Status: Untriaged
Owner: [email protected]
Labels: Type-Bug Pri-1 OS-All Area-Misc Crash

New issue 8776 by [email protected]: Browser crash @  
URLRequestJob::RecordBytesRead()
http://code.google.com/p/chromium/issues/detail?id=8776

Build: 2.0.169.1 (Official Build 11427)

After opening any few webpages and keeping the browser open, it is crashing
frequently on me.

Crash Analysis
##############
FAULTING_IP:
+30002
00030002 ??              ???

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00030002
    ExceptionCode: c0000005 (Access violation)
   ExceptionFlags: 00000000
NumberParameters: 2
    Parameter[0]: 00000008
    Parameter[1]: 00030002
Attempt to execute non-executable address 00030002

DEFAULT_BUCKET_ID:  SOFTWARE_NX_FAULT

PROCESS_NAME:  chrome.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced
memory at "0x%08lx". The memory could not be "%s".

WRITE_ADDRESS:  00030002

FAILED_INSTRUCTION_ADDRESS:
+30002
00030002 ??              ???

FAULTING_THREAD:  0000147c

PRIMARY_PROBLEM_CLASS:  SOFTWARE_NX_FAULT

BUGCHECK_STR:  APPLICATION_FAULT_SOFTWARE_NX_FAULT_NULL_INSTRUCTION_PTR

LAST_CONTROL_TRANSFER:  from 01739599 to 00030002

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
012efcd0 01739599 0201b418 00000016 0201b418 0x30002
012efcf4 017392bb 00000016 00000016 0201b418
chrome_1580000!URLRequestJob::RecordBytesRead+0x30
[c:\b\slave\chrome-official\build\src\net\url_request\url_request_job.cc @  
499]
012efd0c 01752d17 00000016 051fe1d8 012efd44
chrome_1580000!URLRequestJob::NotifyReadComplete+0x25
[c:\b\slave\chrome-official\build\src\net\url_request\url_request_job.cc @  
383]
012efd2c 016b32dd 00000016 00000016 0173c93e
chrome_1580000!URLRequestHttpJob::OnReadCompleted+0x5c
[c:\b\slave\chrome-official\build\src\net\url_request\url_request_http_job.cc
@ 436]
012efd38 0173c93e 012efd44 00000016 012efd78
chrome_1580000!CallbackImpl<TemplateURLHandler,void (__thiscall
TemplateURLHandler::*)(Value const *),Tuple1<Value const *>
> ::RunWithParams+0x14 [c:\b\slave\chrome-official\build\src\base\task.h @  
> 572]
012efd48 0173d136 06e01eb0 012efd80 00000000
chrome_1580000!net::HttpCache::Transaction::HandleResult+0x1b
[c:\b\slave\chrome-official\build\src\net\http\http_cache.cc @ 591]
012efd5c 016b32dd 00000016 052bb430 0174c6ea
chrome_1580000!net::HttpCache::Transaction::OnNetworkReadCompleted+0x54
[c:\b\slave\chrome-official\build\src\net\http\http_cache.cc @ 964]
012efd68 0174c6ea 012efd80 012efdcc 012efd8c
chrome_1580000!CallbackImpl<TemplateURLHandler,void (__thiscall
TemplateURLHandler::*)(Value const *),Tuple1<Value const *>
> ::RunWithParams+0x14 [c:\b\slave\chrome-official\build\src\base\task.h @  
> 572]
012efd78 016853e1 00000016 0175c970 012efd94
chrome_1580000!net::HttpNetworkTransaction::OnIOComplete+0x2b
[c:\b\slave\chrome-official\build\src\net\http\http_network_transaction.cc
@ 353]
012efd80 0175c970 012efd94 012efde8 0175cb2e
chrome_1580000!CallbackImpl<chrome_browser_net::DnsMaster::LookupRequest,void
(__thiscall
chrome_browser_net::DnsMaster::LookupRequest::*)(int),Tuple1<int>
> ::RunWithParams+0xe [c:\b\slave\chrome-official\build\src\base\task.h @  
> 573]
012efd8c 0175cb2e 0000001c 06e01ee4 012efef0
chrome_1580000!net::TCPClientSocket::DoCallback+0x19
[c:\b\slave\chrome-official\build\src\net\base\tcp_client_socket_win.cc @  
317]
012efde8 0175cb4d 01f61e68 0191769d 00000194
chrome_1580000!net::TCPClientSocket::DidCompleteIO+0xc2
[c:\b\slave\chrome-official\build\src\net\base\tcp_client_socket_win.cc @  
369]
012efdf0 0191769d 00000194 01f61e68 012efef0
chrome_1580000!net::TCPClientSocket::OnObjectSignaled+0x19
[c:\b\slave\chrome-official\build\src\net\base\tcp_client_socket_win.cc @  
380]
012efe00 01905d0a 01905d41 012efe40 00e7d380
chrome_1580000!base::ObjectWatcher::Watch::Run+0x1b
[c:\b\slave\chrome-official\build\src\base\object_watcher.cc @ 30]
012efe04 01905d41 012efe40 00e7d380 01905ecf
chrome_1580000!MessageLoop::RunTask+0x1c
[c:\b\slave\chrome-official\build\src\base\message_loop.cc @ 309]
012efe10 01905ecf 00000000 00e73280 00000000
chrome_1580000!MessageLoop::DeferOrRunPendingTask+0x2a
[c:\b\slave\chrome-official\build\src\base\message_loop.cc @ 316]
012efe40 0191feaa 00e73280 00000000 003e0168
chrome_1580000!MessageLoop::DoWork+0x6e
[c:\b\slave\chrome-official\build\src\base\message_loop.cc @ 408]
012efe54 0191f9ce 012efef0 012efef0 00000000
chrome_1580000!base::MessagePumpForIO::DoRunLoop+0x6f
[c:\b\slave\chrome-official\build\src\base\message_pump_win.cc @ 468]
012efe70 0191f881 00000000 012efef0 01905bd6
chrome_1580000!base::MessagePumpWin::RunWithDispatcher+0x38
[c:\b\slave\chrome-official\build\src\base\message_pump_win.cc @ 54]
012efe7c 01905bd6 012efef0 00e7c218 01905ba5
chrome_1580000!base::MessagePumpWin::Run+0xe
[c:\b\slave\chrome-official\build\src\base\message_pump_win.h @ 78]
012efe88 01905ba5 5505582c 00e7c22c 00e7c218
chrome_1580000!MessageLoop::RunInternal+0x2b
[c:\b\slave\chrome-official\build\src\base\message_loop.cc @ 198]
012efec0 01905b48 00e7c498 00000001 7c80a000
chrome_1580000!MessageLoop::RunHandler+0x4f
[c:\b\slave\chrome-official\build\src\base\message_loop.cc @ 181]
012efee0 0190bfb4 0013f17c 00e7c210 01d73dc8
chrome_1580000!MessageLoop::Run+0x15
[c:\b\slave\chrome-official\build\src\base\message_loop.cc @ 155]
012effb0 0190b7be 7c80b713 00e7c218 0013f17c
chrome_1580000!base::Thread::ThreadMain+0x81
[c:\b\slave\chrome-official\build\src\base\thread.cc @ 159]
012effb4 7c80b713 00e7c218 0013f17c 00e7c210 chrome_1580000!`anonymous
namespace'::ThreadFunc+0x9
[c:\b\slave\chrome-official\build\src\base\platform_thread_win.cc @ 27]
012effec 00000000 0190b7b5 00e7c218 00000000 kernel32!BaseThreadStart+0x37


STACK_COMMAND:  ~5s; .ecxr ; kb

FOLLOWUP_IP:
chrome_1580000!URLRequestJob::RecordBytesRead+30
[c:\b\slave\chrome-official\build\src\net\url_request\url_request_job.cc @  
499]
01739599 8d75f4          lea     esi,[ebp-0Ch]

FAULTING_SOURCE_CODE:
    495:   if (is_profiling()) {
    496:     ++(metrics_->number_of_read_IO_);
    497:     metrics_->total_bytes_read_ += bytes_read;
    498:   }
>   499:   g_url_request_job_tracker.OnBytesRead(this, bytes_read);
    500: }
    501:
    502: const URLRequestStatus URLRequestJob::GetStatus() {
    503:   if (request_)
    504:     return request_->status();


SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  chrome_1580000!URLRequestJob::RecordBytesRead+30

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: chrome_1580000

IMAGE_NAME:  chrome.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  49b77b51

FAILURE_BUCKET_ID:
SOFTWARE_NX_FAULT_c0000005_chrome.dll!URLRequestJob::RecordBytesRead

BUCKET_ID:
APPLICATION_FAULT_SOFTWARE_NX_FAULT_NULL_INSTRUCTION_PTR_BAD_IP_chrome_1580000!URLRequestJob::RecordBytesRead+30




--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to