Updates:
        Summary: regression : copying most visited page screenshot and 
selecting  
Paste and Go and then Back causes crash

Comment #7 on issue 8412 by [email protected]: regression : copying most  
visited page screenshot and selecting Paste and Go and then Back causes  
crash
http://code.google.com/p/chromium/issues/detail?id=8412

The bug as stated above is a duplicate of issue 8546. However, while  
verifying this, I found another similar crash, so I will morph this bug to  
cover that crash.
The crash occurs because we don't recreate the current_ui_ when pressing  
Back (after navigating to the thumbnail image) and we then proceed to act  
on a NULL
pointer inside ProcessDOMUIMessage. I have a fix in the works.

chrome.dll!DOMUIContents::ProcessDOMUIMessage(const  
std::basic_string<char,std::char_traits<char>,std::allocator<char> > &  
message="getMostVisited", const
std::basic_string<char,std::char_traits<char>,std::allocator<char> > &  
content="")
chrome.dll!RenderViewHost::OnMsgDOMUISend(const  
std::basic_string<char,std::char_traits<char>,std::allocator<char> > &  
message="getMostVisited", const
std::basic_string<char,std::char_traits<char>,std::allocator<char> > &  
content="")
chrome.dll!DispatchToMethod<RenderViewHost,void (__thiscall  
RenderViewHost::*)(std::basic_string<char,std::char_traits<char>,std::allocator<char>
  
> const
&,std::basic_string<char,std::char_traits<char>,std::allocator<char> >  
const &),std::basic_string<char,std::char_traits<char>,std::allocator<char>
> ,std::basic_string<char,std::char_traits<char>,std::allocator<char> >  
> >(RenderViewHost * obj=0x05067990, void (const
std::basic_string<char,std::char_traits<char>,std::allocator<char> > &,  
const std::basic_string<char,std::char_traits<char>,std::allocator<char> >  
&)*
method=0x016e1b40, const  
Tuple2<std::basic_string<char,std::char_traits<char>,std::allocator<char>
> ,std::basic_string<char,std::char_traits<char>,std::allocator<char> > > &  
> arg={...})
chrome.dll!IPC::MessageWithTuple<Tuple2<std::basic_string<char,std::char_traits<char>,std::allocator<char>
> ,std::basic_string<char,std::char_traits<char>,std::allocator<char> > >  
> >::Dispatch<RenderViewHost,void (__thiscall
RenderViewHost::*)(std::basic_string<char,std::char_traits<char>,std::allocator<char>
  
>  
const &,std::basic_string<char,std::char_traits<char>,std::allocator<char>
> const &)>(const IPC::Message * msg=0x063ebb48, RenderViewHost *  
> obj=0x05067990, void (const  
> std::basic_string<char,std::char_traits<char>,std::allocator<char> >
&, const std::basic_string<char,std::char_traits<char>,std::allocator<char>  
> &)* func=0x016e1b40)
chrome.dll!RenderViewHost::OnMessageReceived(const IPC::Message & msg={...})
chrome.dll!BrowserRenderProcessHost::OnMessageReceived(const IPC::Message &  
msg={...})
chrome.dll!IPC::ChannelProxy::Context::OnDispatchMessage(const IPC::Message  
& message={...})
chrome.dll!DispatchToMethod<IPC::ChannelProxy::Context,void (__thiscall  
IPC::ChannelProxy::Context::*)(IPC::Message const
&),IPC::Message>(IPC::ChannelProxy::Context * obj=0x064c7c10, void (const  
IPC::Message &)* method=0x011aa0d0, const Tuple1<IPC::Message> & arg={...})
chrome.dll!RunnableMethod<IPC::ChannelProxy::Context,void (__thiscall  
IPC::ChannelProxy::Context::*)(IPC::Message const &),Tuple1<IPC::Message>  
>::Run()
chrome.dll!MessageLoop::RunTask(Task * task=0x063ebb20)
chrome.dll!MessageLoop::DeferOrRunPendingTask(const  
MessageLoop::PendingTask & pending_task={...})
chrome.dll!MessageLoop::DoWork()
chrome.dll!base::MessagePumpForUI::DoRunLoop()
chrome.dll!base::MessagePumpWin::RunWithDispatcher(base::MessagePump::Delegate  
*  
delegate=0x0012f74c, base::MessagePumpWin::Dispatcher *  
dispatcher=0x0630d8f0)
chrome.dll!MessageLoop::RunInternal()
chrome.dll!MessageLoop::RunHandler()
chrome.dll!MessageLoopForUI::Run(base::MessagePumpWin::Dispatcher *  
dispatcher=0x0630d8f0)
chrome.dll!`anonymous namespace'::RunUIMessageLoop(BrowserProcess *  
browser_process=0x003ea900)
chrome.dll!BrowserMain(const MainFunctionParams & parameters={...})
chrome.dll!ChromeMain(HINSTANCE__ * instance=0x00400000,  
sandbox::SandboxInterfaceInfo * sandbox_info=0x0012fe88, wchar_t *  
command_line=0x00020a60)
chrome.exe!wWinMain(HINSTANCE__ * instance=0x00400000, HINSTANCE__ *  
prev_instance=0x00000000, wchar_t * command_line=0x00020a60, int __formal=1)
chrome.exe!__tmainCRTStartup()
chrome.exe!wWinMainCRTStartup()
kernel32.dll!7c817067()



--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to