Sorry if this is spamming a few too many people. The most relevant OWNERS directory for NavigationControllerImpl is content/OWNERS.


Chrome Version: 70.0.3530.0
OS: CrOS

What steps will reproduce the problem?
(1) Type 1 character into the chrome OS launcher search bar.
(2) Delete the character.
(3) Repeat steps 1 and 2 multiple times.

Please note this also repros intermittently when slowly typing queries in the launcher, but the steps I listed repro the crash after about 8 iterations.

What is the expected result?
The launcher continues to deliver search results.

What happens instead?
ChromeOS crashes in the browser process with debug on.


Received signal 6
#0 0x7f2236a3a2ad base::debug::StackTrace::StackTrace()
#1 0x7f2236747f0c base::debug::StackTrace::StackTrace()
#2 0x7f2236a39d38 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#3 0x7f220e09a0c0 <unknown>
#4 0x7f220c7d1fcf gsignal
#5 0x7f220c7d33fa abort
#6 0x7f2236a39576 base::debug::(anonymous namespace)::DebugBreak()
#7 0x7f2236a39558 base::debug::BreakDebugger()
#8 0x7f22367b2fe7 logging::LogMessage::~LogMessage()
#9 0x7f222f776400 content::NavigationControllerImpl::ClassifyNavigation()
#10 0x7f222f77557a content::NavigationControllerImpl::RendererDidNavigate()
#11 0x7f222f7c8d35 content::NavigatorImpl::DidNavigate()
#12 0x7f222f7e9360 content::RenderFrameHostImpl::DidCommitNavigationInternal()
#13 0x7f222f7e7ced content::RenderFrameHostImpl::DidCommitProvisionalLoad()
#14 0x7f222e477967 content::mojom::FrameHostStubDispatch::Accept()
#15 0x7f222f821893 content::mojom::FrameHostStub<>::Accept()
#16 0x7f2236ced495 mojo::InterfaceEndpointClient::HandleValidatedMessage()
#17 0x7f2236cebf51 mojo::InterfaceEndpointClient::HandleIncomingMessageThunk::Accept()
#18 0x7f2236cea3f8 mojo::FilterChain::Accept()
#19 0x7f2236cefe26 mojo::InterfaceEndpointClient::HandleIncomingMessage()
#20 0x7f2233415db2 IPC::(anonymous namespace)::ChannelAssociatedGroupController::AcceptOnProxyThread()
#21 0x7f223340bcee _ZN4base8internal13FunctorTraitsIMN3IPC12_GLOBAL__N_132ChannelAssociatedGroupControllerEFvN4mojo7MessageEEvE6InvokeIS8_RK13scoped_refptrIS4_EJS6_EEEvT_OT0_DpOT1_
#22 0x7f223340bbdf _ZN4base8internal12InvokeHelperILb0EvE8MakeItSoIRKMN3IPC12_GLOBAL__N_132ChannelAssociatedGroupControllerEFvN4mojo7MessageEEJRK13scoped_refptrIS6_ES8_EEEvOT_DpOT0_
#23 0x7f223340bb67 _ZN4base8internal7InvokerINS0_9BindStateIMN3IPC12_GLOBAL__N_132ChannelAssociatedGroupControllerEFvN4mojo7MessageEEJ13scoped_refptrIS5_ENS0_13PassedWrapperIS7_EEEEEFvvEE7RunImplIRKS9_RKNSt3__15tupleIJSB_SD_EEEJLm0ELm1EEEEvOT_OT0_NSK_16integer_sequenceImJXspT1_EEEE
#24 0x7f223340ba4c _ZN4base8internal7InvokerINS0_9BindStateIMN3IPC12_GLOBAL__N_132ChannelAssociatedGroupControllerEFvN4mojo7MessageEEJ13scoped_refptrIS5_ENS0_13PassedWrapperIS7_EEEEEFvvEE3RunEPNS0_13BindStateBaseE
#25 0x7f22366f8e0e _ZNO4base12OnceCallbackIFvvEE3RunEv
#26 0x7f22367492fa base::debug::TaskAnnotator::RunTask()
#27 0x7f22367d7a18 base::MessageLoop::RunTask()
#28 0x7f22367d7d1b base::MessageLoop::DeferOrRunPendingTask()
#29 0x7f22367d8164 base::MessageLoop::DoWork()
#30 0x7f2236a7eeeb base::MessagePumpLibevent::Run()
#31 0x7f22367d71ee base::MessageLoop::Run()
#32 0x7f2236880a92 base::RunLoop::Run()
#33 0x55623916d8ae ChromeBrowserMainParts::MainMessageLoopRun()
#34 0x7f222f283f3a content::BrowserMainLoop::RunMainMessageLoopParts()
#35 0x7f222f28bf00 content::BrowserMainRunnerImpl::Run()
#36 0x7f222f277550 content::BrowserMain()
#37 0x7f22313cb124 content::RunBrowserProcessMain()
#38 0x7f22313cd882 content::ContentMainRunnerImpl::Run()
#39 0x7f22313c29fc content::ContentServiceManagerMainDelegate::RunEmbedderProcess()
#40 0x7f2236d521a1 service_manager::Main()
#41 0x7f22313c8b75 content::ContentMain()
#42 0x556235dc53e6 ChromeMain
#43 0x556235dc52f2 main
#44 0x7f220c7bf2b1 __libc_start_main
#45 0x556235dc51ca _start
  r8: 0000000000000000  r9: 00007ffc77fdf2d0 r10: 0000000000000008 r11: 0000000000000246
 r12: 0000556235dc51a0 r13: 00007ffc77fe8530 r14: 0000000000000000 r15: 0000000000000000
  di: 0000000000000002  si: 00007ffc77fdf2d0  bp: 00007ffc77fdf510  bx: 0000000000000006
  dx: 0000000000000000  ax: 0000000000000000  cx: 00007f220c7d1fcf  sp: 00007ffc77fdf348
  ip: 00007f220c7d1fcf efl: 0000000000000246 cgf: 002b000000000033 erf: 0000000000000000
 trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000
[end of stack trace]