PNGReadPlugin keeps causing fresh Chromium builds to crash

37 views
Skip to first unread message

Nathan Olson

unread,
Aug 5, 2026, 10:07:28 PM (2 days ago) Aug 5
to Chromium-dev
Hi folks,

I built a fresh Chromium checkout, but I keep getting this odd SIG_ADRALN crash every time I start it up.

Received signal 10 BUS_ADRALN 00000bad4007
0   libbase.dylib                       0x00000001053477fc base::debug::CollectStackTrace(base::span<void const*, 18446744073709551615ul, void const**>) + 84
1   libbase.dylib                       0x00000001052e44a0 base::debug::StackTrace::StackTrace(unsigned long) + 156
2   libbase.dylib                       0x00000001052e4548 base::debug::StackTrace::StackTrace(unsigned long) + 36
3   libbase.dylib                       0x00000001052e4514 base::debug::StackTrace::StackTrace() + 40
4   libbase.dylib                       0x00000001053475f0 base::debug::(anonymous namespace)::StackDumpSignalHandler(int, __siginfo*, void*) + 1352
5   libsystem_platform.dylib            0x000000018fbb4144 _sigtramp + 56
6   ImageIO                             0x000000019d397838 PNGReadPlugin::InitializePluginData(IIOImageReadSession*, IIODictionary*, IIODictionary*, CGImageMetadata*, CGColorSpace**, ReadPluginData&, PNGPluginData&, __CFDictionary*) + 804
7   ImageIO                             0x000000019d451280 IIOReadPlugin::callInitialize(bool&) + 408
8   ImageIO                             0x000000019d3905f8 IIO_Reader::initImageAtOffset(CGImagePlugin*, unsigned long, unsigned long, unsigned long) + 176
9   ImageIO                             0x000000019d38dee4 IIOImageSource::makeImagePlus(unsigned long, IIODictionary*) + 540
10  ImageIO                             0x000000019d38d8f4 IIOImageSource::getPropertiesAtIndexInternal(unsigned long, IIODictionary*) + 72
11  ImageIO                             0x000000019d38d7d0 IIOImageSource::copyPropertiesAtIndex(unsigned long, IIODictionary*) + 36
12  ImageIO                             0x000000019d418898 CGImageSourceCopyPropertiesAtIndexEx + 372
13  AppKit                              0x00000001942f5094 ImageSourceOptionsForCGImageSource_index_ + 64
14  AppKit                              0x00000001942f4f20 +[NSBitmapImageRep _imagesWithData:hfsFileType:extension:zone:expandImageContentNow:includeAllReps:] + 432
15  AppKit                              0x0000000194407f3c +[NSBitmapImageRep imageRepsWithData:] + 68
16  AppKit                              0x0000000194407800 -[NSImage initWithData:] + 76
17  libui_base.dylib                    0x000000010a58ac2c ui::ResourceBundle::GetNativeImageNamed(int) + 840
18  libchrome_dll.dylib                 0x000000700b78c920 favicon::(anonymous namespace)::GetDefaultFaviconForColorScheme(bool) + 64
19  libchrome_dll.dylib                 0x000000700b78c8d4 favicon::GetDefaultFavicon() + 44
20  libchrome_dll.dylib                 0x0000007004e61d50 ChromeContentBrowserClient::GetDefaultFavicon() + 52
21  libcontent.dylib                    0x0000007040c81d54 content::FaviconStatus::FaviconStatus() + 92
22  libcontent.dylib                    0x0000007040c81dd0 content::FaviconStatus::FaviconStatus() + 28
23  libcontent.dylib                    0x000000704500d500 content::NavigationEntryImpl::NavigationEntryImpl(scoped_refptr<content::SiteInstanceImpl>, GURL const&, content::Referrer const&, std::__Cr::optional<url::Origin> const&, std::__Cr::optional<GURL> const&, std::__Cr::basic_string<char16_t, std::__Cr::char_traits<char16_t>, std::__Cr::allocator<char16_t>> const&, ui::PageTransition, bool, scoped_refptr<network::SharedURLLoaderFactory>, bool) + 552
24  libcontent.dylib                    0x000000704500d814 content::NavigationEntryImpl::NavigationEntryImpl(scoped_refptr<content::SiteInstanceImpl>, GURL const&, content::Referrer const&, std::__Cr::optional<url::Origin> const&, std::__Cr::optional<GURL> const&, std::__Cr::basic_string<char16_t, std::__Cr::char_traits<char16_t>, std::__Cr::allocator<char16_t>> const&, ui::PageTransition, bool, scoped_refptr<network::SharedURLLoaderFactory>, bool) + 160
25  libcontent.dylib                    0x0000007044fd7dc8 std::__Cr::unique_ptr<content::NavigationEntryImpl, std::__Cr::default_delete<content::NavigationEntryImpl>> std::__Cr::make_unique[abi:sqn230000]<content::NavigationEntryImpl, content::SiteInstanceImpl*, GURL&, content::Referrer, url::Origin const&, GURL const&, std::__Cr::basic_string<char16_t, std::__Cr::char_traits<char16_t>, std::__Cr::allocator<char16_t>>, ui::PageTransition, bool, std::nullptr_t, bool, 0>(content::SiteInstanceImpl*&&, GURL&, content::Referrer&&, url::Origin const&, GURL const&, std::__Cr::basic_string<char16_t, std::__Cr::char_traits<char16_t>, std::__Cr::allocator<char16_t>>&&, ui::PageTransition&&, bool&&, std::nullptr_t&&, bool&&) + 292
26  libcontent.dylib                    0x0000007044fd7b28 content::NavigationControllerImpl::CreateInitialEntry() + 840
27  libcontent.dylib                    0x0000007044d85a3c content::FrameTree::Init(content::SiteInstanceImpl*, bool, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&, content::RenderFrameHostImpl*, blink::FramePolicy const&, base::UnguessableToken const&) + 396
28  libcontent.dylib                    0x000000704598e908 content::WebContentsImpl::Init(content::WebContents::CreateParams const&, blink::FramePolicy) + 948
29  libcontent.dylib                    0x00000070459721f4 content::WebContentsImpl::CreateWithOpener(content::WebContents::CreateParams const&, content::RenderFrameHostImpl*) + 920
30  libcontent.dylib                    0x0000007045971e14 content::WebContentsImpl::Create(content::WebContents::CreateParams const&) + 44
31  libcontent.dylib                    0x0000007045971d94 content::WebContents::Create(content::WebContents::CreateParams const&) + 40
32  libui_views_controls_webview.dylib  0x0000000179eee7cc views::WebView::CreateWebContents(content::BrowserContext*, GURL const&, base::Location) + 280
33  libui_views_controls_webview.dylib  0x0000000179eee5dc views::WebView::GetWebContents(GURL const&, base::Location) + 156
34  libchrome_dll.dylib                 0x000000700a235a9c WebUIToolbarWebView::WebUIToolbarWebView(BrowserWindowInterface*, chrome::BrowserCommandController*, std::__Cr::unique_ptr<WebUILocationBar, std::__Cr::default_delete<WebUILocationBar>>) + 2252
35  libchrome_dll.dylib                 0x000000700a2369cc WebUIToolbarWebView::WebUIToolbarWebView(BrowserWindowInterface*, chrome::BrowserCommandController*, std::__Cr::unique_ptr<WebUILocationBar, std::__Cr::default_delete<WebUILocationBar>>) + 52
36  libchrome_dll.dylib                 0x000000700a200cac std::__Cr::unique_ptr<WebUIToolbarWebView, std::__Cr::default_delete<WebUIToolbarWebView>> std::__Cr::make_unique[abi:sqn230000]<WebUIToolbarWebView, base::raw_ptr<Browser, (partition_alloc::internal::RawPtrTraits)0> const&, chrome::BrowserCommandController*, std::__Cr::unique_ptr<WebUILocationBar, std::__Cr::default_delete<WebUILocationBar>>, 0>(base::raw_ptr<Browser, (partition_alloc::internal::RawPtrTraits)0> const&, chrome::BrowserCommandController*&&, std::__Cr::unique_ptr<WebUILocationBar, std::__Cr::default_delete<WebUILocationBar>>&&) + 148
37  libchrome_dll.dylib                 0x000000700a1fe708 ToolbarView::Init() + 1968
38  libchrome_dll.dylib                 0x0000007011e92298 BrowserView::AddedToWidget() + 448
39  libui_views.dylib                   0x0000000170fce014 views::View::PropagateAddNotifications(views::ViewHierarchyChangedDetails const&, bool) + 284
40  libui_views.dylib                   0x0000000170fcd3ec views::View::AddChildViewAtImpl(views::View*, unsigned long) + 1140
41  libui_views.dylib                   0x0000000170c77c58 views::ClientView* views::View::AddChildViewRaw<views::ClientView>(views::ClientView*) + 60
42  libui_views.dylib                   0x000000017106cea8 views::FrameView::InsertClientView(views::ClientView*) + 32
43  libui_views.dylib                   0x000000017106f7cc views::NonClientView::ViewHierarchyChanged(views::ViewHierarchyChangedDetails const&) + 172
44  libui_views.dylib                   0x0000000170fcde84 views::View::ViewHierarchyChangedImpl(views::ViewHierarchyChangedDetails const&) + 60
45  libui_views.dylib                   0x0000000170fcdff4 views::View::PropagateAddNotifications(views::ViewHierarchyChangedDetails const&, bool) + 252
46  libui_views.dylib                   0x0000000170fcd3ec views::View::AddChildViewAtImpl(views::View*, unsigned long) + 1140
47  libui_views.dylib                   0x0000000170c52be4 views::View* views::View::AddChildViewRaw<views::View>(views::View*) + 60
48  libui_views.dylib                   0x0000000171005400 views::internal::RootView::SetContentsView(views::View*) + 216
49  libui_views.dylib                   0x0000000171017160 views::Widget::Init(views::Widget::InitParams) + 2216
50  libchrome_dll.dylib                 0x0000007011ec0b50 BrowserWidget::InitBrowserWidget() + 712
51  libchrome_dll.dylib                 0x0000007011ec3870 BrowserWindow::CreateBrowserWindow(Browser*, bool, bool) + 256
52  libchrome_dll.dylib                 0x0000007011aceef8 Browser::Browser(Browser::CreateParams const&) + 1240
53  libchrome_dll.dylib                 0x0000007011ace6b4 Browser::Browser(Browser::CreateParams const&) + 36
54  libchrome_dll.dylib                 0x0000007011ace4f8 Browser::Create(Browser::CreateParams const&) + 164
55  libchrome_dll.dylib                 0x0000007008f76fd8 SessionRestoreImpl::FinishedTabCreation(bool, bool, std::__Cr::vector<SessionRestoreDelegate::RestoredTab, std::__Cr::allocator<SessionRestoreDelegate::RestoredTab>>&) + 160
56  libchrome_dll.dylib                 0x0000007008f761f4 SessionRestoreImpl::ProcessSessionWindows(std::__Cr::vector<std::__Cr::unique_ptr<sessions::SessionWindow, std::__Cr::default_delete<sessions::SessionWindow>>, std::__Cr::allocator<std::__Cr::unique_ptr<sessions::SessionWindow, std::__Cr::default_delete<sessions::SessionWindow>>>>*, SessionID, std::__Cr::vector<SessionRestoreDelegate::RestoredTab, std::__Cr::allocator<SessionRestoreDelegate::RestoredTab>>&, int*, int*, SessionRestore::StateCounts*) + 328
57  libchrome_dll.dylib                 0x0000007008f6daf4 SessionRestoreImpl::ProcessSessionWindowsAndNotify(std::__Cr::vector<std::__Cr::unique_ptr<sessions::SessionWindow, std::__Cr::default_delete<sessions::SessionWindow>>, std::__Cr::allocator<std::__Cr::unique_ptr<sessions::SessionWindow, std::__Cr::default_delete<sessions::SessionWindow>>>>*, SessionID) + 184
58  libchrome_dll.dylib                 0x0000007008f681d0 SessionRestoreImpl::Restore() + 960
59  libchrome_dll.dylib                 0x0000007008f67b48 SessionRestore::RestoreSession(Profile*, Browser*, unsigned int, std::__Cr::vector<StartupTab, std::__Cr::allocator<StartupTab>> const&) + 572
60  libchrome_dll.dylib                 0x0000007009512230 StartupBrowserCreatorImpl::RestoreOrCreateBrowser(std::__Cr::vector<StartupTab, std::__Cr::allocator<StartupTab>> const&, StartupBrowserCreatorImpl::BrowserOpenBehavior, unsigned int, chrome::startup::IsProcessStartup, bool) + 168
61  libchrome_dll.dylib                 0x00000070095108c4 StartupBrowserCreatorImpl::DetermineURLsAndLaunch(chrome::startup::IsProcessStartup, bool) + 1360
62  libchrome_dll.dylib                 0x000000700951019c StartupBrowserCreatorImpl::Launch(Profile*, chrome::startup::IsProcessStartup, bool) + 248
63  libchrome_dll.dylib                 0x0000007009508474 StartupBrowserCreator::LaunchBrowser(base::CommandLine const&, Profile*, base::FilePath const&, chrome::startup::IsProcessStartup, chrome::startup::IsFirstRun, bool) + 580
64  libchrome_dll.dylib                 0x0000007009508e1c StartupBrowserCreator::LaunchBrowserForLastProfiles(base::CommandLine const&, base::FilePath const&, chrome::startup::IsProcessStartup, chrome::startup::IsFirstRun, StartupProfileInfo, std::__Cr::vector<Profile*, std::__Cr::allocator<Profile*>> const&, bool) + 688
65  libchrome_dll.dylib                 0x000000700950817c StartupBrowserCreator::ProcessCmdLineImpl(base::CommandLine const&, base::FilePath const&, chrome::startup::IsProcessStartup, StartupProfileInfo, std::__Cr::vector<Profile*, std::__Cr::allocator<Profile*>> const&) + 3744
66  libchrome_dll.dylib                 0x0000007009507198 StartupBrowserCreator::Start(base::CommandLine const&, base::FilePath const&, StartupProfileInfo, std::__Cr::vector<Profile*, std::__Cr::allocator<Profile*>> const&) + 164
67  libchrome_dll.dylib                 0x0000007004e49d64 ChromeBrowserMainParts::PreMainMessageLoopRunImpl() + 2044
68  libchrome_dll.dylib                 0x0000007004e493a8 ChromeBrowserMainParts::PreMainMessageLoopRun() + 100
69  libcontent.dylib                    0x0000007043b518b8 content::BrowserMainLoop::PreMainMessageLoopRun() + 236
70  libcontent.dylib                    0x0000007043b5cf30 int base::internal::DecayedFunctorTraits<int (content::BrowserMainLoop::*)(), content::BrowserMainLoop*>::Invoke<int (content::BrowserMainLoop::*)(), content::BrowserMainLoop*>(int (content::BrowserMainLoop::*)(), content::BrowserMainLoop*&&) + 140
71  libcontent.dylib                    0x0000007043b5ce70 int base::internal::InvokeHelper<false, base::internal::FunctorTraits<int (content::BrowserMainLoop::*&&)(), content::BrowserMainLoop*>, int, 0ul>::MakeItSo<int (content::BrowserMainLoop::*)(), std::__Cr::tuple<base::internal::UnretainedWrapper<content::BrowserMainLoop, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>>(int (content::BrowserMainLoop::*&&)(), std::__Cr::tuple<base::internal::UnretainedWrapper<content::BrowserMainLoop, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>&&) + 108
72  libcontent.dylib                    0x0000007043b5cdf8 int base::internal::Invoker<base::internal::FunctorTraits<int (content::BrowserMainLoop::*&&)(), content::BrowserMainLoop*>, base::internal::BindState<true, true, false, int (content::BrowserMainLoop::*)(), base::internal::UnretainedWrapper<content::BrowserMainLoop, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunImpl<int (content::BrowserMainLoop::*)(), std::__Cr::tuple<base::internal::UnretainedWrapper<content::BrowserMainLoop, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, 0ul>(int (content::BrowserMainLoop::*&&)(), std::__Cr::tuple<base::internal::UnretainedWrapper<content::BrowserMainLoop, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>&&, std::__Cr::integer_sequence<unsigned long, 0ul>) + 32
73  libcontent.dylib                    0x0000007043b5cd4c base::internal::Invoker<base::internal::FunctorTraits<int (content::BrowserMainLoop::*&&)(), content::BrowserMainLoop*>, base::internal::BindState<true, true, false, int (content::BrowserMainLoop::*)(), base::internal::UnretainedWrapper<content::BrowserMainLoop, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) + 44
74  libcontent.dylib                    0x00000070458443bc base::OnceCallback<int ()>::Run() && + 176
75  libcontent.dylib                    0x0000007045844158 content::StartupTaskRunner::RunAllTasksNow(bool) + 184
76  libcontent.dylib                    0x0000007043b51134 content::BrowserMainLoop::CreateStartupTasks() + 828
77  libcontent.dylib                    0x0000007043b68024 content::BrowserMainRunnerImpl::Initialize(content::MainFunctionParams) + 648
78  libcontent.dylib                    0x0000007043b4c828 content::BrowserMain(content::MainFunctionParams) + 260
79  libcontent.dylib                    0x00000070473039d8 content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) + 296
80  libcontent.dylib                    0x000000704730684c content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) + 2216
81  libcontent.dylib                    0x0000007047305cd4 content::ContentMainRunnerImpl::Run() + 1040
82  libcontent.dylib                    0x0000007047301840 content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) + 588
83  libcontent.dylib                    0x0000007047301cf8 content::ContentMain(content::ContentMainParams) + 84
84  libchrome_dll.dylib                 0x000000700000ab70 ChromeMain + 824
85  Chromium                            0x00000001029a87c8 main + 552
86  dyld                                0x000000018f7d3bec start + 6688
[end of stack trace]
[1]    49713 bus error

Context: I have the Chromium checkout built on a separate, USB-C SSD because my main SSD doesn't have much room.
This has been an issue for the past couple macOS versions and I'm kind of at my wit's end. I'm running a late 2021 MacBook Pro, M1 Max.

Any help would be greatly appreciated! Looking forward to contributing to Chromium :)

Thanks,
Nathan (aka NullSound)

Avi Drissman

unread,
Aug 6, 2026, 10:42:58 AM (yesterday) Aug 6
to nat...@nullsound.dev, Chromium-dev
Please look at the library column; we need to look at the last stack frame in the Chromium source code before it goes into the frameworks:

16  AppKit                              0x0000000194407800 -[NSImage initWithData:] + 76
17  libui_base.dylib                    0x000000010a58ac2c ui::ResourceBundle::GetNativeImageNamed(int) + 840

So ui::ResourceBundle::GetNativeImageNamed() is trying to create an NSImage, and that is exploding deep in macOS. Yes, ImageIO shouldn't be crashing on bad data (and you can file with Apple if you want about that), but that implies that your checkout might have some bad bits somewhere. I would double-check your local repo, and verify all your files. Perhaps a clean build would help.

Avi


--
--
Chromium Developers mailing list: chromi...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-dev
---
You received this message because you are subscribed to the Google Groups "Chromium-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-dev...@chromium.org.
To view this discussion visit https://groups.google.com/a/chromium.org/d/msgid/chromium-dev/f630aeea-f522-49ee-bee7-12e05aeaf07cn%40chromium.org.
Reply all
Reply to author
Forward
0 new messages