New issue
Advanced search Search tips

Issue 889700 link

Starred by 1 user
Status: Duplicate
Merged: issue 880388
Owner:
szager@chromium.org
Closed: Sep 27
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

Changing from https://helloworld.com/ to https://facebook.com causes Facebook's tab to crash

Project Member Reported by harrisjay@chromium.org, Sep 27 
Chrome Version: (copy from chrome://version)
OS: (e.g. Win10, MacOS 10.12, etc...)

What steps will reproduce the problem?
(1) Go to https://facebook.com/
(2) Wait for the page to finish loading
(3) Navigate to https://helloworld.com/ (an insecure site)
(4) Before the navigation completes, navigate back (alt+left)
(5) Wait for Facebook to finish loading

What is the expected result?

That Facebook loads and is usable

What happens instead?

Facebook loads, and, when the loading icon completes, the tab crashes

Notes:
* The bug doesn't happen every time
* The issue is easiest to reproduce upon starting chromium and beginning the repro steps immediately.
* Swapping out Facebook for Google doesn't seem to reproduce the bug
Noticed in revision 7c837932823b
* I'm running gLinux on a Z840
* Happens with and without symbols
log.txt
4.7 KB View Download

Comment 1 by tkent@chromium.org, Sep 27

Components: -Blink>HTML Blink>Layout
[1:1:0927/110217.826529:FATAL:intersection_geometry.cc(171)] Check failed: frame_view->ShouldThrottleRendering() || !layout_view || !(layout_view->NeedsPaintPropertyUpdate() || layout_view->DescendantNeedsPaintPropertyUpdate()). 
#0 0x7f3011377c3d base::debug::StackTrace::StackTrace()
#1 0x7f30110829ac base::debug::StackTrace::StackTrace()
#2 0x7f30110f26aa logging::LogMessage::~LogMessage()
#3 0x7f2ff37b06e9 blink::IntersectionGeometry::ClipToRoot()
#4 0x7f2ff37b0dc7 blink::IntersectionGeometry::ComputeGeometry()
#5 0x7f2ff37312ed blink::IntersectionObservation::Compute()
#6 0x7f2ff372d668 blink::ElementIntersectionObserverData::ComputeObservations()
#7 0x7f2ff2e5bfb3 blink::Element::ComputeIntersectionObservations()
#8 0x7f2ff3738c94 blink::IntersectionObserverController::ComputeTrackedIntersectionObservations()
#9 0x7f2ff32a7a04 blink::LocalFrameView::UpdateViewportIntersectionsForSubtree()
#10 0x7f2ff32a7a51 blink::LocalFrameView::UpdateViewportIntersectionsForSubtree()
#11 0x7f2ff32a5f73 blink::LocalFrameView::UpdateLifecyclePhases()
#12 0x7f2ff32a5a02 blink::LocalFrameView::UpdateAllLifecyclePhases()
#13 0x7f2ff3ba65db blink::PageAnimator::UpdateAllLifecyclePhases()
#14 0x7f2ff3bac280 blink::PageWidgetDelegate::UpdateLifecycle()
#15 0x7f2ff318133b blink::WebViewImpl::UpdateLifecycle()
#16 0x7f2ff333c677 blink::WebViewFrameWidget::UpdateLifecycle()
#17 0x7f300c156707 content::RenderWidget::UpdateVisualState()
#18 0x7f300bd586ba content::LayerTreeView::UpdateLayerTreeHost()
#19 0x7f3006113d1a cc::LayerTreeHost::RequestMainFrameUpdate()
#20 0x7f300621db69 cc::ProxyMain::BeginMainFrame()

Comment 2 by chrishtr@chromium.org, Sep 27

Labels: -Pri-3 Pri-2
Owner: szager@chromium.org
Status: Assigned (was: Untriaged)

Comment 3 by szager@chromium.org, Sep 27

Mergedinto: 880388
Status: Duplicate (was: Assigned)
►

Sign in to add a comment