-
Bug
-
Resolution: Done
-
P3: Somewhat important
-
5.6.1, 5.7.0
-
None
-
Windows 10, macOS 10.11.5
Steps to reproduce:
1) Open demobrowser or quicknanobrowser
2) Go to http://www.w3schools.com/tags/tryit.asp?filename=tryhtml_select
3) Click on select box
4) Try navigating up and down a couple of times with the up and down keys.
5) Renderer process asserts
Does not happen in release build.
Reproduced with 5.6.1 and 5.6.x git on Windows 10 and macOS 10.11.5.
Reproduced with 5.7.0 and 5.7.x git on macOS.
Does not seem to happen with 5.8.x git.
Cold not reproduce on Ubuntu.
In process render backtrace:
1 blink::WebAXObject::boundingBoxRect() const WebAXObject.cpp 635 0x1032ffb21 2 content::BlinkAXTreeSource::SerializeNode(blink::WebAXObject, ui::AXNodeData *) const blink_ax_tree_source.cc 225 0x1033c70f7 3 ui::AXTreeSerializer<blink::WebAXObject>::SerializeChangedNodes(blink::WebAXObject, ui::AXTreeUpdate *) ax_tree_serializer.h 464 0x1033d63a0 4 ui::AXTreeSerializer<blink::WebAXObject>::SerializeChanges(blink::WebAXObject, ui::AXTreeUpdate *) ax_tree_serializer.h 356 0x1033d1f87 5 content::RendererAccessibility::SendPendingAccessibilityEvents() renderer_accessibility.cc 272 0x1033d05ea 6 base::internal::RunnableAdapter<void (content::RendererAccessibility:: *)()>::Run(content::RendererAccessibility *) bind_internal.h 176 0x1033da649 7 base::internal::InvokeHelper<true, void, base::internal::RunnableAdapter<void (content::RendererAccessibility:: *)()>, base::internal::TypeList<base::WeakPtr<content::RendererAccessibility> const&>>::MakeItSo(base::internal::RunnableAdapter<void (content::RendererAccessibility:: *)()>, base::WeakPtr<content::RendererAccessibility> const&) bind_internal.h 303 0x1033da541 8 base::internal::Invoker<base::IndexSequence<0ul>, base::internal::BindState<base::internal::RunnableAdapter<void (content::RendererAccessibility:: *)()>, void (content::RendererAccessibility *), base::internal::TypeList<base::WeakPtr<content::RendererAccessibility>>>, base::internal::TypeList<base::internal::UnwrapTraits<base::WeakPtr<content::RendererAccessibility>>>, base::internal::InvokeHelper<true, void, base::internal::RunnableAdapter<void (content::RendererAccessibility:: *)()>, base::internal::TypeList<base::WeakPtr<content::RendererAccessibility> const&>>, void ()>::Run(base::internal::BindStateBase *) bind_internal.h 343 0x1033da4f0 9 base::Callback<void ()>::Run() const callback.h 396 0x101d0944e 10 base::debug::TaskAnnotator::RunTask(const char *, const char *, base::PendingTask const&) task_annotator.cc 62 0x101ec9542 11 base::MessageLoop::RunTask(base::PendingTask const&) message_loop.cc 472 0x101f4681f 12 base::MessageLoop::DeferOrRunPendingTask(base::PendingTask const&) message_loop.cc 482 0x101f46958 13 base::MessageLoop::DoWork() message_loop.cc 594 0x101f46f3e 14 base::MessagePumpCFRunLoopBase::RunWork() message_pump_mac.mm 328 0x101e9329a 15 ___ZN4base24MessagePumpCFRunLoopBase13RunWorkSourceEPv_block_invoke message_pump_mac.mm 305 0x101e9322c 16 base::mac::CallWithEHFrame(void () block_pointer) call_with_eh_frame_asm.S 36 0x101f1e4ea 17 base::MessagePumpCFRunLoopBase::RunWorkSource(void *) message_pump_mac.mm 304 0x101e928c7 18 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ 0x7fff8bdf5881 19 __CFRunLoopDoSources0 0x7fff8bdd4fbc 20 __CFRunLoopRun 0x7fff8bdd44df 21 CFRunLoopRunSpecific 0x7fff8bdd3ed8 22 base::MessagePumpCFRunLoop::DoRun(base::MessagePump::Delegate *) message_pump_mac.mm 552 0x101e9383e 23 base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate *) message_pump_mac.mm 236 0x101e92fba 24 base::MessageLoop::RunHandler() message_loop.cc 438 0x101f462fa 25 base::RunLoop::Run() run_loop.cc 55 0x101f9f184 26 base::MessageLoop::Run() message_loop.cc 287 0x101f45793 27 base::Thread::Run(base::MessageLoop *) thread.cc 198 0x102035619 28 base::Thread::ThreadMain() thread.cc 248 0x102035b60 29 base::(anonymous namespace)::ThreadFunc(void *) platform_thread_posix.cc 76 0x10201c8f6 30 _pthread_body 0x7fff98d3599d 31 _pthread_start 0x7fff98d3591a 32 thread_start 0x7fff98d33351