New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 923423 link

Starred by 1 user

Issue metadata

Status: Untriaged
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 3
Type: Bug



Sign in to add a comment

FATAL:navigation_controller_impl.cc(963) Check failed

Project Member Reported by s...@chromium.org, Jan 18 (4 days ago)

Issue description

Locally built debug Chrome x86 running on api_level=25 crow emulator

01-18 09:52:46.278 24771 24771 F libc    : Fatal signal 6 (SIGABRT), code -6 in tid 24771 (chromium.chrome)
01-18 09:52:46.284 24916 24916 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
01-18 09:52:46.284 24916 24916 F DEBUG   : Build fingerprint: 'Android/sdk_google_phone_x86/generic_x86:NMR1/NYC/3106372:userdebug/test-keys'
01-18 09:52:46.284 24916 24916 F DEBUG   : Revision: '0'
01-18 09:52:46.284 24916 24916 F DEBUG   : ABI: 'x86'
01-18 09:52:46.284 24916 24916 F DEBUG   : pid: 24771, tid: 24771, name: chromium.chrome  >>> org.chromium.chrome <<<
01-18 09:52:46.284 24916 24916 F DEBUG   : signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
01-18 09:52:46.285 24916 24916 F DEBUG   : Abort message: '[FATAL:navigation_controller_impl.cc(963)] Check failed: pending_entry_index_ == -1 || pending_entry_->site_instance() || pending_entry_->restore_type() != RestoreType::NONE. '
01-18 09:52:46.285 24916 24916 F DEBUG   :     eax 00000000  ebx 000060c3  ecx 000060c3  edx 00000006
01-18 09:52:46.285 24916 24916 F DEBUG   :     esi af6a258c  edi af6a2534
01-18 09:52:46.285 24916 24916 F DEBUG   :     xcs 00000073  xds 0000007b  xes 0000007b  xfs 0000003b  xss 0000007b
01-18 09:52:46.285 24916 24916 F DEBUG   :     eip af5d0424  ebp bfa100c8  esp bfa1006c  flags 00000296
01-18 09:52:46.499 24916 24916 F DEBUG   : 
01-18 09:52:46.499 24916 24916 F DEBUG   : backtrace:
01-18 09:52:46.499 24916 24916 F DEBUG   :     #00 pc ffffe424  [vdso:af5d0000] (__kernel_vsyscall+16)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #01 pc 0007a0dc  /system/lib/libc.so (tgkill+28)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #02 pc 00075925  /system/lib/libc.so (pthread_kill+85)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #03 pc 0002785a  /system/lib/libc.so (raise+42)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #04 pc 0001ee36  /system/lib/libc.so (abort+86)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #05 pc 001e7a96  /data/app/org.chromium.chrome-1/lib/x86/libbase.cr.so (_ZN4base5debug13BreakDebuggerEv+51)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #06 pc 00140ab6  /data/app/org.chromium.chrome-1/lib/x86/libbase.cr.so (_ZN7logging10LogMessageD1Ev+900)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #07 pc 0143fdbb  /data/app/org.chromium.chrome-1/lib/x86/libcontent.cr.so (_ZN7content24NavigationControllerImpl19RendererDidNavigateEPNS_19RenderFrameHostImplERK44FrameHostMsg_DidCommitProvisionalLoad_ParamsPNS_20LoadCommittedDetailsEbbPNS_17NavigationRequestE+375)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #08 pc 01458efd  /data/app/org.chromium.chrome-1/lib/x86/libcontent.cr.so (_ZN7content13NavigatorImpl11DidNavigateEPNS_19RenderFrameHostImplERK44FrameHostMsg_DidCommitProvisionalLoad_ParamsNSt4__Cr10unique_ptrINS_17NavigationRequestENS6_14default_deleteIS8_EEEEb+605)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #09 pc 014699cd  /data/app/org.chromium.chrome-1/lib/x86/libcontent.cr.so (_ZN7content19RenderFrameHostImpl27DidCommitNavigationInternalEP44FrameHostMsg_DidCommitProvisionalLoad_Paramsb+497)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #10 pc 01469397  /data/app/org.chromium.chrome-1/lib/x86/libcontent.cr.so (_ZN7content19RenderFrameHostImpl24DidCommitProvisionalLoadENSt4__Cr10unique_ptrI44FrameHostMsg_DidCommitProvisionalLoad_ParamsNS1_14default_deleteIS3_EEEEN4mojo9StructPtrINS_5mojom39DidCommitProvisionalLoadInterfaceParamsEEE+837)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #11 pc 01469a45  /data/app/org.chromium.chrome-1/lib/x86/libcontent.cr.so (_ZThn36_N7content19RenderFrameHostImpl24DidCommitProvisionalLoadENSt4__Cr10unique_ptrI44FrameHostMsg_DidCommitProvisionalLoad_ParamsNS1_14default_deleteIS3_EEEEN4mojo9StructPtrINS_5mojom39DidCommitProvisionalLoadInterfaceParamsEEE+37)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #12 pc 00eefc09  /data/app/org.chromium.chrome-1/lib/x86/libcontent.cr.so (_ZN7content5mojom21FrameHostStubDispatch6AcceptEPNS0_9FrameHostEPN4mojo7MessageE+2585)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #13 pc 01479150  /data/app/org.chromium.chrome-1/lib/x86/libcontent.cr.so
01-18 09:52:46.499 24916 24916 F DEBUG   :     #14 pc 00026072  /data/app/org.chromium.chrome-1/lib/x86/libbindings.cr.so (_ZN4mojo23InterfaceEndpointClient22HandleValidatedMessageEPNS_7MessageE+848)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #15 pc 00025d1b  /data/app/org.chromium.chrome-1/lib/x86/libbindings.cr.so (_ZN4mojo23InterfaceEndpointClient26HandleIncomingMessageThunk6AcceptEPNS_7MessageE+33)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #16 pc 00025914  /data/app/org.chromium.chrome-1/lib/x86/libbindings.cr.so (_ZN4mojo11FilterChain6AcceptEPNS_7MessageE+146)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #17 pc 000271f4  /data/app/org.chromium.chrome-1/lib/x86/libbindings.cr.so (_ZN4mojo23InterfaceEndpointClient21HandleIncomingMessageEPNS_7MessageE+128)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #18 pc 00037263  /data/app/org.chromium.chrome-1/lib/x86/libipc.cr.so
01-18 09:52:46.499 24916 24916 F DEBUG   :     #19 pc 0003454a  /data/app/org.chromium.chrome-1/lib/x86/libipc.cr.so
01-18 09:52:46.499 24916 24916 F DEBUG   :     #20 pc 0011c425  /data/app/org.chromium.chrome-1/lib/x86/libbase.cr.so
01-18 09:52:46.499 24916 24916 F DEBUG   :     #21 pc 0012cbd4  /data/app/org.chromium.chrome-1/lib/x86/libbase.cr.so (_ZN4base5debug13TaskAnnotator7RunTaskEPKcPNS_11PendingTaskE+188)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #22 pc 0014bc7f  /data/app/org.chromium.chrome-1/lib/x86/libbase.cr.so (_ZN4base15MessageLoopImpl7RunTaskEPNS_11PendingTaskE+219)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #23 pc 0014bef8  /data/app/org.chromium.chrome-1/lib/x86/libbase.cr.so (_ZN4base15MessageLoopImpl21DeferOrRunPendingTaskENS_11PendingTaskE+102)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #24 pc 0014c305  /data/app/org.chromium.chrome-1/lib/x86/libbase.cr.so (_ZN4base15MessageLoopImpl6DoWorkEv+229)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #25 pc 0014c370  /data/app/org.chromium.chrome-1/lib/x86/libbase.cr.so (_ZThn4_N4base15MessageLoopImpl6DoWorkEv+30)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #26 pc 0014dfa2  /data/app/org.chromium.chrome-1/lib/x86/libbase.cr.so (_ZN4base16MessagePumpForUI26OnNonDelayedLooperCallbackEv+72)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #27 pc 0014dc9d  /data/app/org.chromium.chrome-1/lib/x86/libbase.cr.so
01-18 09:52:46.499 24916 24916 F DEBUG   :     #28 pc 00018350  /system/lib/libutils.so (_ZN7android20SimpleLooperCallback11handleEventEiiPv+48)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #29 pc 000192f7  /system/lib/libutils.so (_ZN7android6Looper9pollInnerEi+1207)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #30 pc 00018d74  /system/lib/libutils.so (_ZN7android6Looper8pollOnceEiPiS1_PPv+68)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #31 pc 000d2393  /system/lib/libandroid_runtime.so (_ZN7android18NativeMessageQueue8pollOnceEP7_JNIEnvP8_jobjecti+77)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #32 pc 000d2404  /system/lib/libandroid_runtime.so
01-18 09:52:46.499 24916 24916 F DEBUG   :     #33 pc 01d1a59c  /system/framework/x86/boot-framework.oat (offset 0x1571000) (android.os.MessageQueue.nativePollOnce+136)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #34 pc 01d1c153  /system/framework/x86/boot-framework.oat (offset 0x1571000) (android.os.MessageQueue.next+223)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #35 pc 01d1657a  /system/framework/x86/boot-framework.oat (offset 0x1571000) (android.os.Looper.loop+342)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #36 pc 01616c95  /system/framework/x86/boot-framework.oat (offset 0x1571000) (android.app.ActivityThread.main+401)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #37 pc 00108732  /system/lib/libart.so (art_quick_invoke_static_stub+418)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #38 pc 001120e9  /system/lib/libart.so (_ZN3art9ArtMethod6InvokeEPNS_6ThreadEPjjPNS_6JValueEPKc+313)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #39 pc 0050a615  /system/lib/libart.so (_ZN3artL18InvokeWithArgArrayERKNS_33ScopedObjectAccessAlreadyRunnableEPNS_9ArtMethodEPNS_8ArgArrayEPNS_6JValueEPKc+101)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #40 pc 0050c554  /system/lib/libart.so (_ZN3art12InvokeMethodERKNS_33ScopedObjectAccessAlreadyRunnableEP8_jobjectS4_S4_j+1540)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #41 pc 00464100  /system/lib/libart.so (_ZN3artL13Method_invokeEP7_JNIEnvP8_jobjectS3_S3_+96)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #42 pc 005ddb1c  /system/framework/x86/boot.oat (offset 0x51f000) (java.lang.reflect.Method.invoke+168)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #43 pc 02362710  /system/framework/x86/boot-framework.oat (offset 0x1571000) (com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run+124)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #44 pc 0236375e  /system/framework/x86/boot-framework.oat (offset 0x1571000) (com.android.internal.os.ZygoteInit.main+1274)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #45 pc 00108732  /system/lib/libart.so (art_quick_invoke_static_stub+418)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #46 pc 001120e9  /system/lib/libart.so (_ZN3art9ArtMethod6InvokeEPNS_6ThreadEPjjPNS_6JValueEPKc+313)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #47 pc 0050a615  /system/lib/libart.so (_ZN3artL18InvokeWithArgArrayERKNS_33ScopedObjectAccessAlreadyRunnableEPNS_9ArtMethodEPNS_8ArgArrayEPNS_6JValueEPKc+101)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #48 pc 0050a2d9  /system/lib/libart.so (_ZN3art17InvokeWithVarArgsERKNS_33ScopedObjectAccessAlreadyRunnableEP8_jobjectP10_jmethodIDPc+393)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #49 pc 003f2ebe  /system/lib/libart.so (_ZN3art3JNI21CallStaticVoidMethodVEP7_JNIEnvP7_jclassP10_jmethodIDPc+958)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #50 pc 00140911  /system/lib/libart.so (_ZN3art8CheckJNI11CallMethodVEPKcP7_JNIEnvP8_jobjectP7_jclassP10_jmethodIDPcNS_9Primitive4TypeENS_10InvokeTypeE+4513)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #51 pc 001320cc  /system/lib/libart.so (_ZN3art8CheckJNI21CallStaticVoidMethodVEP7_JNIEnvP7_jclassP10_jmethodIDPc+108)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #52 pc 0006f3f1  /system/lib/libandroid_runtime.so (_ZN7_JNIEnv20CallStaticVoidMethodEP7_jclassP10_jmethodIDz+41)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #53 pc 00072cae  /system/lib/libandroid_runtime.so (_ZN7android14AndroidRuntime5startEPKcRKNS_6VectorINS_7String8EEEb+782)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #54 pc 00001b55  /system/bin/app_process32
01-18 09:52:46.499 24916 24916 F DEBUG   :     #55 pc 0001532c  /system/lib/libc.so (__libc_init+108)
01-18 09:52:46.499 24916 24916 F DEBUG   :     #56 pc 0000144c  /system/bin/app_process32
01-18 09:52:46.499 24916 24916 F DEBUG   :     #57 pc 00000004  <unknown>

 

Comment 1 by s...@chromium.org, Jan 18 (4 days ago)

Components: UI>Browser>ContentSuggestions>Feed UI>Browser>Navigation UI>Browser>NewTabPage
I'm not having an easy time getting a consistent repro. I have the feed enabled (chrome://flags, enable Interest Feed Content Suggestions). I tap on an article, then tap on a link inside that article, and then close Chrome. I re-open Chrome, and use the back button to go back to the article, then back to the NTP, and as it's switching to the NTP I crash maybe 20% of the time.

Comment 2 by twellington@google.com, Today (9 hours ago)

Cc: creis@chromium.org clamy@chromium.org nasko@chromium.org
Components: -UI>Browser>NewTabPage Internals>Sandbox>SiteIsolation
+some folks who have worked in this class somewhat recently

Comment 3 by twellington@google.com, Today (9 hours ago)

Components: -UI>Browser>ContentSuggestions>Feed

Sign in to add a comment