SIGSEGV in oxide::InputMethodContext::SetImeBridge when running unit tests

Bug #1556323 reported by Chris Coulson on 2016-03-11
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Oxide
Critical
Chris Coulson
1.14
Critical
Chris Coulson

Bug Description

I'm seeing this crash sometimes when running tests:

#0 0x0000000000000000 in ?? ()
#1 0x00007ffff3360042 in oxide::InputMethodContext::SetImeBridge (this=0xfb2400, bridge=<optimised out>) at ../../../../shared/browser/input/oxide_input_method_context.cc:33
#2 0x00007ffff335fcfe in oxide::ImeBridgeImpl::SetContext (context=0x0, this=0x106fae0) at ../../../../shared/browser/input/oxide_ime_bridge_impl.cc:103
#3 oxide::ImeBridgeImpl::~ImeBridgeImpl (this=0x106fae0, __in_chrg=<optimised out>) at ../../../../shared/browser/input/oxide_ime_bridge_impl.cc:97
#4 0x00007ffff3379589 in oxide::RenderWidgetHostView::~RenderWidgetHostView (this=0x106f910, __in_chrg=<optimised out>) at ../../../../shared/browser/oxide_render_widget_host_view.cc:829
#5 0x00007ffff33798c8 in oxide::RenderWidgetHostView::~RenderWidgetHostView (this=0x106f910, __in_chrg=<optimised out>) at ../../../../shared/browser/oxide_render_widget_host_view.cc:833
#6 oxide::RenderWidgetHostView::Destroy (this=0x106f910) at ../../../../shared/browser/oxide_render_widget_host_view.cc:430
#7 0x00007ffff367219b in content::RenderWidgetHostImpl::Destroy (this=0xf5ab00, also_delete=<optimised out>) at ../../../../third_party/chromium/src/content/browser/renderer_host/render_widget_host_impl.cc:1454
#8 0x00007ffff3672702 in content::RenderWidgetHostImpl::ShutdownAndDestroyWidget (this=<optimised out>, also_delete=also_delete@entry=false)
    at ../../../../third_party/chromium/src/content/browser/renderer_host/render_widget_host_impl.cc:433
#9 0x00007ffff3668b4f in content::RenderViewHostImpl::ShutdownAndDestroy (this=0xd24920) at ../../../../third_party/chromium/src/content/browser/renderer_host/render_view_host_impl.cc:941
#10 0x00007ffff3523d4d in content::FrameTree::ReleaseRenderViewHostRef (this=0xe7c198, render_view_host=<optimised out>) at ../../../../third_party/chromium/src/content/browser/frame_host/frame_tree.cc:398
#11 0x00007ffff353f2d4 in content::RenderFrameHostImpl::~RenderFrameHostImpl (this=0x10510d0, __in_chrg=<optimised out>)
    at ../../../../third_party/chromium/src/content/browser/frame_host/render_frame_host_impl.cc:301
#12 0x00007ffff353f729 in content::RenderFrameHostImpl::~RenderFrameHostImpl (this=0x10510d0, __in_chrg=<optimised out>)
    at ../../../../third_party/chromium/src/content/browser/frame_host/render_frame_host_impl.cc:302
#13 0x00007ffff35455db in std::default_delete<content::RenderFrameHostImpl>::operator() (this=0x7fffffff5530, __ptr=<optimised out>) at /usr/include/c++/5/bits/unique_ptr.h:76
#14 base::internal::scoped_ptr_impl<content::RenderFrameHostImpl, std::default_delete<content::RenderFrameHostImpl> >::reset (p=0x0, this=0x7fffffff5530)
    at ../../../../third_party/chromium/src/base/memory/scoped_ptr.h:186
#15 base::internal::scoped_ptr_impl<content::RenderFrameHostImpl, std::default_delete<content::RenderFrameHostImpl> >::~scoped_ptr_impl (this=0x7fffffff5530, __in_chrg=<optimised out>)
    at ../../../../third_party/chromium/src/base/memory/scoped_ptr.h:175
#16 scoped_ptr<content::RenderFrameHostImpl, std::default_delete<content::RenderFrameHostImpl> >::~scoped_ptr (this=0x7fffffff5530, __in_chrg=<optimised out>)
    at ../../../../third_party/chromium/src/base/memory/scoped_ptr.h:249
#17 content::RenderFrameHostManager::~RenderFrameHostManager (this=0x10c3da0, __in_chrg=<optimised out>) at ../../../../third_party/chromium/src/content/browser/frame_host/render_frame_host_manager.cc:84
#18 0x00007ffff35251be in content::FrameTreeNode::~FrameTreeNode (this=0x10c3d90, __in_chrg=<optimised out>) at ../../../../third_party/chromium/src/content/browser/frame_host/frame_tree_node.cc:110
#19 0x00007ffff3522bdd in content::FrameTree::~FrameTree (this=0xe7c198, __in_chrg=<optimised out>) at ../../../../third_party/chromium/src/content/browser/frame_host/frame_tree.cc:148
#20 0x00007ffff3712eb7 in content::WebContentsImpl::~WebContentsImpl (this=0xe7bf50, __in_chrg=<optimised out>) at ../../../../third_party/chromium/src/content/browser/web_contents/web_contents_impl.cc:377
#21 0x00007ffff3713339 in content::WebContentsImpl::~WebContentsImpl (this=0xe7bf50, __in_chrg=<optimised out>) at ../../../../third_party/chromium/src/content/browser/web_contents/web_contents_impl.cc:464
#22 0x00007ffff337ffbe in ScopedVector<content::WebContents>::erase (position=, this=0x567ec8) at ../../../../third_party/chromium/src/base/memory/scoped_vector.h:124
#23 oxide::WebContentsUnloader::CloseContents (this=0x567e90, contents=<optimised out>) at ../../../../shared/browser/oxide_web_contents_unloader.cc:57
#24 0x00007ffff3668473 in base::DispatchToMethodImpl<content::RenderViewHostImpl*, void (content::RenderViewHostImpl::*)()>(content::RenderViewHostImpl* const&, void (content::RenderViewHostImpl::*)(), std::tuple<> const&, base::IndexSequence<>) (arg=empty std::tuple, method=<optimised out>, obj=<synthetic pointer>) at ../../../../third_party/chromium/src/base/tuple.h:203
#25 base::DispatchToMethod<content::RenderViewHostImpl*, void (content::RenderViewHostImpl::*)()>(content::RenderViewHostImpl* const&, void (content::RenderViewHostImpl::*)(), std::tuple<> const&) (
    arg=empty std::tuple, method=<optimised out>, obj=<synthetic pointer>) at ../../../../third_party/chromium/src/base/tuple.h:210
#26 IPC::DispatchToMethod<content::RenderViewHostImpl, void (content::RenderViewHostImpl::*)(), void, std::tuple<> >(content::RenderViewHostImpl*, void (content::RenderViewHostImpl::*)(), void*, std::tuple<> const&) (tuple=empty std::tuple, method=(void (content::RenderViewHostImpl::*)(content::RenderViewHostImpl * const)) 0x7ffff36678b0 <content::RenderViewHostImpl::OnClosePageACK()>, obj=0xd24920)
    at ../../../../third_party/chromium/src/ipc/ipc_message_templates.h:24
#27 IPC::MessageT<ViewHostMsg_ClosePage_ACK_Meta, std::tuple<>, void>::Dispatch<content::RenderViewHostImpl, content::RenderViewHostImpl, void, void (content::RenderViewHostImpl::*)()>(IPC::Message const*, content::RenderViewHostImpl*, content::RenderViewHostImpl*, void*, void (content::RenderViewHostImpl::*)()) (func=<optimised out>, parameter=0x0, sender=0xd24920, obj=0xd24920, msg=0x7fff8c17aba0)
    at ../../../../third_party/chromium/src/ipc/ipc_message_templates.h:118
#28 content::RenderViewHostImpl::OnMessageReceived (this=0xd24920, msg=...) at ../../../../third_party/chromium/src/content/browser/renderer_host/render_view_host_impl.cc:916
#29 0x00007ffff3673332 in content::RenderWidgetHostImpl::OnMessageReceived (this=0xf5ab00, msg=...) at ../../../../third_party/chromium/src/content/browser/renderer_host/render_widget_host_impl.cc:445
#30 0x00007ffff36617c0 in content::RenderProcessHostImpl::OnMessageReceived (this=0xecbdb0, msg=...) at ../../../../third_party/chromium/src/content/browser/renderer_host/render_process_host_impl.cc:1787
#31 0x00007ffff4149400 in IPC::ChannelProxy::Context::OnDispatchMessage (this=0xff1e90, message=...) at ../../../../third_party/chromium/src/ipc/ipc_channel_proxy.cc:293
#32 0x00007ffff33b072d in base::Callback<void ()>::Run() const (this=0x7fffffff5df8) at ../../../../third_party/chromium/src/base/callback.h:394
#33 base::debug::TaskAnnotator::RunTask (this=this@entry=0x9af4e8, queue_function=queue_function@entry=0x7ffff69a7db0 "MessageLoop::PostTask", pending_task=...)
    at ../../../../third_party/chromium/src/base/debug/task_annotator.cc:51
#34 0x00007ffff33ccaa9 in base::MessageLoop::RunTask (this=this@entry=0x9af370, pending_task=...) at ../../../../third_party/chromium/src/base/message_loop/message_loop.cc:476
#35 0x00007ffff33cd0cd in base::MessageLoop::DeferOrRunPendingTask (this=this@entry=0x9af370, pending_task=...) at ../../../../third_party/chromium/src/base/message_loop/message_loop.cc:485
#36 0x00007ffff33cd398 in base::MessageLoop::DoWork (this=0x9af370) at ../../../../third_party/chromium/src/base/message_loop/message_loop.cc:597
#37 0x00007ffff333f33b in oxide::qt::MessagePump::RunOneTask (this=0x9af950) at ../../../../qt/core/browser/oxide_qt_message_pump.cc:108
#38 0x00007ffff2122e23 in QObject::event(QEvent*) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#39 0x00007ffff20f3489 in QCoreApplication::notify(QObject*, QEvent*) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#40 0x00007ffff20f35bb in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#41 0x00007ffff20f59b6 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#42 0x00007ffff2149643 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#43 0x00007fffef536127 in g_main_context_dispatch () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#44 0x00007fffef536380 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#45 0x00007fffef53642c in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#46 0x00007ffff2149a4f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5

Changed in oxide:
importance: Undecided → Critical
assignee: nobody → Chris Coulson (chrisccoulson)
status: New → Triaged
milestone: none → branch-1.15
Changed in oxide:
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers