9 0x7fa1ef5db36f net::URLRequest::FollowDeferredRedirect()
#10 0x7fa1ec067059 content::ResourceLoader::FollowDeferredRedirectInternal()
#11 0x7fa1ec0666c0 content::ResourceLoader::Resume()
#12 0x7fa1ec06947b content::ResourceLoader::Controller::Resume()
#13 0x7fa1ec07b578 content::StreamResourceHandler::OnRequestRedirected()
#14 0x7fa1ebff6e2a content::LayeredResourceHandler::OnRequestRedirected()
#15 0x7fa1ec0808fd content::ThrottlingResourceHandler::OnRequestRedirected()
#16 0x7fa1ec0820af content::ThrottlingResourceHandler::ResumeRedirect()
#17 0x7fa1ec081b11 content::ThrottlingResourceHandler::Resume()
#18 0x7fa1ea8acc5a content::ResourceThrottle::Resume()
#19 0x562f96a97471 prerender::PrerenderResourceThrottle::ResumeHandler()
#20 0x562f95151f8f _ZN4base8internal13FunctorTraitsIMN11google_apis19UrlFetchRequestBaseEFvvEvE6InvokeIRKNS_7WeakPtrINS2_5drive30SingleBatchableDelegateRequestEEEJEEEvS5_OT_DpOT0_
#21 0x562f95151f0a _ZN4base8internal12InvokeHelperILb1EvE8MakeItSoIRKMN11google_apis19UrlFetchRequestBaseEFvvERKNS_7WeakPtrINS4_5drive30SingleBatchableDelegateRequestEEEJEEEvOT_OT0_DpOT1_
#22 0x562f95151ea0 _ZN4base8internal7InvokerINS0_9BindStateIMN11google_apis19UrlFetchRequestBaseEFvvEJNS_7WeakPtrINS3_5drive30SingleBatchableDelegateRequestEEEEEEFvvEE7RunImplIRKS6_RKNSt3__15tupleIJSA_EEEJLm0EEEEvOT_OT0_NSH_16integer_sequenceImJXspT1_EEEE
#23 0x562f95be3bf9 _ZN4base8internal7InvokerINS0_9BindStateIMN5prefs20PrefStoreManagerImplEFvvEJNS_7WeakPtrIS4_EEEEEFvvEE7RunOnceEPNS0_13BindStateBaseE
#24 0x7fa1f1422fc1 _ZNO4base12OnceCallbackIFvvEE3RunEv
#25 0x7fa1f147830a base::debug::TaskAnnotator::RunTask()
#26 0x7fa1f1517d35 base::internal::IncomingTaskQueue::RunTask()
#27 0x7fa1f1520b84 base::MessageLoop::RunTask()
#28 0x7fa1f1520e26 base::MessageLoop::DeferOrRunPendingTask()
#29 0x7fa1f1521173 base::MessageLoop::DoWork()
#30 0x7fa1f1526f69 base::MessagePumpLibevent::Run()
#31 0x7fa1f1520324 base::MessageLoop::Run()
#32 0x7fa1f15c9c05 base::RunLoop::Run()
#33 0x7fa1f168b944 base::Thread::Run()
#34 0x7fa1eb9a9d86 content::BrowserThreadImpl::IOThreadRun()
#35 0x7fa1eb9aa08b content::BrowserThreadImpl::Run()
#36 0x7fa1f168c564 base::Thread::ThreadMain()
#37 0x7fa1f1671e21 base::(anonymous namespace)::ThreadFunc()
#38 0x7fa1f1a08184 start_thread
#39 0x7fa1d7f48ffd clone
  r8: 00007fa1bd452b08  r9: fffffffffffffec8 r10: 0000000000000008 r11: 0000000000000206
 r12: 0000000000000000 r13: 0000000000000000 r14: 00007fa1bd4589c0 r15: 00007fa1bd458700
  di: 000000000000886c  si: 00000000000088c4  bp: 00007fa1bd453010  bx: 0000000000000000
  dx: 0000000000000006  ax: 0000000000000000  cx: 00007fa1d7e81c37  sp: 00007fa1bd452ed8
  ip: 00007fa1d7e81c37 efl: 0000000000000206 cgf: dead000000000033 erf: 0000000000000000
 trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000
[end of stack trace]
Calling _exit(1). Core file will not be generated.

 

Comment 1 by mmenke@chromium.org, Oct 24 2017

Components: Services>Safebrowsing
I think this is fallout from SafeBrowsing now cancelling asynchronously on redirects - this was fixed recently, wasn't it?

Comment 2 by s...@chromium.org, Oct 24 2017

I just synced to head, and can still repro. Most of my original steps were actually not necessary. Just launch Chrome in a clean profile directory, and start opening new tabs at http://maps.google.com/ , though the timing seems to be very important to triggering a crash. I find it crashes when the new tab/navigation is happening right as the previous tab is modifying its URL to have long/lat data.

Comment 3 by mmenke@chromium.org, Oct 24 2017

Cc: yzshen@chromium.org

Comment 4 by yzshen@chromium.org, Oct 24 2017

Cc: mmenke@chromium.org
The new SafeBrowsing behavior is not enabled anywhere. So it shouldn't be the cause.
(I am going to enable it soon, which has already avoided OOB cancellation.)


I guess there are other resource handlers that could cancel out-of-band?

Comment 5 by mmenke@chromium.org, Oct 24 2017

Hrm....To the extent of my knowledge, there haven't been any changes here lately.

Comment 6 by vakh@chromium.org, Oct 24 2017

There's nothing specific to Safe Browsing in the call stack and since yzshen's feature isn't enabled anywhere yet, I am not sure the "Safe Browsing" component applies.

Comment 7 by mmenke@chromium.org, Oct 24 2017

Components: -Services>Safebrowsing
Labels: Needs-Feedback
[skym]:  Have you run into this recently, or can we close this bug?  I haven't seen any other reports of it, though that doesn't mean it's been fixed, of course.

Comment 9 by s...@chromium.org, Jan 8 2018

Status: Fixed (was: Untriaged)
No I haven't run into this at all recently. Lets close this unless someone else runs into it, it likely has already been fixed.

Sign in to add a comment