chromium crash after access a security Embedded pdf from another Embedded PDF content

[Tình Nguyễn Hữu]

chromium crash after access a  security  Embedded pdf from another Embedded PDF content.

After doing that many time, chromium is hung out, and crash after that.

[857:860:0602/154716.859509:125545:FATAL:child_thread_impl.cc(347)] Crashing because hung
#0 0x007f8d617184 base::debug::CollectStackTrace()
#1 0x007f8d5fed98 base::debug::StackTrace::StackTrace()
#2 0x007f8d5245d0 logging::LogMessage::~LogMessage()
#3 0x007f8a112fb4 (/chromium/libcontent.so+0xa05fb3)
#4 0x007f8a1efae8 content::mojom::ChildProcessStubDispatch::Accept()
#5 0x007f8b7757ec mojo::InterfaceEndpointClient::HandleValidatedMessage()
#6 0x007f8b77b510 mojo::MessageDispatcher::Accept()
#7 0x007f8b776cb4 mojo::InterfaceEndpointClient::HandleIncomingMessage()
#8 0x007f8b77eab8 mojo::internal::MultiplexRouter::ProcessIncomingMessage()
#9 0x007f8b77e3fc mojo::internal::MultiplexRouter::Accept()
#10 0x007f8b77b510 mojo::MessageDispatcher::Accept()
#11 0x007f8b76f9bc mojo::Connector::DispatchMessage()
#12 0x007f8b7701f8 mojo::Connector::ReadAllAvailableMessages()
#13 0x007f8b7707cc (/chromium/libmojo_public_cpp_bindings.so+0x347cb)
#14 0x007f8b6ca488 mojo::SimpleWatcher::OnHandleReady()
#15 0x007f8b6ca630 (/chromium/libmojo_public_system_cpp.so+0x2262f)
#16 0x007f8b6c9b14 (/chromium/libmojo_public_system_cpp.so+0x21b13)
#17 0x007f7a673548 (/chromium/libmojo_core_embedder_internal.so+0x66547)
#18 0x007f7a673f3c (/chromium/libmojo_core_embedder_internal.so+0x66f3b)
#19 0x007f7a6bdef4 (/chromium/libmojo_core_embedder_internal.so+0xb0ef3)
#20 0x007f7a6b72f8 (/chromium/libmojo_core_embedder_internal.so+0xaa2f7)
#21 0x007f7a6aa7c4 (/chromium/libmojo_core_embedder_internal.so+0x9d7c3)
#22 0x007f7a6a9f30 (/chromium/libmojo_core_embedder_internal.so+0x9cf2f)
#23 0x007f7a6b0be8 (/chromium/libmojo_core_embedder_internal.so+0xa3be7)
#24 0x007f7a69b938 (/chromium/libmojo_core_embedder_internal.so+0x8e937)
#25 0x007f7a6787d8 mojo::core::ipcz_driver::Transport::OnChannelMessage()
#26 0x007f7a65a4cc mojo::core::Channel::TryDispatchMessage()
#27 0x007f7a65a31c mojo::core::Channel::OnReadComplete()
#28 0x007f7a6921b4 (/chromium/libmojo_core_embedder_internal.so+0x851b3)
#29 0x007f8d625188 base::MessagePumpEpoll::HandleEvent()
#30 0x007f8d624ed4 base::MessagePumpEpoll::OnEpollEvent()
#31 0x007f8d6248f4 base::MessagePumpEpoll::WaitForEpollEvents()
#32 0x007f8d6245d8 base::MessagePumpEpoll::Run()
#33 0x007f8d5af6c0 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run()
#34 0x007f8d565d0c base::RunLoop::Run()
#35 0x007f8d5d78c0 base::Thread::Run()
#36 0x007f8a10fe38 (/chromium/libcontent.so+0xa02e37)
#37 0x007f8d5d7a24 base::Thread::ThreadMain()
#38 0x007f8d5ef080 (/chromium/libbase.so+0x25607f)
#39 0x007f7b2e8c24 (/updosl/lib/libc.so.6+0x7ac23)
#40 0x007f7b34d95c (/updosl/lib/libc.so.6+0xdf95b)
Crash keys:
  "loaded-origin-2" = "http://127.0.0.1:60000"
  "view-count" = "3"
  "loaded-origin-1" = "http://127.0.0.1:53080"
  "loaded-origin-0" = "http://10.17.47.119"
  "web-frame-count" = "5"
  "top-origin" = "http://10.17.47.119"
  "url-chunk" = "http://10.17.47.119/01356/%E9%81%95%E3%81%86%E3%83%91%E3%82%B9%E3%83%AF%E3%83%BC%E3%83%89%E3%82%92%E5%85%A5%E5%8A%9B%E3%81%97%E3%80%81%E7%94%BB%E9%9D%A2%E3%81%8C%E3%81%86%E3%81%BE%E3%81%8F%E3%81%84%E3%81%8B%E3%81%AA%E3%81%8F%E3%81%A6%E3%80%81%E6%88%BB%E3%82%8B%E3%83%9C%E3%82%BF%E3%83%B3%E3%81%AF%E5%8F%8D%E5%BF%9C%E3%81%8C%E3%81%AA%E3%81%84.html"
  "renderer_foreground" = "true"
  "v8_ro_space_firstpage_address" = "0x5f00000000"
  "v8_isolate_address" = "0x2000558000"
  "reentry_guard_tls_slot" = "unused"
  "switch-17" = "--field-trial-handle=0,i,9987828279743092499,1466331298041532593"
  "switch-16" = "--shared-files=v8_snapshot_data:100"
  "switch-15" = "--launch-time-ticks=47132113"
  "switch-14" = "--time-ticks-at-unix-epoch=-1717309899384414"
  "switch-13" = "--renderer-client-id=5"
  "switch-12" = "--num-raster-threads=1"
  "switch-11" = "--lang=en-US"
  "switch-10" = "--disable-blink-features=FileSystemAccess"
  "switch-9" = "--disable-gpu-compositing"
  "switch-8" = "--js-flags=--noexpose_wasm"
  "switch-7" = "--touch-events=enabled"
  "switch-6" = "--no-sandbox"
  "commandline-disabled-feature-20" = "brotli-encoding"
  "commandline-disabled-feature-19" = "WebShare"
  "commandline-disabled-feature-18" = "VizDisplayCompositor"
  "commandline-disabled-feature-17" = "TranslateRankerQuery"
  "commandline-disabled-feature-16" = "TranslateRankerEnforcement"
  "commandline-disabled-feature-15" = "SpeculativePreconnect"
  "commandline-disabled-feature-14" = "SitePerProcess"
  "commandline-disabled-feature-13" = "SiteCharacteristicsDatabase"
  "commandline-disabled-feature-12" = "ProactiveTabFreezeAndDiscard"
  "commandline-disabled-feature-11" = "PictureInPicture"
  "commandline-disabled-feature-10" = "ParkableImagesToDisk"
  "commandline-disabled-feature-9" = "MediaRouter"
  "commandline-disabled-feature-8" = "LayoutNG"
  "commandline-disabled-feature-7" = "IsolateOrigins"
  "commandline-disabled-feature-6" = "IntensiveWakeUpThrottling"
  "commandline-disabled-feature-5" = "GlobalMediaControls"
  "commandline-disabled-feature-4" = "BackForwardCache"
  "commandline-disabled-feature-3" = "AutofillServerCommunication"
  "commandline-disabled-feature-2" = "AudioServiceOutOfProcess"
  "commandline-disabled-feature-1" = "AppCache"
  "commandline-enabled-feature-1" = "NetworkServiceInProcess"
  "osarch" = "aarch64"
  "pid" = "857"
  "ptype" = "renderer"
  "switch-5" = "--first-renderer-process"
  "switch-4" = "--change-stack-guard-on-fork=enable"
  "switch-3" = "--user-data-dir=/ram_chromium/chromium"
  "switch-2" = "--enable-crash-reporter=,"
  "switch-1" = "--crashpad-handler-pid=0"
  "num-switches" = "22"

[0602/154717.365686:ERROR:elf_dynamic_array_reader.h(64)] tag not found
[0602/154717.366017:ERROR:elf_dynamic_array_reader.h(64)] tag not found
[0602/154717.366125:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.367471:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.367512:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.367530:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.367550:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.367567:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.368356:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.384047:WARNING:thread_snapshot_linux.cc(116)] invalid static priority 176
[0602/154717.384771:WARNING:thread_snapshot_linux.cc(116)] invalid static priority 176
[0602/154717.385261:WARNING:thread_snapshot_linux.cc(116)] invalid static priority 176
[0602/154717.385677:WARNING:thread_snapshot_linux.cc(116)] invalid static priority 176
[0602/154717.386440:WARNING:thread_snapshot_linux.cc(116)] invalid static priority 176
[0602/154717.386852:WARNING:thread_snapshot_linux.cc(116)] invalid static priority 176
[0602/154717.387298:WARNING:thread_snapshot_linux.cc(116)] invalid static priority 176
[0602/154717.387739:WARNING:thread_snapshot_linux.cc(116)] invalid static priority 176
[0602/154717.388180:WARNING:thread_snapshot_linux.cc(116)] invalid static priority 176
[0602/154717.388596:WARNING:thread_snapshot_linux.cc(116)] invalid static priority 176
[0602/154717.389007:WARNING:thread_snapshot_linux.cc(116)] invalid static priority 176
[0602/154717.390144:WARNING:thread_snapshot_linux.cc(116)] invalid static priority 176
[0602/154717.395004:ERROR:file_io_posix.cc(144)] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_cur_freq: No such file or directory (2)
[0602/154717.395097:ERROR:file_io_posix.cc(144)] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq: No such file or directory (2)
[0602/154717.395585:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.395621:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.397835:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.397874:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.397894:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.397911:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.397928:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.397944:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.397977:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.397994:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.398011:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.398027:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.399757:ERROR:process_memory_range.cc(75)] read out of range
[0602/154717.399798:ERROR:process_memory_range.cc(75)] read out of range

[Yuvraj Sirganor]

check for latest version or try running with specfic flags

[Lei Zhang]

Please file a bug report on crbug.com with steps to reproduce the issue.

--
--
Chromium Developers mailing list: chromi...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-dev
---
You received this message because you are subscribed to the Google Groups "Chromium-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-dev...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-dev/606e21c5-e080-4610-8362-a38b6ec0f39an%40chromium.org.