Status: Untriaged
Owner: ----
CC: [email protected]
Labels: Type-Bug Pri-2 OS-All Area-BrowserBackend Size-Medium

New issue 9668 by [email protected]: Browser crash on  
ResourceDispatcherHost::IncrementOutstandingRequestsMemoryCost
http://code.google.com/p/chromium/issues/detail?id=9668

from http://crash/reportdetail?
reportid=9bd275b4b13ec37f&product=Chrome&version=2.0.171.0&date=&signature=logging::LogMessage::~LogMessage()-7DFECB

Thread 12 *CRASHED* (EXCEPTION_BREAKPOINT @0x0156599a)

0x0156599a       [chrome.dll     - logging.cc:528]        
logging::LogMessage::~LogMessage()
0x012e2a6f       [chrome.dll     - resource_dispatcher_host.cc:940]     
ResourceDispatcherHost::IncrementOutstandingRequestsMemoryCost(int,int)
0x012e2562       [chrome.dll     - resource_dispatcher_host.cc:771]     
ResourceDispatcherHost::RemovePendingRequest(std::_Tree<std::_Tmap_traits<ResourceDispatcherHost::GlobalRequestID,URLRequest
*,std::less<ResourceDispatcherHost::GlobalRequestID>,std::allocator<std::pair<ResourceDispatcherHost::GlobalRequestID
  
const ,URLRequest
*> >,0> >::iterator const &)
0x012e2525       [chrome.dll     - resource_dispatcher_host.cc:761]       
ResourceDispatcherHost::RemovePendingRequest(int,int)
0x012e303b       [chrome.dll     - resource_dispatcher_host.cc:1217]      
ResourceDispatcherHost::OnResponseCompleted(URLRequest *)
0x012e2ee0       [chrome.dll     - resource_dispatcher_host.cc:1174]      
ResourceDispatcherHost::OnReadCompleted(URLRequest *,int)
0x0138f64c       [chrome.dll     - url_request_job.cc:416]        
URLRequestJob::NotifyReadComplete(int)
0x0138ec22       [chrome.dll     - url_request_file_job.cc:199]   
URLRequestFileJob::DidRead(int)
0x012d0714       [chrome.dll     - task.h:571]   
CallbackImpl<DataSourceImpl,void (  
DataSourceImpl::*)(int),Tuple1<int>
> ::RunWithParams(Tuple1<int> const &)
0x01384b0f       [chrome.dll     - file_stream_win.cc:105]      
net::FileStream::AsyncContext::OnIOCompleted(base::MessagePumpForIO::IOContext  
*,unsigned  
long,unsigned long)
0x01580148       [chrome.dll     - message_pump_win.cc:504]       
base::MessagePumpForIO::WaitForIOCompletion(unsigned
long,base::MessagePumpForIO::IOHandler *)
0x01384a3f       [chrome.dll     - file_stream_win.cc:77]         
net::FileStream::AsyncContext::~AsyncContext()
0x013849f5       [chrome.dll     + 0x001b49f5]    
net::FileStream::AsyncContext::`scalar deleting destructor'(unsigned int)
0x01384ba9       [chrome.dll     - file_stream_win.cc:132]       
net::FileStream::Close()
0x0138ea81       [chrome.dll     - url_request_file_job.cc:120]   
URLRequestFileJob::Kill()
0x0138e52c       [chrome.dll     - url_request.cc:294]    
URLRequest::DoCancel(int,net::SSLInfo const &)
0x0138e4a9       [chrome.dll     - url_request.cc:263]   URLRequest::Cancel()
0x0138e1a4       [chrome.dll     - url_request.cc:65]    
URLRequest::~URLRequest()
0x012e2583       [chrome.dll     - resource_dispatcher_host.cc:777]     
ResourceDispatcherHost::RemovePendingRequest(std::_Tree<std::_Tmap_traits<ResourceDispatcherHost::GlobalRequestID,URLRequest
*,std::less<ResourceDispatcherHost::GlobalRequestID>,std::allocator<std::pair<ResourceDispatcherHost::GlobalRequestID
  
const ,URLRequest
*> >,0> >::iterator const &)
0x012e238c       [chrome.dll     - resource_dispatcher_host.cc:725]       
ResourceDispatcherHost::CancelRequestsForRoute(int,int)
0x0137338c       [chrome.dll     - render_widget_helper.cc:194]   
RenderWidgetHelper::OnCancelResourceRequests(int)

The code (ResourceDispatcherHost::IncrementOutstandingRequestsMemoryCost()):

   int new_cost = 0;
   if (prev_entry != outstanding_requests_memory_cost_map_.end())
     new_cost = prev_entry->second;

   // Insert/update the total; delete entries when their value reaches 0.
   new_cost += cost;
   CHECK(new_cost >= 0);

We are hitting the check.

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to