App crashes on tapping cancel quickly when the keyboard is active. |
|||
Issue descriptionApp Version: 66.0.3359.98 beta iOS Version: 11.2.6 Device: iPhone X only Url : https://madmath.github.io/samples/paymentrequest/credit-cards https://rsolomakhin.github.io/pr Steps to reproduce: 1. Launch chrome in landscape mode 2. Goto “https://rsolomakhin.github.io/pr/” or "https://madmath.github.io/samples/paymentrequest/credit-cards" 3. Tap on Buy 4. Tap on Add Card. 5. Place the cursor on Expiry date. 6. Scroll the date full upwards.(to first date) 7. Tap on Cancel button twice quickly. Observed results: App crashes Note : Works fine in Portrait mode. Expected results: App should not crash Number of times you were able to reproduce: 5/5 Bug reproducible after clean install: Yes Bug reproducible after clearing cache and cookies: Yes Bug reproducible on Chrome Mobile on Android: NA Bug reproducible on Dolphin/Safari/Firefox: Safari : NA Bug reproducible on the current beta channel build :Yes in M65 Bug reproducible on the current beta channel build :Yes in M66 Crash log : https://crash.corp.google.com/browse?stbtiq=1f6b22f0c94bee9a Video : https://drive.google.com/file/d/12eIFC61GhWIa1Fk8I39GB8MSwTMdTpRV/view?usp=sharing Stack Trace : Thread 0 (id: 771) CRASHED [EXC_SOFTWARE / UNCAUGHT_NS_EXCEPTION @ 0x0000000186563164 ] MAGIC SIGNATURE THREAD Stack Quality84%Show frame trust levels 0x0000000186563164 (CoreFoundation + 0x00143164 ) __exceptionPreprocess 0x00000001857ac524 (libobjc.A.dylib + 0x00008524 ) objc_exception_throw 0x00000001864fbc98 (CoreFoundation + 0x000dbc98 ) _CFThrowFormattedException 0x000000018642b63c (CoreFoundation + 0x0000b63c ) -[__NSArrayM objectAtIndex:] 0x0000000104d455b8 (Chrome -list_model.mm:167 ) -[ListModel itemAtIndexPath:] 0x0000000104d452e4 (Chrome -list_model.mm:135 ) -[ListModel itemTypeForIndexPath:] 0x00000001051e735c (Chrome -payment_request_edit_view_controller.mm:726 ) -[PaymentRequestEditViewController collectionView:shouldHideItemBackgroundAtIndexPath:] 0x0000000104c8ba44 (Chrome -MDCCollectionViewStyler.m:541 ) -[MDCCollectionViewStyler backgroundImageForCellLayoutAttributes:] 0x0000000104c81968 (Chrome -MDCCollectionViewFlowLayout.m:383 ) -[MDCCollectionViewFlowLayout updateAttribute:] 0x0000000104c80194 (Chrome -MDCCollectionViewFlowLayout.m:108 ) -[MDCCollectionViewFlowLayout layoutAttributesForElementsInRect:] 0x000000018fb78f28 (UIKit + 0x0006af28 ) __45-[UICollectionViewData validateLayoutInRect:]_block_invoke 0x000000018fb78884 (UIKit + 0x0006a884 ) -[UICollectionViewData validateLayoutInRect:] 0x000000018fb7ea54 (UIKit + 0x00070a54 ) -[UICollectionViewData layoutAttributesForElementsInRect:] 0x000000018fb7c390 (UIKit + 0x0006e390 ) -[UICollectionView _updateVisibleCellsNow:] 0x000000018fccec88 (UIKit + 0x001c0c88 ) -[UICollectionView _setupCellAnimations] 0x00000001905b6170 (UIKit + 0x00aa8170 ) -[UICollectionView _updateRowsAtIndexPaths:updateAction:updates:] 0x000000018fcd9308 (UIKit + 0x001cb308 ) -[UICollectionView deleteItemsAtIndexPaths:] 0x00000001051e7a5c (Chrome -payment_request_edit_view_controller.mm:786 ) -[PaymentRequestEditViewController addOrRemoveErrorMessage:inSectionWithIdentifier:] 0x00000001051e7c00 (Chrome -payment_request_edit_view_controller.mm:808 ) -[PaymentRequestEditViewController validateField:] 0x00000001051e64a4 (Chrome -payment_request_edit_view_controller.mm:590 ) -[PaymentRequestEditViewController pickerView:didSelectRow:inComponent:] 0x000000018fd6f150 (UIKit + 0x00261150 ) -[UIPickerView _sendSelectionChangedForComponent:notify:] 0x000000018fd6f380 (UIKit + 0x00261380 ) -[UIPickerView _sendSelectionChangedFromTable:notify:] 0x0000000190414430 (UIKit + 0x00906430 ) -[UIPickerTableView _scrollingFinished] 0x00000001904145dc (UIKit + 0x009065dc ) -[UIPickerTableView scrollViewDidEndDragging:willDecelerate:] 0x000000018fe212e8 (UIKit + 0x003132e8 ) -[UIScrollView(UIScrollViewInternal) _scrollViewDidEndDraggingForDelegateWithDeceleration:] 0x000000018fd47e64 (UIKit + 0x00239e64 ) -[UIScrollView cancelTouchTracking] 0x000000018fd47cf8 (UIKit + 0x00239cf8 ) -[UITableView cancelTouchTracking] 0x000000018fd47bf8 (UIKit + 0x00239bf8 ) -[UIScrollViewPanGestureRecognizer touchesCancelled:withEvent:] 0x00000001901a9b98 (UIKit + 0x0069bb98 ) -[UIGestureEnvironment _cancelGestureRecognizers:] 0x000000018fb18a84 (UIKit + 0x0000aa84 ) -[UIApplication _cancelGestureRecognizersForView:] 0x000000018fb18704 (UIKit + 0x0000a704 ) -[UIView(Hierarchy) _willMoveToWindow:] 0x000000018fdfafc4 (UIKit + 0x002ecfc4 ) __UIViewWillBeRemovedFromSuperview 0x000000018fb18420 (UIKit + 0x0000a420 ) -[UIView(Hierarchy) removeFromSuperview] 0x000000018fd6d26c (UIKit + 0x0025f26c ) __30-[UIPickerView layoutSubviews]_block_invoke 0x000000018fb2b928 (UIKit + 0x0001d928 ) +[UIView(Animation) performWithoutAnimation:] 0x000000018fd6cd74 (UIKit + 0x0025ed74 ) -[UIPickerView layoutSubviews] 0x000000018fb1ae14 (UIKit + 0x0000ce14 ) -[UIView(CALayerDelegate) layoutSublayersOfLayer:] 0x000000018a5a7944 (QuartzCore + 0x00122944 ) -[CALayer layoutSublayers] 0x000000018a5abacc (QuartzCore + 0x00126acc ) CA::Layer::layout_if_needed(CA::Transaction*) 0x000000018a5a7860 (QuartzCore + 0x00122860 ) -[CALayer layoutIfNeeded] 0x000000018fea0af0 (UIKit + 0x00392af0 ) -[UIViewController window:willAnimateRotationToInterfaceOrientation:duration:newSize:] 0x000000018fea555c (UIKit + 0x0039755c ) __95-[UIViewController(AdaptiveSizing) _window:viewWillTransitionToSize:withTransitionCoordinator:]_block_invoke.3607 0x000000018fc04340 (UIKit + 0x000f6340 ) -[_UIViewControllerTransitionCoordinator _applyBlocks:releaseBlocks:] 0x000000018fc041a8 (UIKit + 0x000f61a8 ) -[_UIViewControllerTransitionContext __runAlongsideAnimations] 0x000000018fb5297c (UIKit + 0x0004497c ) +[UIView(UIViewAnimationWithBlocks) _setupAnimationWithDuration:delay:view:options:factory:animations:start:animationStateGenerator:completion:] 0x000000018fb693b4 (UIKit + 0x0005b3b4 ) +[UIView(UIViewAnimationWithBlocks) animateWithDuration:delay:options:animations:completion:] 0x00000001902f0398 (UIKit + 0x007e2398 ) __58-[_UIWindowRotationAnimationController animateTransition:]_block_invoke_2 0x000000018fe03484 (UIKit + 0x002f5484 ) +[UIView(Internal) _performBlockDelayingTriggeringResponderEvents:] 0x00000001902f010c (UIKit + 0x007e210c ) __58-[_UIWindowRotationAnimationController animateTransition:]_block_invoke 0x000000018fb5297c (UIKit + 0x0004497c ) +[UIView(UIViewAnimationWithBlocks) _setupAnimationWithDuration:delay:view:options:factory:animations:start:animationStateGenerator:completion:] 0x000000018fb693b4 (UIKit + 0x0005b3b4 ) +[UIView(UIViewAnimationWithBlocks) animateWithDuration:delay:options:animations:completion:] 0x00000001902effc8 (UIKit + 0x007e1fc8 ) -[_UIWindowRotationAnimationController animateTransition:] 0x000000018fdd6864 (UIKit + 0x002c8864 ) -[UIWindow _rotateToBounds:withAnimator:transitionContext:] 0x000000018fdd8174 (UIKit + 0x002ca174 ) -[UIWindow _rotateWindowToOrientation:updateStatusBar:duration:skipCallbacks:] 0x000000018fb99248 (UIKit + 0x0008b248 ) -[UIWindow _setRotatableClient:toOrientation:updateStatusBar:duration:force:isRotating:] 0x00000001903e7cac (UIKit + 0x008d9cac ) -[UIRemoteKeyboardWindow _setRotatableClient:toOrientation:updateStatusBar:duration:force:isRotating:] 0x000000018fdb1488 (UIKit + 0x002a3488 ) -[UIApplicationRotationFollowingWindow applicationWindowRotated:] 0x00000001864f5138 (CoreFoundation + 0x000d5138 ) __CFNOTIFICATIONCENTER_IS_CALLING_OUT_TO_AN_OBSERVER__ 0x00000001864f46d8 (CoreFoundation + 0x000d46d8 ) _CFXRegistrationPost 0x00000001864f443c (CoreFoundation + 0x000d443c ) ___CFXNotificationPost_block_invoke 0x0000000186571e20 (CoreFoundation + 0x00151e20 ) -[_CFXNotificationRegistrar find:object:observer:enumerator:] 0x000000018642ad5c (CoreFoundation + 0x0000ad5c ) _CFXNotificationPost 0x0000000186e57344 (Foundation + 0x00006344 ) -[NSNotificationCenter postNotificationName:object:userInfo:] 0x000000018fdd7c04 (UIKit + 0x002c9c04 ) -[UIWindow _notifyRotatableViewOrientation:duration:] 0x000000018fb9900c (UIKit + 0x0008b00c ) -[UIWindow _setRotatableViewOrientation:updateStatusBar:duration:force:] 0x000000018fb900cc (UIKit + 0x000820cc ) __57-[UIWindow _updateToInterfaceOrientation:duration:force:]_block_invoke 0x000000018fb1ebf0 (UIKit + 0x00010bf0 ) -[UIWindow _updateToInterfaceOrientation:duration:force:] 0x00000001864f5138 (CoreFoundation + 0x000d5138 ) __CFNOTIFICATIONCENTER_IS_CALLING_OUT_TO_AN_OBSERVER__ 0x00000001864f46d8 (CoreFoundation + 0x000d46d8 ) _CFXRegistrationPost 0x00000001864f443c (CoreFoundation + 0x000d443c ) ___CFXNotificationPost_block_invoke 0x0000000186571e20 (CoreFoundation + 0x00151e20 ) -[_CFXNotificationRegistrar find:object:observer:enumerator:] 0x000000018642ad5c (CoreFoundation + 0x0000ad5c ) _CFXNotificationPost 0x0000000186e57344 (Foundation + 0x00006344 ) -[NSNotificationCenter postNotificationName:object:userInfo:] 0x000000018fb1e6f4 (UIKit + 0x000106f4 ) -[UIDevice setOrientation:animated:] 0x0000000190594fc0 (UIKit + 0x00a86fc0 ) __124-[_UICanvasDeviceOrientationSettingsDiffAction _updateDeviceOrientationWithSettingObserverContext:canvas:transitionContext:]_block_invoke 0x00000001906aa600 (UIKit + 0x00b9c600 ) _performChangesWithTransitionContext 0x0000000190594f2c (UIKit + 0x00a86f2c ) -[_UICanvasDeviceOrientationSettingsDiffAction _updateDeviceOrientationWithSettingObserverContext:canvas:transitionContext:] 0x0000000190594dc0 (UIKit + 0x00a86dc0 ) __133-[_UICanvasDeviceOrientationSettingsDiffAction performActionsForCanvas:withUpdatedScene:settingsDiff:fromSettings:transitionContext:]_block_invoke 0x00000001906aa3c8 (UIKit + 0x00b9c3c8 ) _performActionsWithDelayForTransitionContext 0x0000000190594d0c (UIKit + 0x00a86d0c ) -[_UICanvasDeviceOrientationSettingsDiffAction performActionsForCanvas:withUpdatedScene:settingsDiff:fromSettings:transitionContext:] 0x00000001902f575c (UIKit + 0x007e775c ) -[_UICanvas scene:didUpdateWithDiff:transitionContext:completion:] 0x00000001901972a4 (UIKit + 0x006892a4 ) -[UIApplicationSceneClientAgent scene:handleEvent:withCompletion:] 0x0000000188c26ca0 (FrontBoardServices + 0x0000cca0 ) __80-[FBSSceneImpl updater:didUpdateSettings:withDiff:transitionContext:completion:]_block_invoke.362 0x0000000185ee2a10 (libdispatch.dylib + 0x00001a10 ) _dispatch_client_callout 0x0000000185f1e9c0 (libdispatch.dylib + 0x0003d9c0 ) _dispatch_block_invoke_direct$VARIANT$armv81 0x0000000188c5a7f4 (FrontBoardServices + 0x000407f4 ) __FBSSERIALQUEUE_IS_CALLING_OUT_TO_A_BLOCK__ 0x0000000188c5a498 (FrontBoardServices + 0x00040498 ) -[FBSSerialQueue _performNext] 0x0000000188c5aa34 (FrontBoardServices + 0x00040a34 ) -[FBSSerialQueue _performNextFromRunLoopSource] 0x000000018650b778 (CoreFoundation + 0x000eb778 ) __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ 0x000000018650b6f8 (CoreFoundation + 0x000eb6f8 ) __CFRunLoopDoSource0 0x000000018650af80 (CoreFoundation + 0x000eaf80 ) __CFRunLoopDoSources0 0x0000000186508b58 (CoreFoundation + 0x000e8b58 ) __CFRunLoopRun 0x0000000186428c54 (CoreFoundation + 0x00008c54 ) CFRunLoopRunSpecific 0x00000001882d4f80 (GraphicsServices + 0x0000af80 ) GSEventRunModal 0x000000018fb815c0 (UIKit + 0x000735c0 ) UIApplicationMain 0x0000000104a107d0 (Chrome -chrome_exe_main.mm:54 ) main 0x0000000185f48568 (libdyld.dylib + 0x00001568 ) start
,
Apr 16 2018
pmadalla@, Could you try recreating this in simulator? I wasn't able to do so. I don't have access to an iPhone X device. If not reproducible on simulator, i'd acquire a device.
,
Apr 24 2018
Sorry for the delay in updating. This issue can be reproduced on Simulator as well. Below is the recoded video of steps from original report. Note: You don't need to double tab quickly in step#7. Just tapping cancel button once crashes the app. https://drive.google.com/file/d/1UvkAS-Ox7a2sqWU0g7AQZnhy-ZWaix-H/view Tested on iOS11.4 iPhoneX Simulator. M68.0.3405.0 canary.
,
Oct 26
From the variety of crashes, this class of crashes may not be specific to Payments. For example, some crashes of this signature has a full stack like this: Thread 0 (id: 0x303) CRASHED [EXC_SOFTWARE / UNCAUGHT_NS_EXCEPTION @ 0x000000019a20eef8 ] MAGIC SIGNATURE THREAD Stack Quality69%Show frame trust levels 0x000000019a20eef8 (CoreFoundation + 0x0011def8 ) __exceptionPreprocess 0x00000001993dca3c (libobjc.A.dylib + 0x00006a3c ) objc_exception_throw 0x000000019a184858 (CoreFoundation + 0x00093858 ) _CFThrowFormattedException 0x000000019a0f4bc4 (CoreFoundation + 0x00003bc4 ) -[__NSArrayM objectAtIndex:] 0x000000010156b694 (Chrome -list_model.mm:186 ) -[ListModel itemAtIndexPath:] 0x0000000101600cc4 (Chrome -chrome_table_view_controller.mm:195 ) -[ChromeTableViewController tableView:cellForRowAtIndexPath:] 0x00000001c6fad9b0 (UIKitCore + 0x00b3c9b0 ) 0x00000001c6f79f2c (UIKitCore + 0x00b08f2c ) 0x00000001c6f7a474 (UIKitCore + 0x00b09474 ) 0x00000001c6f45bf8 (UIKitCore + 0x00ad4bf8 ) 0x00000001c6f584a4 (UIKitCore + 0x00ae74a4 ) 0x00000001c6f58394 (UIKitCore + 0x00ae7394 ) 0x0000000101600850 (Chrome -chrome_table_view_controller.mm:168 ) -[ChromeTableViewController reconfigureCellsForItems:] 0x0000000101651a94 (Chrome -reading_list_table_view_controller.mm:328 ) -[ReadingListTableViewController itemHasChangedAfterDelay:] 0x000000010165f0a8 (Chrome -reading_list_mediator.mm:197 ) __43-[ReadingListMediator fetchFaviconForItem:]_block_invoke 0x000000010165ef14 (Chrome -reading_list_mediator.mm:204 ) -[ReadingListMediator fetchFaviconForItem:] 0x0000000101653604 (Chrome -reading_list_table_view_controller.mm:551 ) -[ReadingListTableViewController loadItemsFromArray:toSection:] 0x0000000101653404 (Chrome -reading_list_table_view_controller.mm:532 ) -[ReadingListTableViewController loadItems] 0x000000010165180c (Chrome -reading_list_table_view_controller.mm:290 ) -[ReadingListTableViewController loadModel] 0x0000000101650e64 (Chrome -reading_list_table_view_controller.mm:178 ) -[ReadingListTableViewController reloadData] 0x000000010165f5cc (Chrome -reading_list_mediator.mm:278 ) -[ReadingListMediator readingListModelDidApplyChanges:] 0x000000010140fa20 (Chrome -reading_list_model_impl.cc:438 ) ReadingListModelImpl::SetEntryDistilledInfo(GURL const&, base::FilePath const&, GURL const&, long long, base::Time const&) 0x000000010151c628 (Chrome -reading_list_download_service.cc:258 ) ReadingListDownloadService::OnDownloadEnd(GURL const&, GURL const&, URLDownloader::SuccessState, base::FilePath const&, long long, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) 0x000000010151d274 (Chrome -bind_internal.h:616 ) void base::internal::InvokeHelper<false, void>::MakeItSo<void (ReadingListDownloadService::* const&)(GURL const&, GURL const&, URLDownloader::SuccessState, base::FilePath const&, long long, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&), ReadingListDownloadService*, GURL const&, GURL const&, URLDownloader::SuccessState, base::FilePath const&, long long, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&>(void (ReadingListDownloadService::* const&&&)(GURL const&, GURL const&, URLDownloader::SuccessState, base::FilePath const&, long long, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&), ReadingListDownloadService*&&, GURL const&&&, GURL const&&&, URLDownloader::SuccessState&&, base::FilePath const&&&, long long&&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&&&) 0x000000010151d21c (Chrome -bind_internal.h:689 ) void base::internal::Invoker<base::internal::BindState<void (ReadingListDownloadService::*)(GURL const&, GURL const&, URLDownloader::SuccessState, base::FilePath const&, long long, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&), base::internal::UnretainedWrapper<ReadingListDownloadService> >, void (GURL const&, GURL const&, URLDownloader::SuccessState, base::FilePath const&, long long, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&)>::RunImpl<void (ReadingListDownloadService::* const&)(GURL const&, GURL const&, URLDownloader::SuccessState, base::FilePath const&, long long, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&), std::__1::tuple<base::internal::UnretainedWrapper<ReadingListDownloadService> > const&, 0ul>(void (ReadingListDownloadService::* const&&&)(GURL const&, GURL const&, URLDownloader::SuccessState, base::FilePath const&, long long, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&), std::__1::tuple<base::internal::UnretainedWrapper<ReadingListDownloadService> > const&&&, std::__1::integer_sequence<unsigned long, 0ul>, GURL const&, GURL const&, URLDownloader::SuccessState&&, base::FilePath const&, long long&&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) 0x000000010151d1b4 (Chrome -bind_internal.h:671 ) base::internal::Invoker<base::internal::BindState<void (ReadingListDownloadService::*)(GURL const&, GURL const&, URLDownloader::SuccessState, base::FilePath const&, long long, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&), base::internal::UnretainedWrapper<ReadingListDownloadService> >, void (GURL const&, GURL const&, URLDownloader::SuccessState, base::FilePath const&, long long, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&)>::Run(base::internal::BindStateBase*, GURL const&, GURL const&, URLDownloader::SuccessState, base::FilePath const&, long long, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) 0x0000000101521510 (Chrome -callback.h:129 ) base::internal::Invoker<base::internal::BindState<URLDownloader::DownloadCompletionHandler(GURL const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, base::FilePath const&, URLDownloader::SuccessState)::$_0, base::internal::UnretainedWrapper<URLDownloader>, GURL, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, base::FilePath, URLDownloader::SuccessState>, void ()>::Run(base::internal::BindStateBase*) 0x000000010151fcf4 (Chrome -callback.h:129 ) URLDownloader::DownloadCompletionHandler(GURL const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, base::FilePath const&, URLDownloader::SuccessState) 0x00000001015226a0 (Chrome -bind_internal.h:689 ) void base::internal::Invoker<base::internal::BindState<void (URLDownloader::*)(GURL const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, base::FilePath const&, URLDownloader::SuccessState), base::internal::UnretainedWrapper<URLDownloader>, GURL, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, base::FilePath>, void (URLDownloader::SuccessState)>::RunImpl<void (URLDownloader::* const&)(GURL const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, base::FilePath const&, URLDownloader::SuccessState), std::__1::tuple<base::internal::UnretainedWrapper<URLDownloader>, GURL, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, base::FilePath> const&, 0ul, 1ul, 2ul, 3ul>(void (URLDownloader::* const&&&)(GURL const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, base::FilePath const&, URLDownloader::SuccessState), std::__1::tuple<base::internal::UnretainedWrapper<URLDownloader>, GURL, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, base::FilePath> const&&&, std::__1::integer_sequence<unsigned long, 0ul, 1ul, 2ul, 3ul>, URLDownloader::SuccessState&&) 0x0000000101522604 (Chrome -bind_internal.h:671 ) base::internal::Invoker<base::internal::BindState<void (URLDownloader::*)(GURL const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, base::FilePath const&, URLDownloader::SuccessState), base::internal::UnretainedWrapper<URLDownloader>, GURL, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, base::FilePath>, void (URLDownloader::SuccessState)>::Run(base::internal::BindStateBase*, URLDownloader::SuccessState) 0x0000000101522260 (Chrome -callback.h:99 ) base::OnceCallback<void (URLDownloader::SuccessState)>::Run(URLDownloader::SuccessState) 0x0000000101522170 (Chrome -bind_internal.h:416 ) void base::internal::FunctorTraits<void (*)(base::OnceCallback<void (URLDownloader::SuccessState)>, std::__1::unique_ptr<URLDownloader::SuccessState, std::__1::default_delete<URLDownloader::SuccessState> >*), void>::Invoke<void (*)(base::OnceCallback<void (URLDownloader::SuccessState)>, std::__1::unique_ptr<URLDownloader::SuccessState, std::__1::default_delete<URLDownloader::SuccessState> >*), base::OnceCallback<void (URLDownloader::SuccessState)>, std::__1::unique_ptr<URLDownloader::SuccessState, std::__1::default_delete<URLDownloader::SuccessState> >*>(void (*&&)(base::OnceCallback<void (URLDownloader::SuccessState)>, std::__1::unique_ptr<URLDownloader::SuccessState, std::__1::default_delete<URLDownloader::SuccessState> >*), base::OnceCallback<void (URLDownloader::SuccessState)>&&, std::__1::unique_ptr<URLDownloader::SuccessState, std::__1::default_delete<URLDownloader::SuccessState> >*&&) 0x000000010152213c (Chrome -bind_internal.h:616 ) void base::internal::Invoker<base::internal::BindState<void (*)(base::OnceCallback<void (URLDownloader::SuccessState)>, std::__1::unique_ptr<URLDownloader::SuccessState, std::__1::default_delete<URLDownloader::SuccessState> >*), base::OnceCallback<void (URLDownloader::SuccessState)>, base::internal::OwnedWrapper<std::__1::unique_ptr<URLDownloader::SuccessState, std::__1::default_delete<URLDownloader::SuccessState> > > >, void ()>::RunImpl<void (*)(base::OnceCallback<void (URLDownloader::SuccessState)>, std::__1::unique_ptr<URLDownloader::SuccessState, std::__1::default_delete<URLDownloader::SuccessState> >*), std::__1::tuple<base::OnceCallback<void (URLDownloader::SuccessState)>, base::internal::OwnedWrapper<std::__1::unique_ptr<URLDownloader::SuccessState, std::__1::default_delete<URLDownloader::SuccessState> > > >, 0ul, 1ul>(void (*&&)(base::OnceCallback<void (URLDownloader::SuccessState)>, std::__1::unique_ptr<URLDownloader::SuccessState, std::__1::default_delete<URLDownloader::SuccessState> >*), std::__1::tuple<base::OnceCallback<void (URLDownloader::SuccessState)>, base::internal::OwnedWrapper<std::__1::unique_ptr<URLDownloader::SuccessState, std::__1::default_delete<URLDownloader::SuccessState> > > >&&, std::__1::integer_sequence<unsigned long, 0ul, 1ul>) 0x0000000101c388f4 (Chrome -callback.h:99 ) base::(anonymous namespace)::RunIfNotCanceledThenUntrack(base::CancellationFlag const*, base::OnceCallback<void ()>, base::OnceCallback<void ()>) 0x0000000101c390fc (Chrome -bind_internal.h:416 ) base::internal::Invoker<base::internal::BindState<void (*)(base::CancellationFlag const*, base::OnceCallback<void ()>, base::OnceCallback<void ()>), base::internal::OwnedWrapper<base::CancellationFlag>, base::OnceCallback<void ()>, base::OnceCallback<void ()> >, void ()>::RunOnce(base::internal::BindStateBase*) 0x0000000101c5accc (Chrome -callback.h:99 ) base::(anonymous namespace)::PostTaskAndReplyRelay::RunReply(base::(anonymous namespace)::PostTaskAndReplyRelay) 0x0000000101c5ad50 (Chrome -bind_internal.h:416 ) base::internal::Invoker<base::internal::BindState<void (*)(base::(anonymous namespace)::PostTaskAndReplyRelay), base::(anonymous namespace)::PostTaskAndReplyRelay>, void ()>::RunOnce(base::internal::BindStateBase*) 0x0000000101c024cc (Chrome -callback.h:99 ) base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) 0x0000000101c14810 (Chrome -message_loop.cc:434 ) base::MessageLoop::RunTask(base::PendingTask*) 0x0000000101c14b50 (Chrome -message_loop.cc:445 ) base::MessageLoop::DoWork() 0x0000000101c79d30 (Chrome -message_pump_mac.mm:455 ) base::MessagePumpCFRunLoopBase::RunWork() 0x0000000101c797c4 (Chrome -message_pump_mac.mm:431 ) base::MessagePumpCFRunLoopBase::RunWorkSource(void*) 0x000000019a19d5b4 (CoreFoundation + 0x000ac5b4 ) __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ 0x000000019a19d534 (CoreFoundation + 0x000ac534 ) __CFRunLoopDoSource0 0x000000019a19ce18 (CoreFoundation + 0x000abe18 ) __CFRunLoopDoSources0 0x000000019a197ce4 (CoreFoundation + 0x000a6ce4 ) __CFRunLoopRun 0x000000019a1975b4 (CoreFoundation + 0x000a65b4 ) CFRunLoopRunSpecific 0x000000019c40b580 (GraphicsServices + 0x0000b580 ) GSEventRunModal 0x00000001c6d54bc4 (UIKitCore + 0x008e3bc4 ) 0x000000010119040c (Chrome -chrome_exe_main.mm:54 ) main 0x0000000199c57b90 (libdyld.dylib + 0x00000b90 ) start exceptionReason *** -[__NSArrayM objectAtIndex:]: index 6 beyond bounds [0 .. 5] type exception exceptionName NSRangeException
,
Oct 26
Hey Peter, could you please include a link to the crash website for this stack trace, the one in the original post no longer exists.
,
Oct 26
This crash/ search query will give you access to all: https://crash.corp.google.com/browse?q=product.name%3D%27Chrome_iOS%27%20AND%20expanded_custom_data.ChromeCrashProto.channel%3D%27%27%20AND%20EXISTS%20(SELECT%201%20FROM%20UNNEST(CrashedStackTrace.StackFrame)%20WHERE%20FunctionName%20LIKE%20%27%25ListModel+itemAtIndexPath%25%27) |
|||
►
Sign in to add a comment |
|||
Comment 1 by rouslan@chromium.org
, Apr 12 2018Status: Assigned (was: Untriaged)