browser crash on some animatd CustomElements
Reported by
dgunnars...@vewd.com,
Dec 20
|
|||
Issue description
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36
Steps to reproduce the problem:
1. Run conntent_shell with dchecks/debug
2. go to crashBrowser2.html page(included)
3.
What is the expected behavior?
don't crash
What went wrong?
Check failed: old_paint_offset_ == paint_offset ("12.4531,16.25" vs. "12.5,16.25")"LayoutBlockFlow (anonymous)"
Did this work before? N/A
Chrome version: top of git Channel: n/a
OS Version: ubuntu 18.04
Flash Version:
Open content_shell with page crashBrowser2.html
click on both "buttons" a couple of times, then crash!
,
Dec 20
,
Dec 20
|
|||
►
Sign in to add a comment |
|||
Comment 1 by dgunnars...@vewd.com
, Dec 20[1:1:1220/124705.685433:FATAL:find_paint_offset_and_visual_rect_needing_update.h(46)] Check failed: old_paint_offset_ == paint_offset ("12.4531,16.25" vs. "12.5,16.25")"LayoutBlockFlow (anonymous)" #0 0x7f4f74c7ed88 base::debug::StackTrace::StackTrace() #1 0x7f4f74acaa5a base::debug::StackTrace::StackTrace() #2 0x7f4f74b09403 logging::LogMessage::~LogMessage() #3 0x7f4f6451477b blink::FindPaintOffsetNeedingUpdateScope::~FindPaintOffsetNeedingUpdateScope() #4 0x7f4f644f5d13 blink::(anonymous namespace)::FragmentPaintPropertyTreeBuilder::UpdateForSelf() #5 0x7f4f644f58a0 blink::PaintPropertyTreeBuilder::UpdateForSelf() #6 0x7f4f644fae82 blink::PrePaintTreeWalk::WalkInternal() #7 0x7f4f644fa1ff blink::PrePaintTreeWalk::Walk() #8 0x7f4f644fa258 blink::PrePaintTreeWalk::Walk() #9 0x7f4f644fa258 blink::PrePaintTreeWalk::Walk() #10 0x7f4f644fa258 blink::PrePaintTreeWalk::Walk() #11 0x7f4f644fa258 blink::PrePaintTreeWalk::Walk() #12 0x7f4f644fa258 blink::PrePaintTreeWalk::Walk() #13 0x7f4f644fa258 blink::PrePaintTreeWalk::Walk() #14 0x7f4f644f9d45 blink::PrePaintTreeWalk::Walk() #15 0x7f4f644f9771 blink::PrePaintTreeWalk::WalkTree() #16 0x7f4f63bd59b6 blink::LocalFrameView::RunPrePaintLifecyclePhase() #17 0x7f4f63bd4cd2 blink::LocalFrameView::UpdateLifecyclePhasesInternal() #18 0x7f4f63bd3b22 blink::LocalFrameView::UpdateLifecyclePhases() #19 0x7f4f63bd3668 blink::LocalFrameView::UpdateAllLifecyclePhases() #20 0x7f4f643ef901 blink::PageAnimator::UpdateAllLifecyclePhases() #21 0x7f4f643f13b6 blink::PageWidgetDelegate::UpdateLifecycle() #22 0x7f4f63ada247 blink::WebViewImpl::UpdateLifecycle() #23 0x7f4f63c6dfad blink::WebViewFrameWidget::UpdateLifecycle() #24 0x7f4f72216a35 content::RenderWidget::UpdateVisualState() #25 0x7f4f72f790ba content::LayerTreeView::UpdateLayerTreeHost() #26 0x7f4f6d0f744a cc::LayerTreeHost::RequestMainFrameUpdate() #27 0x7f4f6d16affc cc::ProxyMain::BeginMainFrame() #28 0x7f4f6d1926d4 _ZN4base8internal13FunctorTraitsIMN2cc9ProxyMainEFvNSt3__110unique_ptrINS2_28BeginMainFrameAndCommitStateENS4_14default_deleteIS6_EEEEEvE6InvokeISB_NS_7WeakPtrIS3_EEJS9_EEEvT_OT0_DpOT1_ #29 0x7f4f6d19261f _ZN4base8internal12InvokeHelperILb1EvE8MakeItSoIMN2cc9ProxyMainEFvNSt3__110unique_ptrINS4_28BeginMainFrameAndCommitStateENS6_14default_deleteIS8_EEEEENS_7WeakPtrIS5_EEJSB_EEEvOT_OT0_DpOT1_ #30 0x7f4f6d192588 _ZN4base8internal7InvokerINS0_9BindStateIMN2cc9ProxyMainEFvNSt3__110unique_ptrINS3_28BeginMainFrameAndCommitStateENS5_14default_deleteIS7_EEEEEJNS_7WeakPtrIS4_EENS0_13PassedWrapperISA_EEEEEFvvEE7RunImplISC_NS5_5tupleIJSE_SG_EEEJLm0ELm1EEEEvOT_OT0_NS5_16integer_sequenceImJXspT1_EEEE #31 0x7f4f6d19248e _ZN4base8internal7InvokerINS0_9BindStateIMN2cc9ProxyMainEFvNSt3__110unique_ptrINS3_28BeginMainFrameAndCommitStateENS5_14default_deleteIS7_EEEEEJNS_7WeakPtrIS4_EENS0_13PassedWrapperISA_EEEEEFvvEE7RunOnceEPNS0_13BindStateBaseE #32 0x7f4f74a9d56e _ZNO4base12OnceCallbackIFvvEE3RunEv #33 0x7f4f74acb87b base::debug::TaskAnnotator::RunTask() #34 0x7f4f74bd2c33 base::sequence_manager::internal::ThreadControllerImpl::DoWork() #35 0x7f4f74be3676 _ZN4base8internal13FunctorTraitsIMNS_16sequence_manager8internal20ThreadControllerImplEFvNS4_8WorkTypeEEvE6InvokeIS7_RKNS_7WeakPtrIS4_EEJRKS5_EEEvT_OT0_DpOT1_ #36 0x7f4f74be35cf _ZN4base8internal12InvokeHelperILb1EvE8MakeItSoIRKMNS_16sequence_manager8internal20ThreadControllerImplEFvNS6_8WorkTypeEERKNS_7WeakPtrIS6_EEJRKS7_EEEvOT_OT0_DpOT1_ #37 0x7f4f74be3543 _ZN4base8internal7InvokerINS0_9BindStateIMNS_16sequence_manager8internal20ThreadControllerImplEFvNS5_8WorkTypeEEJNS_7WeakPtrIS5_EES6_EEEFvvEE7RunImplIRKS8_RKNSt3__15tupleIJSA_S6_EEEJLm0ELm1EEEEvOT_OT0_NSH_16integer_sequenceImJXspT1_EEEE #38 0x7f4f74be344c _ZN4base8internal7InvokerINS0_9BindStateIMNS_16sequence_manager8internal20ThreadControllerImplEFvNS5_8WorkTypeEEJNS_7WeakPtrIS5_EES6_EEEFvvEE3RunEPNS0_13BindStateBaseE #39 0x7f4f74a9d56e _ZNO4base12OnceCallbackIFvvEE3RunEv #40 0x7f4f74acb87b base::debug::TaskAnnotator::RunTask() #41 0x7f4f74b2104b base::MessageLoopImpl::RunTask() #42 0x7f4f74b21338 base::MessageLoopImpl::DeferOrRunPendingTask() #43 0x7f4f74b21bc6 base::MessageLoopImpl::DoWork() #44 0x7f4f74b23357 base::MessagePumpDefault::Run() #45 0x7f4f74b208af base::MessageLoopImpl::Run() #46 0x7f4f74b7910c base::RunLoop::Run() #47 0x7f4f72224992 content::RendererMain() #48 0x7f4f72398bbd content::RunZygote() #49 0x7f4f72398fe5 content::RunOtherNamedProcessTypeMain() #50 0x7f4f72399daf content::ContentMainRunnerImpl::Run() #51 0x7f4f72397619 content::ContentServiceManagerMainDelegate::RunEmbedderProcess() #52 0x7f4f515189ad service_manager::Main() #53 0x7f4f723989d3 content::ContentMain() #54 0x5639700c6185 main #55 0x7f4f523b5b97 __libc_start_main #56 0x5639700c602a _start Received signal 6 #0 0x7f4f74c7ed88 base::debug::StackTrace::StackTrace() #1 0x7f4f74acaa5a base::debug::StackTrace::StackTrace() #2 0x7f4f74c7e82a base::debug::(anonymous namespace)::StackDumpSignalHandler() #3 0x7f4f5632c890 <unknown> #4 0x7f4f523d2e97 gsignal #5 0x7f4f523d4801 abort #6 0x7f4f74c7dfd6 base::debug::(anonymous namespace)::DebugBreak() #7 0x7f4f74c7dfb8 base::debug::BreakDebugger() #8 0x7f4f74b098cd logging::LogMessage::~LogMessage() #9 0x7f4f6451477b blink::FindPaintOffsetNeedingUpdateScope::~FindPaintOffsetNeedingUpdateScope() #10 0x7f4f644f5d13 blink::(anonymous namespace)::FragmentPaintPropertyTreeBuilder::UpdateForSelf() #11 0x7f4f644f58a0 blink::PaintPropertyTreeBuilder::UpdateForSelf() #12 0x7f4f644fae82 blink::PrePaintTreeWalk::WalkInternal() #13 0x7f4f644fa1ff blink::PrePaintTreeWalk::Walk() #14 0x7f4f644fa258 blink::PrePaintTreeWalk::Walk() #15 0x7f4f644fa258 blink::PrePaintTreeWalk::Walk() #16 0x7f4f644fa258 blink::PrePaintTreeWalk::Walk() #17 0x7f4f644fa258 blink::PrePaintTreeWalk::Walk() #18 0x7f4f644fa258 blink::PrePaintTreeWalk::Walk() #19 0x7f4f644fa258 blink::PrePaintTreeWalk::Walk() #20 0x7f4f644f9d45 blink::PrePaintTreeWalk::Walk() #21 0x7f4f644f9771 blink::PrePaintTreeWalk::WalkTree() #22 0x7f4f63bd59b6 blink::LocalFrameView::RunPrePaintLifecyclePhase() #23 0x7f4f63bd4cd2 blink::LocalFrameView::UpdateLifecyclePhasesInternal() #24 0x7f4f63bd3b22 blink::LocalFrameView::UpdateLifecyclePhases() #25 0x7f4f63bd3668 blink::LocalFrameView::UpdateAllLifecyclePhases() #26 0x7f4f643ef901 blink::PageAnimator::UpdateAllLifecyclePhases() #27 0x7f4f643f13b6 blink::PageWidgetDelegate::UpdateLifecycle() #28 0x7f4f63ada247 blink::WebViewImpl::UpdateLifecycle() #29 0x7f4f63c6dfad blink::WebViewFrameWidget::UpdateLifecycle() #30 0x7f4f72216a35 content::RenderWidget::UpdateVisualState() #31 0x7f4f72f790ba content::LayerTreeView::UpdateLayerTreeHost() #32 0x7f4f6d0f744a cc::LayerTreeHost::RequestMainFrameUpdate() #33 0x7f4f6d16affc cc::ProxyMain::BeginMainFrame() #34 0x7f4f6d1926d4 _ZN4base8internal13FunctorTraitsIMN2cc9ProxyMainEFvNSt3__110unique_ptrINS2_28BeginMainFrameAndCommitStateENS4_14default_deleteIS6_EEEEEvE6InvokeISB_NS_7WeakPtrIS3_EEJS9_EEEvT_OT0_DpOT1_ #35 0x7f4f6d19261f _ZN4base8internal12InvokeHelperILb1EvE8MakeItSoIMN2cc9ProxyMainEFvNSt3__110unique_ptrINS4_28BeginMainFrameAndCommitStateENS6_14default_deleteIS8_EEEEENS_7WeakPtrIS5_EEJSB_EEEvOT_OT0_DpOT1_ #36 0x7f4f6d192588 _ZN4base8internal7InvokerINS0_9BindStateIMN2cc9ProxyMainEFvNSt3__110unique_ptrINS3_28BeginMainFrameAndCommitStateENS5_14default_deleteIS7_EEEEEJNS_7WeakPtrIS4_EENS0_13PassedWrapperISA_EEEEEFvvEE7RunImplISC_NS5_5tupleIJSE_SG_EEEJLm0ELm1EEEEvOT_OT0_NS5_16integer_sequenceImJXspT1_EEEE #37 0x7f4f6d19248e _ZN4base8internal7InvokerINS0_9BindStateIMN2cc9ProxyMainEFvNSt3__110unique_ptrINS3_28BeginMainFrameAndCommitStateENS5_14default_deleteIS7_EEEEEJNS_7WeakPtrIS4_EENS0_13PassedWrapperISA_EEEEEFvvEE7RunOnceEPNS0_13BindStateBaseE #38 0x7f4f74a9d56e _ZNO4base12OnceCallbackIFvvEE3RunEv #39 0x7f4f74acb87b base::debug::TaskAnnotator::RunTask() #40 0x7f4f74bd2c33 base::sequence_manager::internal::ThreadControllerImpl::DoWork() #41 0x7f4f74be3676 _ZN4base8internal13FunctorTraitsIMNS_16sequence_manager8internal20ThreadControllerImplEFvNS4_8WorkTypeEEvE6InvokeIS7_RKNS_7WeakPtrIS4_EEJRKS5_EEEvT_OT0_DpOT1_ #42 0x7f4f74be35cf _ZN4base8internal12InvokeHelperILb1EvE8MakeItSoIRKMNS_16sequence_manager8internal20ThreadControllerImplEFvNS6_8WorkTypeEERKNS_7WeakPtrIS6_EEJRKS7_EEEvOT_OT0_DpOT1_ #43 0x7f4f74be3543 _ZN4base8internal7InvokerINS0_9BindStateIMNS_16sequence_manager8internal20ThreadControllerImplEFvNS5_8WorkTypeEEJNS_7WeakPtrIS5_EES6_EEEFvvEE7RunImplIRKS8_RKNSt3__15tupleIJSA_S6_EEEJLm0ELm1EEEEvOT_OT0_NSH_16integer_sequenceImJXspT1_EEEE #44 0x7f4f74be344c _ZN4base8internal7InvokerINS0_9BindStateIMNS_16sequence_manager8internal20ThreadControllerImplEFvNS5_8WorkTypeEEJNS_7WeakPtrIS5_EES6_EEEFvvEE3RunEPNS0_13BindStateBaseE #45 0x7f4f74a9d56e _ZNO4base12OnceCallbackIFvvEE3RunEv #46 0x7f4f74acb87b base::debug::TaskAnnotator::RunTask() #47 0x7f4f74b2104b base::MessageLoopImpl::RunTask() #48 0x7f4f74b21338 base::MessageLoopImpl::DeferOrRunPendingTask() #49 0x7f4f74b21bc6 base::MessageLoopImpl::DoWork() #50 0x7f4f74b23357 base::MessagePumpDefault::Run() #51 0x7f4f74b208af base::MessageLoopImpl::Run() #52 0x7f4f74b7910c base::RunLoop::Run() #53 0x7f4f72224992 content::RendererMain() #54 0x7f4f72398bbd content::RunZygote() #55 0x7f4f72398fe5 content::RunOtherNamedProcessTypeMain() #56 0x7f4f72399daf content::ContentMainRunnerImpl::Run() #57 0x7f4f72397619 content::ContentServiceManagerMainDelegate::RunEmbedderProcess() #58 0x7f4f515189ad service_manager::Main() #59 0x7f4f723989d3 content::ContentMain() #60 0x5639700c6185 main #61 0x7f4f523b5b97 __libc_start_main #62 0x5639700c602a _start r8: 0000000000000000 r9: 00007fffbc687df0 r10: 0000000000000008 r11: 0000000000000246 r12: 00005639700c6000 r13: 00007fffbc68e230 r14: 0000000000000000 r15: 0000000000000000 di: 0000000000000002 si: 00007fffbc687df0 bp: 00007fffbc688040 bx: 0000000000000000 dx: 0000000000000000 ax: 0000000000000000 cx: 00007f4f523d2e97 sp: 00007fffbc687df0 ip: 00007f4f523d2e97 efl: 0000000000000246 cgf: 002b000000000033 erf: 0000000000000000 trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000 [end of stack trace]