Issue 131855 in chromium: Access violation in DefaultServerBoundCertStore::SetForceKeepSessionState during shutdown

[chro...@googlecode.com]

Status: Untriaged
Owner: ----
Labels: Type-Bug Pri-2 Area-Internals Internals-Network-SSL

New issue 131855 by g...@chromium.org: Access violation in
DefaultServerBoundCertStore::SetForceKeepSessionState during shutdown
http://code.google.com/p/chromium/issues/detail?id=131855

Version: 21.0.1167.0 (canary)
OS: Windows 7

What steps will reproduce the problem?
1. An in-use update to 1168 was delivered.
2. I clicked the thing in the wrench menu to have Chrome relaunch to apply
the update.
3. My windows all went away and nothing else happened.
4. I found the "Whoah, Google Chrome has crashed" window hiding behind all
other windows on my desktop.
5. I opened the crash dump.
6. It appears that the store_ member of DefaultServerBoundCertStore is
already NULL.

Tentatively tagging as a Network-SSL bug since it's cert store related.

0:012> !analyze -v
*******************************************************************************
*
*
* Exception
Analysis *
*
*
*******************************************************************************

GetUrlPageData2 (WinHttp) failed: 12029.

FAULTING_IP:
chrome_540c0000!net::DefaultServerBoundCertStore::SetForceKeepSessionState+16
[c:\b\build\slave\win\build\src\net\base\default_server_bound_cert_store.cc
@
125]
55260e25 8b01 mov eax,dword ptr [ecx]

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 55260e25
(chrome_540c0000!net::DefaultServerBoundCertStore::SetForceKeepSessionState+0x00000016)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000000
Attempt to read from address 00000000

PROCESS_NAME: chrome.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced
memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx
referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 00000000

READ_ADDRESS: 00000000

FOLLOWUP_IP:
chrome_540c0000!net::DefaultServerBoundCertStore::SetForceKeepSessionState+16
[c:\b\build\slave\win\build\src\net\base\default_server_bound_cert_store.cc
@
125]
55260e25 8b01 mov eax,dword ptr [ecx]

NTGLOBALFLAG: 400

APP: chrome.exe

FAULTING_THREAD: 00003850

BUGCHECK_STR: APPLICATION_FAULT_NULL_POINTER_READ_CALL

PRIMARY_PROBLEM_CLASS: NULL_POINTER_READ_CALL

DEFAULT_BUCKET_ID: NULL_POINTER_READ_CALL

LAST_CONTROL_TRANSFER: from 5551df30 to 55260e25

STACK_TEXT:
0469f734 5551df30 00000000 0469f74c 542c6110
chrome_540c0000!net::DefaultServerBoundCertStore::SetForceKeepSessionState+0x16
0469f740 542c6110 0cd92a40 0469f7a8 540dd3ab
chrome_540c0000!content::`anonymous
namespace'::SaveSessionStateOnIOThread+0x33
0469f74c 540dd3ab 04d996d0 0469f9c8 04d996d4
chrome_540c0000!base::internal::Invoker<1,base::internal::BindState<base::internal::RunnableAdapter<bool
(__cdecl*)(_iobuf *)>,void __cdecl(_iobuf *),void __cdecl(_iobuf *)>,void
__cdecl(_iobuf *)>::Run+0xe
0469f7a8 540db8c6 0469f9c8 0469f7c8 005504d0
chrome_540c0000!MessageLoop::RunTask+0x193
0469f8f8 540dc2b5 00000000 005504d0 00540ae8
chrome_540c0000!MessageLoop::DoWork+0x32f
0469f944 540dc1c3 005869d8 0469f9c8 0469f9c8
chrome_540c0000!base::MessagePumpForIO::DoRunLoop+0xe7
0469f964 540db46a 0469f9c8 005869d8 005869c0
chrome_540c0000!base::MessagePumpWin::Run+0x3e
0469f988 540db3e6 00000001 54176d00 00000000
chrome_540c0000!MessageLoop::RunInternal+0x74
0469f9a4 540dc531 0469fad8 540dc4f5 0469f9c8
chrome_540c0000!MessageLoop::Run+0x58
0469f9ac 540dc4f5 0469f9c8 00000000 005869c0
chrome_540c0000!base::Thread::Run+0xb
0469fad8 540dc457 00000000 0469faf0 75af3677
chrome_540c0000!base::Thread::ThreadMain+0x97
0469fae4 75af3677 00540ae8 0469fb30 77c39f42
chrome_540c0000!base::`anonymous namespace'::ThreadFunc+0x1b
0469faf0 77c39f42 00540ae8 316d40cb 00000000
kernel32!BaseThreadInitThunk+0xe
0469fb30 77c39f15 540dc43c 00540ae8 00000000 ntdll!__RtlUserThreadStart+0x70
0469fb48 00000000 540dc43c 00540ae8 00000000 ntdll!_RtlUserThreadStart+0x1b


FAULTING_SOURCE_LINE:
c:\b\build\slave\win\build\src\net\base\default_server_bound_cert_store.cc

FAULTING_SOURCE_FILE:
c:\b\build\slave\win\build\src\net\base\default_server_bound_cert_store.cc

FAULTING_SOURCE_LINE_NUMBER: 125

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME:
chrome!net::DefaultServerBoundCertStore::SetForceKeepSessionState+16

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: chrome_540c0000

IMAGE_NAME: chrome.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 4fd080f5

STACK_COMMAND: ~12s; .ecxr ; kb

FAILURE_BUCKET_ID:
NULL_POINTER_READ_CALL_c0000005_chrome.dll!net::DefaultServerBoundCertStore::SetForceKeepSessionState

BUCKET_ID:
APPLICATION_FAULT_NULL_POINTER_READ_CALL_chrome!net::DefaultServerBoundCertStore::SetForceKeepSessionState+16

WATSON_STAGEONE_URL:
http://watson.microsoft.com/StageOne/chrome_exe/21_0_1167_0/4fd08136/chrome_dll/21_0_1167_0/4fd080f5/c0000005/011a0e25.htm?Retriage=1

Followup: MachineOwner
---------

[chro...@googlecode.com]

Updates:
Cc: ma...@chromium.org

Comment #1 on issue 131855 by rsl...@chromium.org: Access violation in

DefaultServerBoundCertStore::SetForceKeepSessionState during shutdown
http://code.google.com/p/chromium/issues/detail?id=131855

(No comment was entered for this change.)

[chro...@googlecode.com]

Updates:
Status: Assigned
Owner: joc...@chromium.org
Cc: w...@chromium.org
Labels: Mstone-20

Comment #2 on issue 131855 by w...@chromium.org: Access violation in

DefaultServerBoundCertStore::SetForceKeepSessionState during shutdown
http://code.google.com/p/chromium/issues/detail?id=131855

jochen: could you take a look at this crash? You added
DefaultServerBoundCertStore::SetForceKeepSessionState in
https://chromiumcodereview.appspot.com/10447117. Thanks.

[chro...@googlecode.com]

Updates:
Status: Fixed
Labels: -Restrict-View-EditIssueCc

Comment #5 on issue 131855 by joc...@chromium.org: Access violation in

DefaultServerBoundCertStore::SetForceKeepSessionState during shutdown
http://code.google.com/p/chromium/issues/detail?id=131855