Updates:
Summary: regression : copying most visited page screenshot and
selecting
Paste and Go and then Back causes crash
Comment #7 on issue 8412 by [email protected]: regression : copying most
visited page screenshot and selecting Paste and Go and then Back causes
crash
http://code.google.com/p/chromium/issues/detail?id=8412
The bug as stated above is a duplicate of issue 8546. However, while
verifying this, I found another similar crash, so I will morph this bug to
cover that crash.
The crash occurs because we don't recreate the current_ui_ when pressing
Back (after navigating to the thumbnail image) and we then proceed to act
on a NULL
pointer inside ProcessDOMUIMessage. I have a fix in the works.
chrome.dll!DOMUIContents::ProcessDOMUIMessage(const
std::basic_string<char,std::char_traits<char>,std::allocator<char> > &
message="getMostVisited", const
std::basic_string<char,std::char_traits<char>,std::allocator<char> > &
content="")
chrome.dll!RenderViewHost::OnMsgDOMUISend(const
std::basic_string<char,std::char_traits<char>,std::allocator<char> > &
message="getMostVisited", const
std::basic_string<char,std::char_traits<char>,std::allocator<char> > &
content="")
chrome.dll!DispatchToMethod<RenderViewHost,void (__thiscall
RenderViewHost::*)(std::basic_string<char,std::char_traits<char>,std::allocator<char>
> const
&,std::basic_string<char,std::char_traits<char>,std::allocator<char> >
const &),std::basic_string<char,std::char_traits<char>,std::allocator<char>
> ,std::basic_string<char,std::char_traits<char>,std::allocator<char> >
> >(RenderViewHost * obj=0x05067990, void (const
std::basic_string<char,std::char_traits<char>,std::allocator<char> > &,
const std::basic_string<char,std::char_traits<char>,std::allocator<char> >
&)*
method=0x016e1b40, const
Tuple2<std::basic_string<char,std::char_traits<char>,std::allocator<char>
> ,std::basic_string<char,std::char_traits<char>,std::allocator<char> > > &
> arg={...})
chrome.dll!IPC::MessageWithTuple<Tuple2<std::basic_string<char,std::char_traits<char>,std::allocator<char>
> ,std::basic_string<char,std::char_traits<char>,std::allocator<char> > >
> >::Dispatch<RenderViewHost,void (__thiscall
RenderViewHost::*)(std::basic_string<char,std::char_traits<char>,std::allocator<char>
>
const &,std::basic_string<char,std::char_traits<char>,std::allocator<char>
> const &)>(const IPC::Message * msg=0x063ebb48, RenderViewHost *
> obj=0x05067990, void (const
> std::basic_string<char,std::char_traits<char>,std::allocator<char> >
&, const std::basic_string<char,std::char_traits<char>,std::allocator<char>
> &)* func=0x016e1b40)
chrome.dll!RenderViewHost::OnMessageReceived(const IPC::Message & msg={...})
chrome.dll!BrowserRenderProcessHost::OnMessageReceived(const IPC::Message &
msg={...})
chrome.dll!IPC::ChannelProxy::Context::OnDispatchMessage(const IPC::Message
& message={...})
chrome.dll!DispatchToMethod<IPC::ChannelProxy::Context,void (__thiscall
IPC::ChannelProxy::Context::*)(IPC::Message const
&),IPC::Message>(IPC::ChannelProxy::Context * obj=0x064c7c10, void (const
IPC::Message &)* method=0x011aa0d0, const Tuple1<IPC::Message> & arg={...})
chrome.dll!RunnableMethod<IPC::ChannelProxy::Context,void (__thiscall
IPC::ChannelProxy::Context::*)(IPC::Message const &),Tuple1<IPC::Message>
>::Run()
chrome.dll!MessageLoop::RunTask(Task * task=0x063ebb20)
chrome.dll!MessageLoop::DeferOrRunPendingTask(const
MessageLoop::PendingTask & pending_task={...})
chrome.dll!MessageLoop::DoWork()
chrome.dll!base::MessagePumpForUI::DoRunLoop()
chrome.dll!base::MessagePumpWin::RunWithDispatcher(base::MessagePump::Delegate
*
delegate=0x0012f74c, base::MessagePumpWin::Dispatcher *
dispatcher=0x0630d8f0)
chrome.dll!MessageLoop::RunInternal()
chrome.dll!MessageLoop::RunHandler()
chrome.dll!MessageLoopForUI::Run(base::MessagePumpWin::Dispatcher *
dispatcher=0x0630d8f0)
chrome.dll!`anonymous namespace'::RunUIMessageLoop(BrowserProcess *
browser_process=0x003ea900)
chrome.dll!BrowserMain(const MainFunctionParams & parameters={...})
chrome.dll!ChromeMain(HINSTANCE__ * instance=0x00400000,
sandbox::SandboxInterfaceInfo * sandbox_info=0x0012fe88, wchar_t *
command_line=0x00020a60)
chrome.exe!wWinMain(HINSTANCE__ * instance=0x00400000, HINSTANCE__ *
prev_instance=0x00000000, wchar_t * command_line=0x00020a60, int __formal=1)
chrome.exe!__tmainCRTStartup()
chrome.exe!wWinMainCRTStartup()
kernel32.dll!7c817067()
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---