Issue 377371 in chromium: Renderer crash at http://www.urbandictionary.com/

[chro...@googlecode.com]

Status: Untriaged
Owner: ----
Labels: Type-Bug Pri-2 Cr-Blink-Rendering

New issue 377371 by uk...@chromium.org: Renderer crash at
http://www.urbandictionary.com/
http://code.google.com/p/chromium/issues/detail?id=377371

Version: 37.0.2014.0 (Developer Build 272763)
OS: Linux

What steps will reproduce the problem?
1. visit http://www.urbandictionary.com/define.php?term=chrome


What is the expected output? What do you see instead?
expected the page is shown.

but renderer crashes; Aw, Snap! page is shown.




--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[chro...@googlecode.com]

Updates:
Status: Available

Comment #1 on issue 377371 by jchaf...@chromium.org: Renderer crash at
http://www.urbandictionary.com/
http://code.google.com/p/chromium/issues/detail?id=377371

100% reproducible on Mac too. It's a V8 issue though.

Stack-trace:

0x01cee84d [Google Chrome Framework -string-stream.cc:163 ]
v8::internal::StringStream::PrintObject(v8::internal::Object*)
0x01cee3b6 [Google Chrome Framework -string-stream.cc:114 ]
v8::internal::StringStream::Add(v8::internal::Vector<char const>,
v8::internal::Vector<v8::internal::FmtElm>)
0x01ceeb18 [Google Chrome Framework -string-stream.cc:210 ]
v8::internal::StringStream::Add(char const*, v8::internal::FmtElm,
v8::internal::FmtElm)
0x01af1383 [Google Chrome Framework -frames.cc:1267 ]
v8::internal::JavaScriptFrame::Print(v8::internal::StringStream*,
v8::internal::StackFrame::PrintMode, int) const
0x01bc3768 [Google Chrome Framework -isolate.cc:588 ]
v8::internal::Isolate::PrintStack(v8::internal::StringStream*)
0x01bc4e92 [Google Chrome Framework -isolate.cc:566 ]
v8::internal::Isolate::PrintStack(__sFILE*)
0x01cbceb3 [Google Chrome Framework -runtime.cc:14545 ]
v8::internal::Runtime_Abort(int, v8::internal::Object**,
v8::internal::Isolate*)
0x3150b195
0x3150f8df
0x40de6ce0
0x40df95f8
0x3152b704
0x40de23d7
0x3152b704
0x40de1a20
0x40de168e
0x40d49ae8
0x40d124db
0x40d497f3
0x40d49984
0x40de10ea
0x40de06c6
0x40ddf035
0x40ddedb2
0x40dda9d9
0x40dd8a4a
0x40dd86ad
0x315472f4
0x40dcab5e
0x40dca82f
0x40dca526
0x31544ed4
0x31523809
0x01ad27bb [Google Chrome Framework -execution.cc:94 ]
v8::internal::Invoke(bool, v8::internal::Handle<v8::internal::JSFunction>,
v8::internal::Handle<v8::internal::Object>, int,
v8::internal::Handle<v8::internal::Object>*)
0x01ad23f1 [Google Chrome Framework -execution.cc:149 ]
v8::internal::Execution::Call(v8::internal::Isolate*,
v8::internal::Handle<v8::internal::Object>,
v8::internal::Handle<v8::internal::Object>, int,
v8::internal::Handle<v8::internal::Object>*, bool)
0x01a4cdc9 [Google Chrome Framework -api.cc:3967 ]
v8::Function::Call(v8::Handle<v8::Value>, int, v8::Handle<v8::Value>*)
0x0261d6ae [Google Chrome Framework -V8ScriptRunner.cpp:140 ]
WebCore::V8ScriptRunner::callFunction(v8::Handle<v8::Function>,
WebCore::ExecutionContext*, v8::Handle<v8::Value>, int,
v8::Handle<v8::Value>*, v8::Isolate*)
0x025f03a9 [Google Chrome Framework -ScriptController.cpp:161 ]
WebCore::ScriptController::callFunction(WebCore::ExecutionContext*,
v8::Handle<v8::Function>, v8::Handle<v8::Value>, int,
v8::Handle<v8::Value>*, v8::Isolate*)
0x025f0003 [Google Chrome Framework -ScriptController.cpp:144 ]
WebCore::ScriptController::callFunction(v8::Handle<v8::Function>,
v8::Handle<v8::Value>, int, v8::Handle<v8::Value>*)
0x0261124c [Google Chrome Framework -V8EventListener.cpp:93 ]
WebCore::V8EventListener::callListenerFunction(WebCore::ExecutionContext*,
v8::Handle<v8::Value>, WebCore::Event*)
0x0260b716 [Google Chrome Framework -V8AbstractEventListener.cpp:126 ]
WebCore::V8AbstractEventListener::invokeEventHandler(WebCore::ExecutionContext*,
WebCore::Event*, v8::Local<v8::Value>)
0x0260b59a [Google Chrome Framework -V8AbstractEventListener.cpp:92 ]
WebCore::V8AbstractEventListener::handleEvent(WebCore::ExecutionContext*,
WebCore::Event*)
0x01ead76f [Google Chrome Framework -EventTarget.cpp:328 ]
WebCore::EventTarget::fireEventListeners(WebCore::Event*,
WebCore::EventTargetData*, WTF::Vector<WebCore::RegisteredEventListener,
1ul, WTF::DefaultAllocator>&)
0x01ead2e2 [Google Chrome Framework -EventTarget.cpp:271 ]
WebCore::EventTarget::fireEventListeners(WebCore::Event*)
0x01ead198 [Google Chrome Framework -EventTarget.cpp:175 ]
WebCore::EventTarget::dispatchEvent(WTF::PassRefPtr<WebCore::Event>)
0x022029be [Google Chrome Framework -DOMWindow.cpp:889 ]
WebCore::DOMWindow::dispatchMessageEventWithOriginCheck(WebCore::SecurityOrigin*,
WTF::PassRefPtr<WebCore::Event>, WTF::PassRefPtr<WebCore::ScriptCallStack>)
0x022028f7 [Google Chrome Framework -DOMWindow.cpp:875 ]
WebCore::DOMWindow::postMessageTimerFired(WTF::PassOwnPtr<WebCore::PostMessageTimer>)
0x0220834d [Google Chrome Framework -DOMWindow.cpp:142 ]
WebCore::PostMessageTimer::fired()
0x01874bca [Google Chrome Framework -ThreadTimers.cpp:138 ]
WebCore::ThreadTimers::sharedTimerFiredInternal()
0x0187496c [Google Chrome Framework -ThreadTimers.cpp:108 ]
WebCore::ThreadTimers::sharedTimerFired()
0x03b881d0 [Google Chrome Framework -bind_internal.h:134 ]
base::internal::Invoker<1,
base::internal::BindState<base::internal::RunnableAdapter<void
(content::BlinkPlatformImpl::*)()>, void (content::BlinkPlatformImpl*),
void (base::internal::UnretainedWrapper<content::BlinkPlatformImpl>)>, void
()(content::BlinkPlatformImpl*)>::Run(base::internal::BindStateBase*)
0x008498ce [Google Chrome Framework -callback.h:401 ]
base::Timer::RunScheduledTask()
0x00849915 [Google Chrome Framework -timer.cc:49 ]
base::BaseTimerTaskInternal::Run()
0x00849940 [Google Chrome Framework -bind_internal.h:134 ]
base::internal::Invoker<1,
base::internal::BindState<base::internal::RunnableAdapter<void
(base::BaseTimerTaskInternal::*)()>, void (base::BaseTimerTaskInternal*),
void (base::internal::OwnedWrapper<base::BaseTimerTaskInternal>)>, void
()(base::BaseTimerTaskInternal*)>::Run(base::internal::BindStateBase*)
0x00814939 [Google Chrome Framework -callback.h:401 ]
base::MessageLoop::RunTask(base::PendingTask const&)
0x00814fb6 [Google Chrome Framework -message_loop.cc:462 ]
base::MessageLoop::DoWork()
0x007cd1cc [Google Chrome Framework -message_pump_mac.mm:488 ]
base::MessagePumpCFRunLoopBase::RunWork()
0x9bbb9b6e [CoreFoundation + 0x00085b6e ]
__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__
0x9bbaa96a [CoreFoundation + 0x0007696a ] __CFRunLoopDoSources0
0x9bbaa06d [CoreFoundation + 0x0007606d ] __CFRunLoopRun
0x9bba99f9 [CoreFoundation + 0x000759f9 ] CFRunLoopRunSpecific
0x9bba985a [CoreFoundation + 0x0007585a ] CFRunLoopRunInMode
0x99efc2f8 [Foundation + 0x0006f2f8 ] -[NSRunLoop(NSRunLoop)
runMode:beforeDate:]
0x007cd69e [Google Chrome Framework -message_pump_mac.mm:774 ]
base::MessagePumpNSRunLoop::DoRun(base::MessagePump::Delegate*)
0x007ccfab [Google Chrome Framework -message_pump_mac.mm:399 ]
base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*)
0x00814550 [Google Chrome Framework -message_loop.cc:400 ]
base::MessageLoop::RunHandler()
0x0082be60 [Google Chrome Framework -run_loop.cc:49 ] base::RunLoop::Run()
0x008142d9 [Google Chrome Framework -message_loop.cc:293 ]
base::MessageLoop::Run()
0x03d10224 [Google Chrome Framework -renderer_main.cc:252 ]
content::RendererMain(content::MainFunctionParams const&)
0x00791839 [Google Chrome Framework -content_main_runner.cc:412 ]
content::RunNamedProcessTypeMain(std::string const&,
content::MainFunctionParams const&, content::ContentMainDelegate*)
0x0079210d [Google Chrome Framework -content_main_runner.cc:736 ]
content::ContentMainRunnerImpl::Run()
0x007916b1 [Google Chrome Framework -content_main.cc:19 ]
content::ContentMain(content::ContentMainParams const&)
0x00054ab4 [Google Chrome Framework -chrome_main.cc:46 ] ChromeMain
0x0004bf77 [Google Chrome Helper -chrome_exe_main_mac.cc:53 ] main
0x0004bf54 [Google Chrome Helper + 0x00000f54 ] start
0x0000000c

For full report, look for CrashID: 02ab5d85417df281

[chro...@googlecode.com]

Updates:
Cc: erik.corry ag...@chromium.org

Comment #2 on issue 377371 by jchaf...@chromium.org: Renderer crash at
http://www.urbandictionary.com/
http://code.google.com/p/chromium/issues/detail?id=377371

CC'ing some folks who have fixed a similar stack-trace.

[chro...@googlecode.com]

Updates:
Labels: Cr-Blink-JavaScript

Comment #3 on issue 377371 by joc...@chromium.org: Renderer crash at
http://www.urbandictionary.com/
http://code.google.com/p/chromium/issues/detail?id=377371

(No comment was entered for this change.)

[chro...@googlecode.com]

Updates:
Owner: yan...@chromium.org

Comment #5 on issue 377371 by yan...@chromium.org: Renderer crash at
http://www.urbandictionary.com/
http://code.google.com/p/chromium/issues/detail?id=377371

Cannot reproduce on the latest chromium build. Is this still an issue with
the M37?

[chro...@googlecode.com]

Updates:
Status: Fixed

Comment #8 on issue 377371 by habl...@chromium.org: Renderer crash at
http://www.urbandictionary.com/
https://code.google.com/p/chromium/issues/detail?id=377371

Cannot repro on latest stable M46.