Comment #3 on issue 7898 by [email protected]: regression : can't  
navigtate to about:memory page from about:network page
http://code.google.com/p/chromium/issues/detail?id=7898

Just an update:
If I navigate to about:network in a [New tab], the tab crashes (you can  
notice the
flash) with sad face then about:network window pops up.

and with 2.0.165.0 (Developer Build 10116):
If I want to execute Step 7 in the original bug report, As soon I select  
the URL and
start typing, then browser window immediately crashes and restarts !!

Stack Analysis for the browser crash
####################################
FAULTING_IP:
chrome_1000000!URLRequestJobTracker::AddNewJob+5c
[c:\b\slave\chromium-rel-xp\build\src\net\url_request\url_request_job_tracker.cc
  
@  
26]
0181963c 8b02            mov     eax,dword ptr [edx]

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 0181963c  
(chrome_1000000!URLRequestJobTracker::AddNewJob+0x0000005c)
    ExceptionCode: c0000005 (Access violation)
   ExceptionFlags: 00000000
NumberParameters: 2
    Parameter[0]: 00000000
    Parameter[1]: 00000008
Attempt to read from address 00000008

FAULTING_THREAD:  00001284

DEFAULT_BUCKET_ID:  INVALID_POINTER_READ

PROCESS_NAME:  chrome.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced  
memory at
"0x%08lx". The memory could not be "%s".

READ_ADDRESS:  00000008

NTGLOBALFLAG:  70

APPLICATION_VERIFIER_FLAGS:  0

PRIMARY_PROBLEM_CLASS:  INVALID_POINTER_READ

BUGCHECK_STR:  APPLICATION_FAULT_INVALID_POINTER_READ

LAST_CONTROL_TRANSFER:  from 0181830e to 0181963c

STACK_TEXT:
01f5f874 0181830e 0247c208 0247c208 00000000
chrome_1000000!URLRequestJobTracker::AddNewJob+0x5c
[c:\b\slave\chromium-rel-xp\build\src\net\url_request\url_request_job_tracker.cc
  
@  
26]
01f5f890 01841691 0247c000 01f5fa20 0247c000
chrome_1000000!URLRequestJob::URLRequestJob+0xbe
[c:\b\slave\chromium-rel-xp\build\src\net\url_request\url_request_job.cc @  
36]
01f5f8a8 01841eb9 0247c000 0247c000 00000000
chrome_1000000!URLRequestHttpJob::URLRequestHttpJob+0x11
[c:\b\slave\chromium-rel-xp\build\src\net\url_request\url_request_http_job.cc  
@  
65]
01f5f968 01834c15 0247c000 01f5fa20 00000000
chrome_1000000!URLRequestHttpJob::Factory+0x179
[c:\b\slave\chromium-rel-xp\build\src\net\url_request\url_request_http_job.cc  
@  
51]
01f5fa40 01812fb9 0247c000 00000000 02480ed0
chrome_1000000!URLRequestJobManager::CreateJob+0x245
[c:\b\slave\chromium-rel-xp\build\src\net\url_request\url_request_job_manager.cc
  
@  
95]
01f5fae8 01047340 01f5fef0 02342d48 00000000  
chrome_1000000!URLRequest::Start+0xb9
[c:\b\slave\chromium-rel-xp\build\src\net\url_request\url_request.cc @ 245]
01f5fcd0 01011d20 00000000 01f5fef0 00000001
chrome_1000000!URLFetcher::Core::StartURLRequest+0x330
[c:\b\slave\chromium-rel-xp\build\src\chrome\browser\net\url_fetcher.cc @  
221]
01f5fd70 0101287a 02342d48 00000000 003ef038  
chrome_1000000!MessageLoop::RunTask+0x80
[c:\b\slave\chromium-rel-xp\build\src\base\message_loop.cc @ 309]
01f5fdc0 0102309e 003ef038 00000000 01022ce0  
chrome_1000000!MessageLoop::DoWork+0x1ea
[c:\b\slave\chromium-rel-xp\build\src\base\message_loop.cc @ 416]
01f5fdcc 01022ce0 01f5fef0 01f5fef0 01f5fef0
chrome_1000000!base::MessagePumpForIO::DoRunLoop+0x7e
[c:\b\slave\chromium-rel-xp\build\src\base\message_pump_win.cc @ 468]
01f5fdec 010123f7 01f5fef0 00e77c58 00e77c58
chrome_1000000!base::MessagePumpWin::Run+0x40
[c:\b\slave\chromium-rel-xp\build\src\base\message_pump_win.h @ 78]
01f5fe8c 01012590 703438ed 00e77c6c 00e77c58
chrome_1000000!MessageLoop::RunInternal+0xb7
[c:\b\slave\chromium-rel-xp\build\src\base\message_loop.cc @ 197]
01f5fec0 01012e2d 00000001 00000700 00000000
chrome_1000000!MessageLoop::RunHandler+0xa0
[c:\b\slave\chromium-rel-xp\build\src\base\message_loop.cc @ 181]
01f5fedc 0156107a ffffffff 7c9192ef 00000000  
chrome_1000000!MessageLoop::Run+0x3d
[c:\b\slave\chromium-rel-xp\build\src\base\message_loop.cc @ 155]
01f5ffac 0101abad 01f5ffec 7c80b713 00e77c58
chrome_1000000!base::Thread::ThreadMain+0x8a
[c:\b\slave\chromium-rel-xp\build\src\base\thread.cc @ 159]
01f5ffb4 7c80b713 00e77c58 ffffffff 7c9192ef chrome_1000000!`anonymous
namespace'::ThreadFunc+0xd
[c:\b\slave\chromium-rel-xp\build\src\base\platform_thread_win.cc @ 27]
01f5ffec 00000000 0101aba0 00e77c58 00000000 kernel32!BaseThreadStart+0x37


FOLLOWUP_IP:
chrome_1000000!URLRequestJob::URLRequestJob+be
[c:\b\slave\chromium-rel-xp\build\src\net\url_request\url_request_job.cc @  
36]
0181830e 8bc6            mov     eax,esi

FAULTING_SOURCE_CODE:
No source found for
'c:\b\slave\chromium-rel-xp\build\src\net\url_request\url_request_job.cc'


SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  chrome_1000000!URLRequestJob::URLRequestJob+be

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: chrome_1000000

IMAGE_NAME:  chrome.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  499f12ee

STACK_COMMAND:  ~6s ; kb

FAILURE_BUCKET_ID:   
INVALID_POINTER_READ_c0000005_chrome.dll!URLRequestJob::URLRequestJob

BUCKET_ID:
APPLICATION_FAULT_INVALID_POINTER_READ_chrome_1000000!URLRequestJob::URLRequestJob+be



--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to