New issue
Advanced search Search tips

Issue 865887 link

Starred by 2 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 2
Type: Bug



Sign in to add a comment

v8.browsing_desktop/browse:media:tumblr crashes on Mac

Project Member Reported by nednguyen@chromium.org, Jul 20

Issue description

Log:
https://console.developers.google.com/m/cloudstorage/b/chrome-telemetry-output/o/26d4542e-8bd3-11e8-a742-a860b631ed82

Screenshot:
https://console.developers.google.com/m/cloudstorage/b/chrome-telemetry-output/o/27d22894-8bd3-11e8-84cd-a860b631ed82

Minidump:
https://console.developers.google.com/m/cloudstorage/b/chrome-telemetry-output/o/25c4d75e-8bd3-11e8-8727-a860b631ed82

Chrome stack:
Stack Trace:
********************************************************************************
	Operating system: Mac OS X
	                  10.13.3 17D47
	CPU: amd64
	     family 6 model 70 stepping 1
	     8 CPUs
	
	GPU: UNKNOWN
	
	Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
	Crash address: 0x8
	Process uptime: 2 seconds
	
	Thread 0 (crashed)
	 0  Google Chrome Framework!ChromeMain + 0x5c0bad8
	    rax = 0x0000000000000000   rdx = 0x0000000102edd008
	    rcx = 0x000000010aad96a0   rbx = 0x0000004a1d6c1840
	    rsi = 0x00000024358faaf8   rdi = 0x00007ffeecd3a350
	    rbp = 0x00007ffeecd3a390   rsp = 0x00007ffeecd3a350
	     r8 = 0x9e3779b97f4a7c55    r9 = 0x0000000000000003
	    r10 = 0x0000000000000000   r11 = 0x00007fc11f500000
	    r12 = 0x000000399a066a58   r13 = 0x000000399a18ec90
	    r14 = 0x00007fc11f531c60   r15 = 0x00007ffeecd3a350
	    rip = 0x0000000108c1ee18
	    Found by: given as instruction pointer in context
	 1  Google Chrome Framework!ChromeMain + 0x1d2c059
	    rbp = 0x00007ffeecd3a500   rsp = 0x00007ffeecd3a3a0
	    rip = 0x0000000104d3f399
	    Found by: previous frame's frame pointer
	 2  Google Chrome Framework!ChromeMain + 0x1d2c0ed
	    rbp = 0x00007ffeecd3a510   rsp = 0x00007ffeecd3a510
	    rip = 0x0000000104d3f42d
	    Found by: previous frame's frame pointer
	 3  Google Chrome Framework!ChromeMain + 0x1d229af
	    rbp = 0x00007ffeecd3a580   rsp = 0x00007ffeecd3a520
	    rip = 0x0000000104d35cef
	    Found by: previous frame's frame pointer
	 4  Google Chrome Framework!ChromeMain + 0x239df2b
	    rbp = 0x00007ffeecd3a620   rsp = 0x00007ffeecd3a590
	    rip = 0x00000001053b126b
	    Found by: previous frame's frame pointer
	 5  Google Chrome Framework!ChromeMain + 0x239dbfc
	    rbp = 0x00007ffeecd3a6c0   rsp = 0x00007ffeecd3a630
	    rip = 0x00000001053b0f3c
	    Found by: previous frame's frame pointer
	 6  Google Chrome Framework!ChromeMain + 0x23134a2
	    rbp = 0x00007ffeecd3a750   rsp = 0x00007ffeecd3a6d0
	    rip = 0x00000001053267e2
	    Found by: previous frame's frame pointer
	 7  Google Chrome Framework!ChromeMain + 0x237c33f
	    rbp = 0x00007ffeecd3a8c0   rsp = 0x00007ffeecd3a760
	    rip = 0x000000010538f67f
	    Found by: previous frame's frame pointer
	 8  Google Chrome Framework!ChromeMain + 0x23134a2
	    rbp = 0x00007ffeecd3a950   rsp = 0x00007ffeecd3a8d0
	    rip = 0x00000001053267e2
	    Found by: previous frame's frame pointer
	 9  Google Chrome Framework!ChromeMain + 0x2332a0f
	    rbp = 0x00007ffeecd3aa30   rsp = 0x00007ffeecd3a960
	    rip = 0x0000000105345d4f
	    Found by: previous frame's frame pointer
	10  Google Chrome Framework!ChromeMain + 0x2332ed8
	    rbp = 0x00007ffeecd3abf0   rsp = 0x00007ffeecd3aa40
	    rip = 0x0000000105346218
	    Found by: previous frame's frame pointer
	11  Google Chrome Framework!ChromeMain + 0x233506a
	    rbp = 0x00007ffeecd3ac20   rsp = 0x00007ffeecd3ac00
	    rip = 0x00000001053483aa
	    Found by: previous frame's frame pointer
	12  Google Chrome Framework!ChromeMain + 0x23255da
	    rbp = 0x00007ffeecd3ac30   rsp = 0x00007ffeecd3ac30
	    rip = 0x000000010533891a
	    Found by: previous frame's frame pointer
	13  Google Chrome Framework!ChromeMain + 0x233498f
	    rbp = 0x00007ffeecd3ac70   rsp = 0x00007ffeecd3ac40
	    rip = 0x0000000105347ccf
	    Found by: previous frame's frame pointer
	14  CoreFoundation + 0xa3721
	    rbp = 0x00007ffeecd3ac80   rsp = 0x00007ffeecd3ac80
	    rip = 0x00007fff314eb721
	    Found by: previous frame's frame pointer
	15  CoreFoundation + 0x15d0ac
	    rbp = 0x00007ffeecd3acb0   rsp = 0x00007ffeecd3ac90
	    rip = 0x00007fff315a50ac
	    Found by: previous frame's frame pointer
	16  CoreFoundation + 0x86260
	    rbp = 0x00007ffeecd3ad10   rsp = 0x00007ffeecd3acc0
	    rip = 0x00007fff314ce260
	    Found by: previous frame's frame pointer
	17  CoreFoundation + 0x856dd
	    rbp = 0x00007ffeecd3ba00   rsp = 0x00007ffeecd3ad20
	    rip = 0x00007fff314cd6dd
	    Found by: previous frame's frame pointer
	18  CoreFoundation + 0x84f43
	    rbp = 0x00007ffeecd3ba90   rsp = 0x00007ffeecd3ba10
	    rip = 0x00007fff314ccf43
	    Found by: previous frame's frame pointer
	19  Foundation + 0x20c16
	    rbp = 0x00007ffeecd3bad0   rsp = 0x00007ffeecd3baa0
	    rip = 0x00007fff3359ec16
	    Found by: previous frame's frame pointer
	20  Google Chrome Framework!ChromeMain + 0x23356cd
	    rbp = 0x00007ffeecd3bb20   rsp = 0x00007ffeecd3bae0
	    rip = 0x0000000105348a0d
	    Found by: previous frame's frame pointer
	21  Google Chrome Framework!ChromeMain + 0x23344ae
	    rbp = 0x00007ffeecd3bb50   rsp = 0x00007ffeecd3bb30
	    rip = 0x00000001053477ee
	    Found by: previous frame's frame pointer
	22  Google Chrome Framework!ChromeMain + 0x2356ff5
	    rbp = 0x00007ffeecd3bb70   rsp = 0x00007ffeecd3bb60
	    rip = 0x000000010536a335
	    Found by: previous frame's frame pointer
	23  Google Chrome Framework!ChromeMain + 0x6680d56
	    rbp = 0x00007ffeecd3bc10   rsp = 0x00007ffeecd3bb80
	    rip = 0x0000000109694096
	    Found by: previous frame's frame pointer
	24  Google Chrome Framework!ChromeMain + 0x1f0d419
	    rbp = 0x00007ffeecd3bca0   rsp = 0x00007ffeecd3bc20
	    rip = 0x0000000104f20759
	    Found by: previous frame's frame pointer
	25  Google Chrome Framework!ChromeMain + 0x384ecad
	    rbp = 0x00007ffeecd3c0a0   rsp = 0x00007ffeecd3bcb0
	    rip = 0x0000000106861fed
	    Found by: previous frame's frame pointer
	26  Google Chrome Framework!ChromeMain + 0x1f0c644
	    rbp = 0x00007ffeecd3c130   rsp = 0x00007ffeecd3c0b0
	    rip = 0x0000000104f1f984
	    Found by: previous frame's frame pointer
	27  Google Chrome Framework!ChromeMain + 0xb3
	    rbp = 0x00007ffeecd3c220   rsp = 0x00007ffeecd3c140
	    rip = 0x00000001030133f3
	    Found by: previous frame's frame pointer
	28  Google Chrome Helper!main + 0x1f1
	    rbp = 0x00007ffeecd3c270   rsp = 0x00007ffeecd3c230
	    rip = 0x0000000102ec4121
	    Found by: previous frame's frame pointer
	29  libdyld.dylib + 0x1115
	    rbp = 0x00007ffeecd3c280   rsp = 0x00007ffeecd3c280
	    rip = 0x00007fff58de0115
	    Found by: previous frame's frame pointer



This is due to Annie's CL to fix & reenable browse:media:tumblr recently. Somehow <system_health>/browse:media:tumblr are passing, and this is just crashing on v8_browsing ones. 
 
Summary: v8.browsing_desktop/browse:media:tumblr crashes on Mac (was: v8.browsing_desktop/browse:media:tumblr crashes)
Project Member

Comment 2 by bugdroid1@chromium.org, Jul 20

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/a09a063201e2e53742de7b4363a1dd796152a468

commit a09a063201e2e53742de7b4363a1dd796152a468
Author: Ned Nguyen <nednguyen@google.com>
Date: Fri Jul 20 09:31:57 2018

Skip v8.browsing_desktop/browse:media:tumblr  on Mac

TBR=sullivan@chromium.org
NOTRY=true

Bug: 865887
Change-Id: Ia6accc2e7ddcd7d37a307b55dbc26fdd936848e0
Reviewed-on: https://chromium-review.googlesource.com/1144725
Reviewed-by: Ned Nguyen <nednguyen@google.com>
Commit-Queue: Ned Nguyen <nednguyen@google.com>
Cr-Commit-Position: refs/heads/master@{#576820}
[modify] https://crrev.com/a09a063201e2e53742de7b4363a1dd796152a468/tools/perf/expectations.config

The change I made adds a small wait to the test before a click, it's a bug in Chrome if this results in a crash. The bug for my change is  issue 809146  so we can discuss whether to revert it there.

But first, I am kicking off a bisect to see if the cause for the crash was my CL.
Project Member

Comment 5 by bugdroid1@chromium.org, Jul 20

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/406f213e9234fd1649fb19e8720457053e2dd7f4

commit 406f213e9234fd1649fb19e8720457053e2dd7f4
Author: Ned Nguyen <nednguyen@google.com>
Date: Fri Jul 20 13:57:21 2018

Revert "Skip v8.browsing_desktop/browse:media:tumblr  on Mac"

This reverts commit a09a063201e2e53742de7b4363a1dd796152a468.

Reason for revert: the failure was only seen once. Let reenable this and collect the test's failure with more data.

Original change's description:
> Skip v8.browsing_desktop/browse:media:tumblr  on Mac
> 
> TBR=sullivan@chromium.org
> NOTRY=true
> 
> Bug: 865887
> Change-Id: Ia6accc2e7ddcd7d37a307b55dbc26fdd936848e0
> Reviewed-on: https://chromium-review.googlesource.com/1144725
> Reviewed-by: Ned Nguyen <nednguyen@google.com>
> Commit-Queue: Ned Nguyen <nednguyen@google.com>
> Cr-Commit-Position: refs/heads/master@{#576820}

TBR=sullivan@chromium.org,nednguyen@google.com

Change-Id: I2e1957416af86050888a702846b1f9c764a282bf
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Bug: 865887
Reviewed-on: https://chromium-review.googlesource.com/1145280
Reviewed-by: Ned Nguyen <nednguyen@google.com>
Commit-Queue: Ned Nguyen <nednguyen@google.com>
Cr-Commit-Position: refs/heads/master@{#576849}
[modify] https://crrev.com/406f213e9234fd1649fb19e8720457053e2dd7f4/tools/perf/expectations.config

Sign in to add a comment