Comment #47 on issue 26754 by [email protected]: Chrome crash :  
AppCacheDispatcherHost::Initialize(IPC::Message::Sender*, int, int)
http://code.google.com/p/chromium/issues/detail?id=26754

In debug mode, this hits a DCHECK in the browser prior to the crash:

[58009:18695:12970924196750:FATAL:/chrome/249/src/chrome/browser/renderer
_host/resource_message_filter.cc(224)] Check failed: !handle().
Program received signal SIGTRAP, Trace/breakpoint trap.
[Switching to process 58009]
DebugUtil::BreakDebugger () at /chrome/249/src/base/debug_util_posix.cc:184
(gdb) bt
#0  DebugUtil::BreakDebugger () at  
/chrome/249/src/base/debug_util_posix.cc:184
#1  0x0071523e in logging::LogMessage::~LogMessage (this=0xb0309bbc) at
/chrome/249/src/base/logging.cc:539
#2  0x004ca127 in ResourceMessageFilter::OnChannelConnected  
(this=0x1485c960,
peer_pid=58027) at
/chrome/249/src/chrome/browser/renderer_host/resource_message_filter.cc:224
#3  0x00da664c in IPC::ChannelProxy::Context::OnChannelConnected
(this=0x1485ce90, peer_pid=58027) at
/chrome/249/src/ipc/ipc_channel_proxy.cc:97
#4  0x00da241f in IPC::Channel::ChannelImpl::ProcessIncomingMessages
(this=0x8032e00) at /chrome/249/src/ipc/ipc_channel_posix.cc:671
#5  0x00da3286 in IPC::Channel::ChannelImpl::OnFileCanReadWithoutBlocking
(this=0x8032e00, fd=58) at /chrome/249/src/ipc/ipc_channel_posix.cc:925
#6  0x0071f4f9 in base::MessagePumpLibevent::OnLibeventNotification (fd=58,
flags=2, context=0x8032e00) at
/chrome/249/src/base/message_pump_libevent.cc:214
#7  0x0076b5a5 in event_process_active (base=0x13002e00) at
/chrome/249/src/third_party/libevent/event.c:385
#8  0x0076b8d8 in event_base_loop (base=0x13002e00, flags=1) at
/chrome/249/src/third_party/libevent/event.c:522
#9  0x0071fcd9 in base::MessagePumpLibevent::Run (this=0x12900310,
delegate=0xb030ae64) at /chrome/249/src/base/message_pump_libevent.cc:269
#10 0x00719f8a in MessageLoop::RunInternal (this=0xb030ae64) at
/chrome/249/src/base/message_loop.cc:205
#11 0x00719fa5 in MessageLoop::RunHandler (this=0xb030ae64) at
/chrome/249/src/base/message_loop.cc:177
#12 0x0071a009 in MessageLoop::Run (this=0xb030ae64) at
/chrome/249/src/base/message_loop.cc:155
#13 0x007500a3 in base::Thread::Run (this=0x11e1e920,
message_loop=0xb030ae64) at /chrome/249/src/base/thread.cc:132
#14 0x007504b8 in base::Thread::ThreadMain (this=0x11e1e920) at
/chrome/249/src/base/thread.cc:153
#15 0x0072b26c in ThreadFunc (closure=0x11e1e920) at
/chrome/249/src/base/platform_thread_posix.cc:26
#16 0x93dcafbd in _pthread_start ()
#17 0x93dcae42 in thread_start ()

pid 58027 (see frame 2) is a renderer process.  Here's what it's up to:

(gdb) bt 15
#0  0x93dcb806 in __semwait_signal ()
#1  0x93dcb4c2 in _pthread_cond_wait ()
#2  0x93dcd158 in pthread_cond_wait$UNIX2003 ()
#3  0x006f5238 in ConditionVariable::Wait (this=0xbfffc3cc) at
/chrome/249/src/base/condition_variable_posix.cc:30
#4  0x00766ce7 in base::WaitableEvent::WaitMany (raw_waitables=0xbfffc42c,
count=2) at /chrome/249/src/base/waitable_event_posix.cc:270
#5  0x00dae82d in IPC::SyncChannel::WaitForReply (this=0xa310680,
pump_messages_event=0x0) at /chrome/249/src/ipc/ipc_sync_channel.cc:425
#6  0x00daed6b in IPC::SyncChannel::SendWithTimeout (this=0xa310680,
message=0xa311ef0, timeout_ms=-1) at
/chrome/249/src/ipc/ipc_sync_channel.cc:411
#7  0x00dadb9f in IPC::SyncChannel::Send (this=0xa310680, message=0xa311ef0)
at /chrome/249/src/ipc/ipc_sync_channel.cc:376
#8  0x01a29638 in PluginChannelBase::Send (this=0x960d360,
message=0xa311ef0) at
/chrome/249/src/chrome/plugin/plugin_channel_base.cc:117
#9  0x006b0d30 in WebPluginDelegateProxy::Initialize (this=0xa311520,
u...@0xa20b898, arg_nam...@0xa20b908, arg_valu...@0xa20b914,
plugin=0xa20b850, load_manually=false) at
/chrome/249/src/chrome/renderer/webplugin_delegate_proxy.cc:254
#10 0x01926e28 in webkit_glue::WebPluginImpl::initialize (this=0xa20b850,
container=0xa20bd08) at /chrome/249/src/webkit/glue/webplugin_impl.cc:218
#11 0x00f3f027 in WebKit::FrameLoaderClientImpl::createPlugin  
(this=0xa41babc,
si...@0xbfffc864, element=0xa20ade0, u...@0xbfffc914,
paramnam...@0xbfffcb18, paramvalu...@0xbfffcb0c, mimety...@0xbfffcb9c,
loadManually=false) at
/chrome/249/src/third_party/WebKit/WebKit/chromium/src/FrameLoaderClientImpl.
cpp:1317
#12 0x01311178 in WebCore::FrameLoader::loadPlugin (this=0xb01ee2c,
renderer=0xa20b4ec, u...@0xbfffc914, mimety...@0xbfffcb9c,
paramnam...@0xbfffcb18, paramvalu...@0xbfffcb0c, useFallback=false) at
/chrome/249/src/third_party/WebKit/WebCore/WebCore.gyp/../loader/FrameLoader
.cpp:1351
#13 0x0131c98c in WebCore::FrameLoader::requestObject (this=0xb01ee2c,
renderer=0xa20b4ec, u...@0xbfffcba0, framena...@0x2eab7e8,
mimety...@0xbfffcb9c, paramnam...@0xbfffcb18, paramvalu...@0xbfffcb0c) at
/chrome/249/src/third_party/WebKit/WebCore/WebCore.gyp/../loader/FrameLoader
.cpp:1258
#14 0x0153d179 in WebCore::RenderPartObject::updateWidget (this=0xa20b4ec,
onlyCreateNonNetscapePlugins=false) at
/chrome/249/src/third_party/WebKit/WebCore/WebCore.gyp/../rendering/RenderPa
rtObject.cpp:253
(More stack frames follow...)

This is a synchronous IPC send of PluginMsg_CreateInstance (frame 9).

Here's some stuff I logged in that renderer process before everything went  
to hell:

pid 58027 channel 58037.r17 sends hello on pipe 25
pid 58027 channel 58037.r17 closes pipe 25
pid 58027 channel 58037.r17 sends hello on pipe 3

The renderer (58027) is closing fd 25 because
IPC::Channel::ChannelImpl::ProcessIncomingMessages is hitting the | 
bytes_read ==
0| case.  This gets back to  
Channel::ChannelImpl::OnFileCanReadWithoutBlocking,
which calls Close() because ProcessIncomingMessages returned false.

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

-- 
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs

Reply via email to