New issue
Advanced search Search tips

Issue 799049 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner: ----
Closed: Jan 2018
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Inspection of user-agent shadow dom of <input> inside <video> crashes tab

Reported by tvanderl...@gmail.com, Jan 4 2018

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36

Steps to reproduce the problem:
1. Open any webpage (I confirmed this bug on a new tab, about:blank and reddit.com/r/all )
2. Open dev tools
3. Open dev tools settings
4. Enable "Show user agent shadow DOM"
5. Close dev tools settings
6. In the console, enter `document.body.appendChild(document.createElement('video'))`
7. In the Elements panel, select the just added video element
8. Uncollapse the elements until the `<input pseudo="-internal-media-controls-overlay-cast-button"` is shown
9. Select this element with mouse or with keyboard keys

What is the expected behavior?
The tab does not crash

What went wrong?
The tab crashes and the dev tools report "DevTools was disconnected from the page."

Did this work before? N/A 

Chrome version: 63.0.3239.84  Channel: n/a
OS Version: 10.0
Flash Version: 

The other <input> inside the <video> do not reproduce this issue.
 
Labels: Needs-Triage-M63

Comment 2 by woxxom@gmail.com, Jan 4 2018

Broken in 59, fixed in 64.

* 59.0.3055.0 - first breakage

  Bisect info: 460065 (good) - 460068 (bad)
  https://chromium.googlesource.com/chromium/src/+log/a399db89..d687e467?pretty=fuller
  Suspecting r460068 = d687e467ebbde1d0c7862c29a375263167b04306 = https://crrev.com/2776163002 by jochen@chromium.org
  "Change CSSParserContext to either take explicit or implicit referrer"
  Landed in 59.0.3055.0

* 64.0.3255.0 - fixed

  Bisect info: 512748 (bad) - 512754 (good)
  https://chromium.googlesource.com/chromium/src/+log/216b9e49..749d2584?pretty=fuller
  Suspecting r512752 = ffdd951da2554d439c4c67eb92d6cd464d3f8fd6 = https://crrev.com/c/744592 by lushnikov@chromium.org
  "CSSSelectorParser: usage reporting should check for stylesheet"
  Landed in 64.0.3255.0

P.S. Builds in the range r510822 - r511127 don't disconnect devtools, but don't show the real CSS of the input either.
The investigation revealed it was a regression caused by r510822 that prevented the internal crash from being reported.
good.png
20.6 KB View Download
bad.png
22.0 KB View Download
Status: Fixed (was: Unconfirmed)

Sign in to add a comment