New issue
Advanced search Search tips

Issue 853437 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Jul 4
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 3
Type: Bug



Sign in to add a comment

App crashing on Android TV

Reported by nicholas...@gmail.com, Jun 16 2018

Issue description

THIS TEMPLATE IS FOR FILING BUGS ON THE ANDROID SYSTEM WEBVIEW. GENERAL WEB
BUGS SHOULD BE FILED USING A DIFFERENT TEMPLATE!

Device name: Sony Bravia XBR-55X810C
Android version: 7.0
WebView version (from system settings -> Apps -> Android System WebView): 66.0.3359.126
Application: com.scheist.jukeBox
Application version: 1.7.7

URLs (if applicable): https://play.google.com/store/apps/details?id=com.scheist.jukeBox



Steps to reproduce:
(1) Open app
(2) Type in EditText (text box for specified file)
(3) Press back to hide keyboard
(4) Wait 

Expected result:
Files in grey menu displayed

Actual result:
app crashes and cannot operate any further

 
jukeBox-log.txt
55.1 KB View Download
Labels: Needs-triage-Mobile
Cc: pnangunoori@chromium.org
Components: OS>Kernel>Power
Labels: WV-Triaged TE-Hardware-Dependency
Adding the label 'TE-Hardware-Dependency' for the further triage as the application requires Android TV to reproduce the issue.

From the logs provided, crash could be because of PowerManagerNotifier. Hence, adding the component OS>Kernel>Power.

Thanks!

Comment 3 by derat@chromium.org, Jun 18 2018

Components: -OS>Kernel>Power
OS>Kernel>Power is only used for Chrome OS. Please use an Android issue tracker for Android bugs.

Comment 4 by torne@chromium.org, Jun 18 2018

This isn't likely to be anything to do with PowerManagerNotifier. Crash is:

Operating system: Android
                  Sony/SVP4KDTV15_UC/SVP-DTV15:7.0/NRD91N.S20/5.381:user/release-keys
CPU: arm
     2 CPUs

GPU: UNKNOWN

Crash reason:  
Crash address: 0x0
Process uptime: not available

Thread 0 (crashed)
 0  libwebviewchromium.so!disk_cache::SimpleBackendImpl::CreateOrFindActiveOrDoomedEntry(unsigned long long, std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> > const&, std::__ndk1::vector<disk_cache::SimpleBackendImpl::PostDoomWaiter, std::__ndk1::allocator<disk_cache::SimpleBackendImpl::PostDoomWaiter> >**) [__hash_table : 0 + 0x0]
     r0 = 0x85ad4f90    r1 = 0x89268d39    r2 = 0x00000001    r3 = 0x8922c42f
     r4 = 0x7882e229    r5 = 0x00000000    r6 = 0x00000002    r7 = 0x0000002e
     r8 = 0xef96f88e    r9 = 0x9655ad50   r10 = 0xa6c0a780   r12 = 0x8bc77080
     fp = 0x00000001    sp = 0x8bc77038    lr = 0x00000008    pc = 0x98c63082
    Found by: given as instruction pointer in context
 1  libwebviewchromium.so!disk_cache::SimpleBackendImpl::OpenEntry(std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> > const&, disk_cache::Entry**, base::RepeatingCallback<void (int)> const&) [simple_backend_impl.cc : 395 + 0xb]
     r4 = 0x8bc770fc    r5 = 0x0defaced    r6 = 0x0defaced    r7 = 0x0defaced
     r8 = 0x8bc770fc    r9 = 0x0defaced   r10 = 0x00000002    fp = 0x0defaced
     sp = 0x8bc770a8    pc = 0x98c62f63
    Found by: call frame info
 2  libwebviewchromium.so!gpu::ShaderDiskCacheEntry::Cache() [shader_disk_cache.cc : 178 + 0x3]
     r4 = 0x0defaced    r5 = 0x0defaced    r6 = 0x8bc770f0    r7 = 0x98c62f39
     r8 = 0x8bc770fc    r9 = 0x0defaced   r10 = 0x00000002    fp = 0x0defaced
     sp = 0x8bc770e8    pc = 0x99114cd7
    Found by: call frame info
 3  libwebviewchromium.so!gpu::ShaderDiskCache::Cache(std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> > const&, std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> > const&) [shader_disk_cache.cc : 567 + 0x3]
     r4 = 0x0defaced    r5 = 0x8bc77220    r6 = 0x8bc77178    r7 = 0x8bc77160
     r8 = 0x8bc77220    r9 = 0x0defaced   r10 = 0x00000002    fp = 0x0defaced
     sp = 0x8bc77118    pc = 0x99115841
    Found by: call frame info
 4  libwebviewchromium.so!content::GpuProcessHost::StoreShaderToDisk(int, std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> > const&, std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> > const&) [gpu_process_host.cc : 1152 + 0x9]
     r4 = 0x0defaced    r5 = 0x8bc77178    r6 = 0x8bc7716c    r7 = 0x8bc77160
     r8 = 0x8bc77220    r9 = 0x8bc771c0   r10 = 0x00000002    fp = 0x0defaced
     sp = 0x8bc77158    pc = 0x9921530b
    Found by: call frame info
 5  libwebviewchromium.so!viz::mojom::GpuHostStubDispatch::Accept(viz::mojom::GpuHost*, mojo::Message*) [gpu_host.mojom.cc : 0 + 0x9]
     r4 = 0x0defaced    r5 = 0x8bc7738c    r6 = 0x00000001    r7 = 0x99215501
     r8 = 0x8bc771c0    r9 = 0x8bc77220   r10 = 0x00000002    fp = 0x0defaced
     sp = 0x8bc771b8    pc = 0x990d6783
    Found by: call frame info
 6  libwebviewchromium.so!mojo::internal::MultiplexRouter::ProcessIncomingMessage(mojo::internal::MultiplexRouter::MessageWrapper*, mojo::internal::MultiplexRouter::ClientCallBehavior, base::SequencedTaskRunner*) [multiplex_router.cc : 880 + 0x5]
     r4 = 0x00000000    r5 = 0x8bc77454    r6 = 0x00000000    r7 = 0x0defaced
     r8 = 0x0defaced    r9 = 0x00000002   r10 = 0x0defaced    fp = 0x8bc77450
     sp = 0x8bc77388    pc = 0x98d6ddff
    Found by: call frame info
 7  libwebviewchromium.so!mojo::internal::MultiplexRouter::Accept(mojo::Message*) [multiplex_router.cc : 604 + 0x7]
     r4 = 0x0defaced    r5 = 0x00000002    r6 = 0x8bc77420    r7 = 0x00000000
     r8 = 0x8bc77570    r9 = 0x98d6832d   r10 = 0x0defaced    fp = 0x00000000
     sp = 0x8bc773e0    pc = 0x98d6dc11
    Found by: call frame info
 8  libwebviewchromium.so!mojo::Connector::ReadSingleMessage(unsigned int*) [connector.cc : 445 + 0x7]
     r4 = 0x0defaced    r5 = 0x0defaced    r6 = 0x0defaced    r7 = 0x00000000
     r8 = 0x8bc77570    r9 = 0x98d6832d   r10 = 0x0defaced    fp = 0x00000000
     sp = 0x8bc774a0    pc = 0x98d6b15b
    Found by: call frame info
 9  libwebviewchromium.so!mojo::Connector::ReadAllAvailableMessages() [connector.cc : 474 + 0x5]
     r4 = 0x0defaced    r5 = 0x0defaced    r6 = 0x8bc77578    r7 = 0x8bc77574
     r8 = 0x8bc77570    r9 = 0x98d6832d   r10 = 0x0defaced    fp = 0x00000000
     sp = 0x8bc77570    pc = 0x98d6b40d
    Found by: call frame info
10  libwebviewchromium.so!void base::internal::Invoker<base::internal::BindState<void (IPC::SyncChannel::*)(base::WaitableEvent*), base::internal::UnretainedWrapper<IPC::SyncChannel> >, void (base::WaitableEvent*)>::RunImpl<void (IPC::SyncChannel::*)(base::WaitableEvent*), std::__ndk1::tuple<base::internal::UnretainedWrapper<IPC::SyncChannel> >, 0u>(void (IPC::SyncChannel::*&&)(base::WaitableEvent*), std::__ndk1::tuple<base::internal::UnretainedWrapper<IPC::SyncChannel> >&&, std::__ndk1::integer_sequence<unsigned int, 0u>, base::WaitableEvent*&&) + 0xb
     r4 = 0x0defaced    r5 = 0x0defaced    r6 = 0x8bc775bc    r7 = 0x8bc775c8
     r8 = 0x98455b6e    r9 = 0x98d6832d   r10 = 0x0defaced    fp = 0x00000000
     sp = 0x8bc77598    pc = 0x98c43d2b
    Found by: call frame info
11  libwebviewchromium.so!base::internal::Invoker<base::internal::BindState<void (IPC::SyncChannel::*)(base::WaitableEvent*), base::internal::UnretainedWrapper<IPC::SyncChannel> >, void (base::WaitableEvent*)>::RunOnce(base::internal::BindStateBase*, base::WaitableEvent*) + 0x13
     r4 = 0x0defaced    r5 = 0x0defaced    r6 = 0x8bc775bc    r7 = 0x8bc775c8
     r8 = 0x98455b6e    r9 = 0x98d6832d   r10 = 0x0defaced    fp = 0x00000000
     sp = 0x8bc775a8    pc = 0x98c43d1d
    Found by: call frame info
12  libwebviewchromium.so!mojo::SimpleWatcher::OnHandleReady(int, unsigned int, mojo::HandleSignalsState const&) [callback.h : 124 + 0x1]
     r4 = 0x0defaced    r5 = 0x0defaced    r6 = 0x8bc775bc    r7 = 0x8bc775c8
     r8 = 0x98455b6e    r9 = 0x98d6832d   r10 = 0x0defaced    fp = 0x00000000
     sp = 0x8bc775b8    pc = 0x98d681dd
    Found by: call frame info
13  libwebviewchromium.so!void base::internal::InvokeHelper<true, void>::MakeItSo<void (content::FrameInputHandlerImpl::* const&)(int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > const&), base::WeakPtr<content::FrameInputHandlerImpl> const&, int const&, int const&, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > const&>(void (content::FrameInputHandlerImpl::* const&&&)(int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > const&), base::WeakPtr<content::FrameInputHandlerImpl> const&&&, int const&&&, int const&&&, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > const&&&) [bind_internal.h : 550 + 0x9]
     r4 = 0x0defaced    r5 = 0x0defaced    r6 = 0x0defaced    r7 = 0x0defaced
     r8 = 0x0defaced    r9 = 0x98d6832d   r10 = 0x8bc77718    fp = 0x8bc77718
     sp = 0x8bc775f0    pc = 0x98d68413
    Found by: call frame info
14  libwebviewchromium.so!void base::internal::Invoker<base::internal::BindState<void (content::FrameInputHandlerImpl::*)(int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > const&), base::WeakPtr<content::FrameInputHandlerImpl>, int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > >, void ()>::RunImpl<void (content::FrameInputHandlerImpl::* const&)(int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > const&), std::__ndk1::tuple<base::WeakPtr<content::FrameInputHandlerImpl>, int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > > const&, 0u, 1u, 2u, 3u>(void (content::FrameInputHandlerImpl::* const&&&)(int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > const&), std::__ndk1::tuple<base::WeakPtr<content::FrameInputHandlerImpl>, int, int, std::__ndk1::vector<ui::ImeTextSpan, std::__ndk1::allocator<ui::ImeTextSpan> > > const&&&, std::__ndk1::integer_sequence<unsigned int, 0u, 1u, 2u, 3u>) [bind_internal.h : 604 + 0x3]
     r4 = 0x8bc77718    r5 = 0x8bc77644    r6 = 0x0defaced    r7 = 0x0defaced
     r8 = 0x0defaced    r9 = 0x98d6832d   r10 = 0x8bc77718    fp = 0x8bc77718
     sp = 0x8bc77610    pc = 0x98d683ed
    Found by: call frame info
15  libwebviewchromium.so!base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) [callback.h : 95 + 0x1]
     r4 = 0x8bc77718    r5 = 0x8bc77644    r6 = 0x0defaced    r7 = 0x0defaced
     r8 = 0x0defaced    r9 = 0x98d6832d   r10 = 0x8bc77718    fp = 0x8bc77718
     sp = 0x8bc77620    pc = 0x98872ab5
    Found by: call frame info
16  libwebviewchromium.so!base::MessageLoop::RunTask(base::PendingTask*) [message_loop.cc : 395 + 0x5]
     r4 = 0x0defaced    r5 = 0x0defaced    r6 = 0x0defaced    r7 = 0x8bc776ac
     r8 = 0x98241c06    r9 = 0x98d6832d   r10 = 0x8bc77718    fp = 0x8bc77718
     sp = 0x8bc77670    pc = 0x988827e1
    Found by: call frame info
17  libwebviewchromium.so!base::MessageLoop::DoWork() [message_loop.cc : 407 + 0x7]
     r4 = 0x0defaced    r5 = 0x8bc77718    r6 = 0x0defaced    r7 = 0x0defaced
     r8 = 0x8bc777d8    r9 = 0x8bc77758   r10 = 0x8bc77718    fp = 0x00000000
     sp = 0x8bc77718    pc = 0x98882b89
    Found by: call frame info
18  libwebviewchromium.so!base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) [message_pump_libevent.cc : 220 + 0x7]
     r4 = 0x0defaced    r5 = 0x0defaced    r6 = 0x0defaced    r7 = 0x0defaced
     r8 = 0x00000000    r9 = 0x8bc77860   r10 = 0x00000000    fp = 0x00000000
     sp = 0x8bc77840    pc = 0x988838d5
    Found by: call frame info
19  libwebviewchromium.so!base::RunLoop::Run() [run_loop.cc : 133 + 0x5]
     r4 = 0x8bc778c4    r5 = 0x0defaced    r6 = 0x0defaced    r7 = 0x0defaced
     r8 = 0x8bc778c4    r9 = 0x00000000   r10 = 0x988a6847    fp = 0x00000058
     sp = 0x8bc77890    pc = 0x98890599
    Found by: call frame info
20  libwebviewchromium.so!content::BrowserThreadImpl::IOThreadRun(base::RunLoop*) [browser_thread_impl.cc : 233 + 0x3]
     r4 = 0x8bc778c4    r5 = 0x0defaced    r6 = 0x0defaced    r7 = 0x0defaced
     r8 = 0x8bc778c4    r9 = 0x00000000   r10 = 0x988a6847    fp = 0x00000058
     sp = 0x8bc77898    pc = 0x99184639
    Found by: call frame info
21  libwebviewchromium.so!content::BrowserThreadImpl::Run(base::RunLoop*) [browser_thread_impl.cc : 260 + 0x7]
     r4 = 0x8bc778c4    r5 = 0x0defaced    r6 = 0x0defaced    r7 = 0x0defaced
     r8 = 0x8bc778c4    r9 = 0x00000000   r10 = 0x988a6847    fp = 0x00000058
     sp = 0x8bc778a8    pc = 0x99184691
    Found by: call frame info
22  libwebviewchromium.so!base::Thread::ThreadMain() [thread.cc : 338 + 0x5]
     r4 = 0x0defaced    r5 = 0x0defaced    r6 = 0x0defaced    r7 = 0x0defaced
     r8 = 0x8bc778c4    r9 = 0x00000000   r10 = 0x988a6847    fp = 0x00000058
     sp = 0x8bc778c0    pc = 0x988a77c7
    Found by: call frame info
23  libwebviewchromium.so!base::(anonymous namespace)::ThreadFunc(void*) [platform_thread_posix.cc : 76 + 0x7]
     r4 = 0x0defaced    r5 = 0x0defaced    r6 = 0x8bc77920    r7 = 0x0defaced
     r8 = 0x0defaced    r9 = 0x0defaced   r10 = 0x988a6847    fp = 0x00000058
     sp = 0x8bc778f8    pc = 0x988a6883
    Found by: call frame info
24  libc.so + 0x46f13
     r4 = 0x8bc77920    r5 = 0xb0192efd    r6 = 0x8bc77920    r7 = 0x00000078
     r8 = 0x0defaced    r9 = 0x0defaced   r10 = 0x988a6847    fp = 0x00000058
     sp = 0x8bc77910    pc = 0xb0192f15
    Found by: call frame info
25  libc.so + 0x19cdd
     sp = 0x8bc77918    pc = 0xb0165cdf
    Found by: stack scanning
26  libwebviewchromium.so!base::PlatformThread::SetCurrentThreadPriority(base::ThreadPriority) [platform_thread_posix.cc : 269 + 0xb]
     sp = 0x8bc77954    pc = 0x988a6847
    Found by: stack scanning

Comment 5 by torne@chromium.org, Jun 18 2018

Cc: boliu@chromium.org
Components: Internals>GPU
null pointer deref in the shader disk cache code.
I think I have solved the issue. I am not sure why the app tombstoned in that library. It was related a string going out of bounds. Thank you for your time.
Status: WontFix (was: Unconfirmed)

Sign in to add a comment