New issue
Advanced search Search tips

Issue 841974 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
Closed: May 2018
Cc:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Bug

Blocking:
issue 823534



Sign in to add a comment

Looping through the list of renderers: FATAL:process_posix.cc(296)] Check failed: IsValid().

Project Member Reported by alemate@chromium.org, May 10 2018

Issue description

Chrome OS, canary, samus, ToT chrome, Debug build.

Crash when entering settings:

[20731:20731:0510/145252.569880:FATAL:process_posix.cc(296)] Check failed: IsValid(). 
#0 0x5b17073cb8c8 base::debug::StackTrace::StackTrace()
#1 0x5b170718001c base::debug::StackTrace::StackTrace()
#2 0x5b17071d495a logging::LogMessage::~LogMessage()
#3 0x5b17073ebfba base::Process::Pid()
#4 0x5b1706c757a8 ProcessMemoryMetricsEmitter::GetNumberOfExtensions()
#5 0x5b1706c74f5c ProcessMemoryMetricsEmitter::CollateResults()
#6 0x5b1706c74992 ProcessMemoryMetricsEmitter::ReceivedMemoryDump()
#7 0x5b1706c7b68f _ZN4base8internal13FunctorTraitsIM27ProcessMemoryMetricsEmitterFvbNSt3__110unique_ptrIN22memory_instrumentation16GlobalMemoryDumpENS3_14default_deleteIS6_EEEEEvE6InvokeISB_RK13scoped_refptrIS2_EJbS9_EEEvT_OT0_DpOT1_
#8 0x5b1706c7b48a _ZN4base8internal12InvokeHelperILb0EvE8MakeItSoIRKM27ProcessMemoryMetricsEmitterFvbNSt3__110unique_ptrIN22memory_instrumentation16GlobalMemoryDumpENS5_14default_deleteIS8_EEEEEJRK13scoped_refptrIS4_EbSB_EEEvOT_DpOT0_
#9 0x5b1706c7b400 _ZN4base8internal7InvokerINS0_9BindStateIM27ProcessMemoryMetricsEmitterFvbNSt3__110unique_ptrIN22memory_instrumentation16GlobalMemoryDumpENS4_14default_deleteIS7_EEEEEJ13scoped_refptrIS3_EEEEFvbSA_EE7RunImplIRKSC_RKNS4_5tupleIJSE_EEEJLm0EEEEvOT_OT0_NS4_16integer_sequenceImJXspT1_EEEEObOSA_
#10 0x5b1706c7b31a _ZN4base8internal7InvokerINS0_9BindStateIM27ProcessMemoryMetricsEmitterFvbNSt3__110unique_ptrIN22memory_instrumentation16GlobalMemoryDumpENS4_14default_deleteIS7_EEEEEJ13scoped_refptrIS3_EEEEFvbSA_EE3RunEPNS0_13BindStateBaseEbOSA_
#11 0x5b170413b601 _ZNKR4base17RepeatingCallbackIFvbN21enterprise_management10SignedDataEEE3RunEbS2_
#12 0x5b170b6da562 memory_instrumentation::(anonymous namespace)::WrapGlobalMemoryDump()
#13 0x5b170b6dac40 _ZN4base8internal13FunctorTraitsIPFvNS_17RepeatingCallbackIFvbNSt3__110unique_ptrIN22memory_instrumentation16GlobalMemoryDumpENS3_14default_deleteIS6_EEEEEEEbN4mojo9StructPtrINS5_5mojom16GlobalMemoryDumpEEEEvE6InvokeIRKSI_JRKSB_bSG_EEEvOT_DpOT0_
#14 0x5b170b6dab8d _ZN4base8internal12InvokeHelperILb0EvE8MakeItSoIRKPFvNS_17RepeatingCallbackIFvbNSt3__110unique_ptrIN22memory_instrumentation16GlobalMemoryDumpENS5_14default_deleteIS8_EEEEEEEbN4mojo9StructPtrINS7_5mojom16GlobalMemoryDumpEEEEJRKSD_bSI_EEEvOT_DpOT0_
#15 0x5b170b6dab30 _ZN4base8internal7InvokerINS0_9BindStateIPFvNS_17RepeatingCallbackIFvbNSt3__110unique_ptrIN22memory_instrumentation16GlobalMemoryDumpENS4_14default_deleteIS7_EEEEEEEbN4mojo9StructPtrINS6_5mojom16GlobalMemoryDumpEEEEJSC_EEEFvbSH_EE7RunImplIRKSJ_RKNS4_5tupleIJSC_EEEJLm0EEEEvOT_OT0_NS4_16integer_sequenceImJXspT1_EEEEObOSH_
#16 0x5b170b6daa4a _ZN4base8internal7InvokerINS0_9BindStateIPFvNS_17RepeatingCallbackIFvbNSt3__110unique_ptrIN22memory_instrumentation16GlobalMemoryDumpENS4_14default_deleteIS7_EEEEEEEbN4mojo9StructPtrINS6_5mojom16GlobalMemoryDumpEEEEJSC_EEEFvbSH_EE3RunEPNS0_13BindStateBaseEbOSH_
#17 0x5b16ff2cdb2b _ZNO4base12OnceCallbackIFvbNSt3__110unique_ptrIN5media16DecodeStatsProtoENS1_14default_deleteIS4_EEEEEE3RunEbS7_
#18 0x5b170b717d21 memory_instrumentation::mojom::Coordinator_RequestGlobalMemoryDump_ForwardToCallback::Accept()
#19 0x5b1707583dad mojo::InterfaceEndpointClient::HandleValidatedMessage()
#20 0x5b17075829a1 mojo::InterfaceEndpointClient::HandleIncomingMessageThunk::Accept()
#21 0x5b17075b5f22 mojo::FilterChain::Accept()
#22 0x5b1707586bc5 mojo::InterfaceEndpointClient::HandleIncomingMessage()
#23 0x5b170759155b mojo::internal::MultiplexRouter::ProcessIncomingMessage()
#24 0x5b1707590a75 mojo::internal::MultiplexRouter::Accept()
#25 0x5b17075b5f22 mojo::FilterChain::Accept()
#26 0x5b170757d24f mojo::Connector::ReadSingleMessage()
#27 0x5b170757e2ca mojo::Connector::ReadAllAvailableMessages()
#28 0x5b170757e095 mojo::Connector::OnHandleReadyInternal()
#29 0x5b170757df7b mojo::Connector::OnWatcherHandleReady()
#30 0x5b16ff528d3f _ZN4base8internal13FunctorTraitsIMN5media19BlockingUrlProtocolEFviEvE6InvokeIS5_PS3_JiEEEvT_OT0_DpOT1_
#31 0x5b16ff528c6f _ZN4base8internal12InvokeHelperILb0EvE8MakeItSoIRKMN5media19BlockingUrlProtocolEFviEJPS5_iEEEvOT_DpOT0_
#32 0x5b170757f782 _ZN4base8internal7InvokerINS0_9BindStateIMN4mojo9ConnectorEFvjEJNS0_17UnretainedWrapperIS4_EEEEEFvjEE7RunImplIRKS6_RKNSt3__15tupleIJS8_EEEJLm0EEEEvOT_OT0_NSF_16integer_sequenceImJXspT1_EEEEOj
#33 0x5b170757f697 _ZN4base8internal7InvokerINS0_9BindStateIMN4mojo9ConnectorEFvjEJNS0_17UnretainedWrapperIS4_EEEEEFvjEE3RunEPNS0_13BindStateBaseEj
#34 0x5b16fed147a8 _ZNKR4base17RepeatingCallbackIFvN11google_apis17DriveApiErrorCodeEEE3RunES2_
#35 0x5b16fff7912f mojo::SimpleWatcher::DiscardReadyState()
#36 0x5b16fff793df _ZN4base8internal13FunctorTraitsIPFvRKNS_17RepeatingCallbackIFvjEEEjRKN4mojo18HandleSignalsStateEEvE6InvokeIRKSC_JS6_jSA_EEEvOT_DpOT0_
#37 0x5b16fff7937d _ZN4base8internal12InvokeHelperILb0EvE8MakeItSoIRKPFvRKNS_17RepeatingCallbackIFvjEEEjRKN4mojo18HandleSignalsStateEEJS8_jSC_EEEvOT_DpOT0_
#38 0x5b16fff79320 _ZN4base8internal7InvokerINS0_9BindStateIPFvRKNS_17RepeatingCallbackIFvjEEEjRKN4mojo18HandleSignalsStateEEJS5_EEEFvjSB_EE7RunImplIRKSD_RKNSt3__15tupleIJS5_EEEJLm0EEEEvOT_OT0_NSK_16integer_sequenceImJXspT1_EEEEOjSB_
#39 0x5b16fff79232 _ZN4base8internal7InvokerINS0_9BindStateIPFvRKNS_17RepeatingCallbackIFvjEEEjRKN4mojo18HandleSignalsStateEEJS5_EEEFvjSB_EE3RunEPNS0_13BindStateBaseEjSB_
#40 0x5b16fe73b408 _ZNKR4base17RepeatingCallbackIFvjRKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEEE3RunEjS9_
#41 0x5b17075ceb79 mojo::SimpleWatcher::OnHandleReady()
#42 0x5b16ff43e5c3 _ZN4base8internal13FunctorTraitsIMN5media22DecryptingAudioDecoderEFviNS2_9Decryptor6StatusERKNSt3__14listI13scoped_refptrINS2_11AudioBufferEENS6_9allocatorISA_EEEEEvE6InvokeISH_RKNS_7WeakPtrIS3_EEJRKiS5_SF_EEEvT_OT0_DpOT1_
#43 0x5b17075cf6d5 _ZN4base8internal12InvokeHelperILb1EvE8MakeItSoIRKMN4mojo13SimpleWatcherEFvijRKNS4_18HandleSignalsStateEERKNS_7WeakPtrIS5_EEJRKiRKjS8_EEEvOT_OT0_DpOT1_
#44 0x5b17075cf632 _ZN4base8internal7InvokerINS0_9BindStateIMN4mojo13SimpleWatcherEFvijRKNS3_18HandleSignalsStateEEJNS_7WeakPtrIS4_EEijS5_EEEFvvEE7RunImplIRKS9_RKNSt3__15tupleIJSB_ijS5_EEEJLm0ELm1ELm2ELm3EEEEvOT_OT0_NSI_16integer_sequenceImJXspT1_EEEE
#45 0x5b17075cf4ac _ZN4base8internal7InvokerINS0_9BindStateIMN4mojo13SimpleWatcherEFvijRKNS3_18HandleSignalsStateEEJNS_7WeakPtrIS4_EEijS5_EEEFvvEE3RunEPNS0_13BindStateBaseE
#46 0x5b16fddb98ec _ZNO4base12OnceCallbackIFvvEE3RunEv
#47 0x5b17071814be base::debug::TaskAnnotator::RunTask()
#48 0x5b170742b249 base::internal::IncomingTaskQueue::RunTask()
#49 0x5b17071ee41d base::MessageLoop::RunTask()
#50 0x5b17071ee6b8 base::MessageLoop::DeferOrRunPendingTask()
#51 0x5b17071ee9c8 base::MessageLoop::DoWork()
#52 0x5b17074011c0 base::MessagePumpLibevent::Run()
#53 0x5b17071edc0b base::MessageLoop::Run()
#54 0x5b170727d4ed base::RunLoop::Run()
#55 0x5b17063e6031 ChromeBrowserMainParts::MainMessageLoopRun()
#56 0x5b1700b26531 content::BrowserMainLoop::RunMainMessageLoopParts()
#57 0x5b1700b2eb70 content::BrowserMainRunnerImpl::Run()
#58 0x5b1700b196a1 content::BrowserMain()
#59 0x5b170638e3b3 content::RunNamedProcessTypeMain()
#60 0x5b1706392731 content::ContentMainRunnerImpl::Run()
#61 0x5b1706385345 content::ContentServiceManagerMainDelegate::RunEmbedderProcess()

 
Cc: asvitk...@chromium.org isherman@chromium.org
Cc: kenrb@chromium.org
+kenrb@chromium.org ad Render Process Host owner.

This is actually crash in looping through the list or render processes:

  auto iter = content::RenderProcessHost::AllHostsIterator();                    
  while (!iter.IsAtEnd()) {                                                      
    if (iter.GetCurrentValue()->GetProcess().Pid() == pid) {                     
      rph_id = iter.GetCurrentValue()->GetID();                                  
      break;                                                                     
    }                                                                            
    iter.Advance();                                                              
  }                                                                              

Summary: Looping through the list of renderers: FATAL:process_posix.cc(296)] Check failed: IsValid(). (was: FATAL:process_posix.cc(296)] Check failed: IsValid().)
Blocking: 823534
Labels: -Restrict-View-Google
Project Member

Comment 5 by bugdroid1@chromium.org, May 10 2018

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/6f5ed232f4934bc9ea33b41ed0996acb21273043

commit 6f5ed232f4934bc9ea33b41ed0996acb21273043
Author: Alexander Alekseev <alemate@chromium.org>
Date: Thu May 10 23:41:53 2018

Fix crash in ProcessMemoryMetricsEmitter::GetNumberOfExtensions .


Bug:  841974 
Change-Id: Ie847933ad8090024a14807cc4db629a837266092
Reviewed-on: https://chromium-review.googlesource.com/1054638
Reviewed-by: Ilya Sherman <isherman@chromium.org>
Commit-Queue: Alexander Alekseev <alemate@chromium.org>
Cr-Commit-Position: refs/heads/master@{#557723}
[modify] https://crrev.com/6f5ed232f4934bc9ea33b41ed0996acb21273043/chrome/browser/metrics/process_memory_metrics_emitter.cc

Owner: alemate@chromium.org
Status: Fixed (was: Untriaged)

Sign in to add a comment