New issue
Advanced search Search tips

Issue 906267 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
Closed: Nov 26
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Bug



Sign in to add a comment

Crash in ui::Layer::SetOpacityFromAnimation when returning to home screen

Project Member Reported by abodenha@google.com, Nov 16

Issue description

Chrome Version: 71.0.3578.57
OS: Chrome

Originally reported in internal issue b/119671421 crash/20a6f180a03f8c42

Unknown frequency at this point so initially marking this P2.

Call stack is:
Thread 0 (id: 0x5de) CRASHED [SIGSEGV /SEGV_MAPERR @ 0x00000178 ] MAGIC SIGNATURE THREAD
Stack Quality100%Show frame trust levels
0x00005806d886b1ca	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/compositor/layer.cc:1159 )	ui::Layer::SetOpacityFromAnimation(float, ui::PropertyChangeReason)
0x00005806d8870b67	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/compositor/layer_animator.cc:115 )	ui::LayerAnimator::SetOpacity(float)
0x00005806d997e5cf	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/compositor/layer.cc:386 )	ash::WindowGrid::UpdateYPositionAndOpacity(int, float, gfx::Rect const&, base::RepeatingCallback<void (ui::ScopedLayerAnimationSettings*, bool)>)
0x00005806d9853c5d	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ash/wm/overview/window_selector.cc:761 )	ash::WindowSelector::UpdateGridAtLocationYPositionAndOpacity(long, int, float, gfx::Rect const&, base::RepeatingCallback<void (ui::ScopedLayerAnimationSettings*, bool)>)
0x00005806d973e7c7	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ash/app_list/home_launcher_gesture_handler.cc:466 )	ash::HomeLauncherGestureHandler::UpdateWindows(double, bool)
0x00005806d98f171e	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ash/app_list/home_launcher_gesture_handler.cc:262 )	ash::AppListShelfItemDelegate::ItemSelected(std::__1::unique_ptr<ui::Event, std::__1::default_delete<ui::Event> >, long, ash::ShelfLaunchSource, base::OnceCallback<void (ash::ShelfAction, base::Optional<std::__1::vector<mojo::StructPtr<ash::mojom::MenuItem>, std::__1::allocator<mojo::StructPtr<ash::mojom::MenuItem> > > >)>)
0x00005806d98f8db7	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ash/shelf/shelf_view.cc:599 )	ash::ShelfView::ButtonPressed(views::Button*, ui::Event const&, views::InkDrop*)
0x00005806d8ca93ea	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/views/controls/button/button.cc:333 )	views::Button::OnGestureEvent(ui::GestureEvent*)
0x00005806d99c4e84	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ash/shelf/app_list_button.cc )	ash::AppListButton::OnGestureEvent(ui::GestureEvent*)
0x00005806d80c97f9	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/events/event_dispatcher.cc:191 )	ui::EventDispatcherDelegate::DispatchEvent(ui::EventTarget*, ui::Event*)
0x00005806db416692	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/events/event_processor.cc:57 )	ui::EventProcessor::OnEventFromSource(ui::Event*)
0x00005806db416b3b	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/events/event_processor.h )	ui::EventSource::SendEventToSinkFromRewriter(ui::Event*, ui::EventRewriter const*)
0x00005806d80c97f9	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/events/event_dispatcher.cc:191 )	ui::EventDispatcherDelegate::DispatchEvent(ui::EventTarget*, ui::Event*)
0x00005806d8845367	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/aura/window_event_dispatcher.cc:353 )	aura::WindowEventDispatcher::ProcessGestures(aura::Window*, std::__1::vector<std::__1::unique_ptr<ui::GestureEvent, std::__1::default_delete<ui::GestureEvent> >, std::__1::allocator<std::__1::unique_ptr<ui::GestureEvent, std::__1::default_delete<ui::GestureEvent> > > >)
0x00005806d8848190	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/aura/window_event_dispatcher.cc:654 )	aura::WindowEventDispatcher::PostDispatchEvent(ui::EventTarget*, ui::Event const&)
0x00005806d80c98ee	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/events/event_dispatcher.cc:62 )	ui::EventDispatcherDelegate::DispatchEvent(ui::EventTarget*, ui::Event*)
0x00005806db416692	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/events/event_processor.cc:57 )	ui::EventProcessor::OnEventFromSource(ui::Event*)
0x00005806db416b3b	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/events/event_processor.h )	ui::EventSource::SendEventToSinkFromRewriter(ui::Event*, ui::EventRewriter const*)
0x00005806d9775682	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/events/event_source.cc:43 )	ash::AshWindowTreeHostPlatform::DispatchEvent(ui::Event*)
0x00005806d80cc66f	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/base/callback.h:99 )	ui::DispatchEventFromNativeUiEvent(ui::Event* const&, base::OnceCallback<void (ui::Event*)>)
0x00005806d4d4b403	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/ozone/platform/drm/host/drm_window_host.cc:200 )	<name omitted>
0x00005806d4d4b4ac	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/ozone/platform/drm/host/drm_window_host.cc )	non-virtual thunk to ui::DrmWindowHost::DispatchEvent(ui::Event* const&)
0x00005806d80bcbab	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/events/platform/platform_event_source.cc:91 )	ui::PlatformEventSource::DispatchEvent(ui::Event*)
0x00005806d8354d0e	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/ui/events/ozone/evdev/event_factory_evdev.cc:363 )	ui::EventFactoryEvdev::DispatchTouchEvent(ui::TouchEventParams const&)
0x00005806d42599e7	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/base/callback.h:99 )	base::MessageLoop::DoWork()
0x00005806d426b8ee	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/base/message_loop/message_pump_libevent.cc:210 )	base::MessagePumpLibevent::Run(base::MessagePump::Delegate*)
0x00005806d7253133	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/base/run_loop.cc:102 )	<name omitted>
0x00005806d6de4b3f	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/chrome/browser/chrome_browser_main.cc:2028 )	ChromeBrowserMainParts::MainMessageLoopRun(int*)
0x00005806d524184b	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/content/browser/browser_main_loop.cc:998 )	content::BrowserMainLoop::RunMainMessageLoopParts()
0x00005806d5245641	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/content/browser/browser_main_runner_impl.cc:165 )	content::BrowserMainRunnerImpl::Run()
0x00005806d523a691	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/content/browser/browser_main.cc:47 )	content::BrowserMain(content::MainFunctionParams const&)
0x00005806d6dd0cc7	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/content/app/content_main_runner_impl.cc:541 )	content::ContentMainRunnerImpl::Run(bool)
0x00005806d6dd8a6d	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/services/service_manager/embedder/main.cc:472 )	service_manager::Main(service_manager::MainParams const&)
0x00005806d43d8a94	(chrome -./../../../../../../../home/chrome-bot/chrome_root/src/content/app/content_main.cc:19 )	ChromeMain
0x000078584c42d735	(libc-2.23.so -libc-start.c:289 )	__libc_start_main
0x00005806d43ba468	(chrome + 0x00411468 )	_start
0x00007ffda350a9c7	
 
Looks like the signature has been around a long time but became much more common in 71. (71 has more stacks than other builds even though it's only in beta)
Cc: sammiequon@chromium.org
+sammiequon, it seems that the |sheid_window|'s layer is destroyed before animation ends?
Cc: -sammiequon@chromium.org weidongg@chromium.org osh...@chromium.org
Owner: sammiequon@chromium.org
Status: Started (was: Untriaged)
Stack looks like issue 905527. I will monitor and check if that bug fixes this issue too.
Labels: -Pri-2 M-71 Pri-1
Updating milestone and marking p-1 since it's a crash.
Status: Fixed (was: Started)
Not seeing this after issue 905527 was fixed.

Sign in to add a comment