Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-85073

CHROME_IPC_LOGGING crashes on pages with flash content

    XMLWordPrintable

Details

    • Bug
    • Resolution: Out of scope
    • P1: Critical
    • None
    • 5.15
    • WebEngine
    • None
    • Linux/X11

    Description

      CHROME_IPC_LOGGING=--color ./simplebrowser https://www.magichtml.com/flashhtml5webvideoplayer/simplicity.html
      

      Backtrace:

      [13718:13733:0616/134134.140880:WARNING:ipc_message_attachment_set.cc(115)] Attempted to double-read a message attachment, returning a nullptr
      [13718:13733:0616/134134.141529:FATAL:scoped_refptr.h(235)] Check failed: ptr_.
      #0 0x7f1dfc1db73d base::debug::CollectStackTrace()
      #1 0x7f1dfbfc9253 base::debug::StackTrace::StackTrace()
      #2 0x7f1dfbfc920a base::debug::StackTrace::StackTrace()
      #3 0x7f1dfbff6ee2 logging::LogMessage::~LogMessage()
      #4 0x7f1dfd11df19 scoped_refptr<>::operator->()
      #5 0x7f1dfd494252 IPC::ChannelMojo::ReadFromMessageAttachmentSet()
      #6 0x7f1dfd4a9157 IPC::internal::MessagePipeReader::Send()
      #7 0x7f1dfd493d3a IPC::ChannelMojo::Send()
      #8 0x7f1dfadda065 content::BrowserMessageFilter::Send()
      #9 0x7f1e01a3f2e0 content::(anonymous namespace)::RenderMessageCompletionCallback::SendReplyAndDeleteThis()
      #10 0x7f1e01a40a77 content::RenderFrameMessageFilter::OpenChannelToPpapiPluginCallback::OnPpapiChannelOpened()
      #11 0x7f1e0148c607 content::PpapiPluginProcessHost::OnRendererPluginChannelCreated()
      #12 0x7f1e014905cb _ZN4base20DispatchToMethodImplIPN7content22PpapiPluginProcessHostEMS2_FvRKN3IPC13ChannelHandleEESt5tupleIJS5_EEJLm0EEEEvRKT_T0_OT1_St16integer_sequenceImJXspT2_EEE
      #13 0x7f1e0148fa3e base::DispatchToMethod<>()
      #14 0x7f1e0148e6ea IPC::DispatchToMethod<>()
      #15 0x7f1e0148d9b4 IPC::MessageT<>::Dispatch<>()
      #16 0x7f1e0148c06a content::PpapiPluginProcessHost::OnMessageReceived()
      #17 0x7f1e00b7aab3 content::BrowserChildProcessHostImpl::OnMessageReceived()
      #18 0x7f1e03120e0d content::ChildProcessHostImpl::OnMessageReceived()
      #19 0x7f1dfd493fe0 IPC::ChannelMojo::OnMessageReceived()
      #20 0x7f1dfd4a97e6 IPC::internal::MessagePipeReader::Receive()
      #21 0x7f1dfd4c127c IPC::mojom::ChannelStubDispatch::Accept()
      #22 0x7f1dfd4aafe7 IPC::mojom::ChannelStub<>::Accept()
      #23 0x7f1dfd10387a mojo::InterfaceEndpointClient::HandleValidatedMessage()
      #24 0x7f1dfd100da3 mojo::InterfaceEndpointClient::HandleIncomingMessageThunk::Accept()
      #25 0x7f1dfd10bf08 mojo::MessageDispatcher::Accept()
      #26 0x7f1dfd102786 mojo::InterfaceEndpointClient::HandleIncomingMessage()
      #27 0x7f1dfd4b05b0 IPC::(anonymous namespace)::ChannelAssociatedGroupController::Accept()
      #28 0x7f1dfd10bf08 mojo::MessageDispatcher::Accept()
      #29 0x7f1dfd0f8a29 mojo::Connector::DispatchMessage()
      #30 0x7f1dfd0f91fc mojo::Connector::ReadAllAvailableMessages()
      #31 0x7f1dfd0f7dcf mojo::Connector::OnHandleReadyInternal()
      #32 0x7f1dfd0f7adc mojo::Connector::OnWatcherHandleReady()
      #33 0x7f1dfd0fe2dc base::internal::FunctorTraits<>::Invoke<>()
      #34 0x7f1dfd0fd9c6 base::internal::InvokeHelper<>::MakeItSo<>()
      #35 0x7f1dfd0fccb2 _ZN4base8internal7InvokerINS0_9BindStateIMN4mojo9ConnectorEFvjEJNS0_17UnretainedWrapperIS4_EEEEEFvjEE7RunImplIRKS6_RKSt5tupleIJS8_EEJLm0EEEEvOT_OT0_St16integer_sequenceImJXspT1_EEEOj
      #36 0x7f1dfd0fbbc5 base::internal::Invoker<>::Run()
      #37 0x7f1df637c244 _ZNKR4base17RepeatingCallbackIFvjEE3RunEj
      #38 0x7f1df86d02fc mojo::SimpleWatcher::DiscardReadyState()
      #39 0x7f1df86e1f68 base::internal::FunctorTraits<>::Invoke<>()
      #40 0x7f1df86defa1 base::internal::InvokeHelper<>::MakeItSo<>()
      #41 0x7f1df86da22a _ZN4base8internal7InvokerINS0_9BindStateIPFvRKNS_17RepeatingCallbackIFvjEEEjRKN4mojo18HandleSignalsStateEEJS5_EEEFvjSB_EE7RunImplIRKSD_RKSt5tupleIJS5_EEJLm0EEEEvOT_OT0_St16integer_sequenceImJXspT1_EEEOjSB_
      #42 0x7f1df86d5cb0 base::internal::Invoker<>::Run()
      #43 0x7f1dfd15fe36 _ZNKR4base17RepeatingCallbackIFvjRKN4mojo18HandleSignalsStateEEE3RunEjS4_
      #44 0x7f1dfd15ecca mojo::SimpleWatcher::OnHandleReady()
      #45 0x7f1dfd15f34c mojo::SimpleWatcher::Context::Notify()
      #46 0x7f1dfd15f013 mojo::SimpleWatcher::Context::CallNotify()
      #47 0x7f1df88c418c mojo::core::WatcherDispatcher::InvokeWatchCallback()
      #48 0x7f1df88c3a8f mojo::core::Watch::InvokeCallback()
      #49 0x7f1df88b9a10 mojo::core::RequestContext::~RequestContext()
      #50 0x7f1df8898407 mojo::core::NodeChannel::OnChannelMessage()
      #51 0x7f1df8872249 mojo::core::Channel::TryDispatchMessage()
      #52 0x7f1df8871b60 mojo::core::Channel::OnReadComplete()
      #53 0x7f1df88d1912 mojo::core::(anonymous namespace)::ChannelPosix::OnFileCanReadWithoutBlocking()
      #54 0x7f1dfc239644 base::MessagePumpLibevent::FdWatchController::OnFileCanReadWithoutBlocking()
      #55 0x7f1dfc23b0d9 base::MessagePumpLibevent::OnLibeventNotification()
      #56 0x7f1dfd0eb354 event_process_active
      #57 0x7f1dfd0eb67b event_base_loop
      #58 0x7f1dfc23a60f base::MessagePumpLibevent::Run()
      #59 0x7f1dfc0eeb07 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run()
      #60 0x7f1dfc07207e base::RunLoop::Run()
      #61 0x7f1dfc163703 base::Thread::Run()
      #62 0x7f1e00bb5c7a content::BrowserProcessSubThread::IOThreadRun()
      #63 0x7f1e00bb5989 content::BrowserProcessSubThread::Run()
      #64 0x7f1dfc163d18 base::Thread::ThreadMain()
      #65 0x7f1dfc20a69f base::(anonymous namespace)::ThreadFunc()
      #66 0x7f1df02906db start_thread
      #67 0x7f1df235d88f clone
       
      Received signal 6
      #0 0x7f1dfc1db73d base::debug::CollectStackTrace()
      #1 0x7f1dfbfc9253 base::debug::StackTrace::StackTrace()
      #2 0x7f1dfbfc920a base::debug::StackTrace::StackTrace()
      #3 0x7f1dfc1da301 base::debug::(anonymous namespace)::StackDumpSignalHandler()
      #4 0x7f1df227af20 <unknown>
      #5 0x7f1df227ae97 gsignal
      #6 0x7f1df227c801 abort
      #7 0x7f1dfc1d9a68 base::debug::(anonymous namespace)::DebugBreak()
      #8 0x7f1dfc1d9a81 base::debug::BreakDebugger()
      #9 0x7f1dfbff75c5 logging::LogMessage::~LogMessage()
      #10 0x7f1dfd11df19 scoped_refptr<>::operator->()
      #11 0x7f1dfd494252 IPC::ChannelMojo::ReadFromMessageAttachmentSet()
      #12 0x7f1dfd4a9157 IPC::internal::MessagePipeReader::Send()
      #13 0x7f1dfd493d3a IPC::ChannelMojo::Send()
      #14 0x7f1dfadda065 content::BrowserMessageFilter::Send()
      #15 0x7f1e01a3f2e0 content::(anonymous namespace)::RenderMessageCompletionCallback::SendReplyAndDeleteThis()
      #16 0x7f1e01a40a77 content::RenderFrameMessageFilter::OpenChannelToPpapiPluginCallback::OnPpapiChannelOpened()
      #17 0x7f1e0148c607 content::PpapiPluginProcessHost::OnRendererPluginChannelCreated()
      #18 0x7f1e014905cb _ZN4base20DispatchToMethodImplIPN7content22PpapiPluginProcessHostEMS2_FvRKN3IPC13ChannelHandleEESt5tupleIJS5_EEJLm0EEEEvRKT_T0_OT1_St16integer_sequenceImJXspT2_EEE
      #19 0x7f1e0148fa3e base::DispatchToMethod<>()
      #20 0x7f1e0148e6ea IPC::DispatchToMethod<>()
      #21 0x7f1e0148d9b4 IPC::MessageT<>::Dispatch<>()
      #22 0x7f1e0148c06a content::PpapiPluginProcessHost::OnMessageReceived()
      #23 0x7f1e00b7aab3 content::BrowserChildProcessHostImpl::OnMessageReceived()
      #24 0x7f1e03120e0d content::ChildProcessHostImpl::OnMessageReceived()
      #25 0x7f1dfd493fe0 IPC::ChannelMojo::OnMessageReceived()
      #26 0x7f1dfd4a97e6 IPC::internal::MessagePipeReader::Receive()
      #27 0x7f1dfd4c127c IPC::mojom::ChannelStubDispatch::Accept()
      #28 0x7f1dfd4aafe7 IPC::mojom::ChannelStub<>::Accept()
      #29 0x7f1dfd10387a mojo::InterfaceEndpointClient::HandleValidatedMessage()
      #30 0x7f1dfd100da3 mojo::InterfaceEndpointClient::HandleIncomingMessageThunk::Accept()
      #31 0x7f1dfd10bf08 mojo::MessageDispatcher::Accept()
      #32 0x7f1dfd102786 mojo::InterfaceEndpointClient::HandleIncomingMessage()
      #33 0x7f1dfd4b05b0 IPC::(anonymous namespace)::ChannelAssociatedGroupController::Accept()
      #34 0x7f1dfd10bf08 mojo::MessageDispatcher::Accept()
      #35 0x7f1dfd0f8a29 mojo::Connector::DispatchMessage()
      #36 0x7f1dfd0f91fc mojo::Connector::ReadAllAvailableMessages()
      #37 0x7f1dfd0f7dcf mojo::Connector::OnHandleReadyInternal()
      #38 0x7f1dfd0f7adc mojo::Connector::OnWatcherHandleReady()
      #39 0x7f1dfd0fe2dc base::internal::FunctorTraits<>::Invoke<>()
      #40 0x7f1dfd0fd9c6 base::internal::InvokeHelper<>::MakeItSo<>()
      #41 0x7f1dfd0fccb2 _ZN4base8internal7InvokerINS0_9BindStateIMN4mojo9ConnectorEFvjEJNS0_17UnretainedWrapperIS4_EEEEEFvjEE7RunImplIRKS6_RKSt5tupleIJS8_EEJLm0EEEEvOT_OT0_St16integer_sequenceImJXspT1_EEEOj
      #42 0x7f1dfd0fbbc5 base::internal::Invoker<>::Run()
      #43 0x7f1df637c244 _ZNKR4base17RepeatingCallbackIFvjEE3RunEj
      #44 0x7f1df86d02fc mojo::SimpleWatcher::DiscardReadyState()
      #45 0x7f1df86e1f68 base::internal::FunctorTraits<>::Invoke<>()
      #46 0x7f1df86defa1 base::internal::InvokeHelper<>::MakeItSo<>()
      #47 0x7f1df86da22a _ZN4base8internal7InvokerINS0_9BindStateIPFvRKNS_17RepeatingCallbackIFvjEEEjRKN4mojo18HandleSignalsStateEEJS5_EEEFvjSB_EE7RunImplIRKSD_RKSt5tupleIJS5_EEJLm0EEEEvOT_OT0_St16integer_sequenceImJXspT1_EEEOjSB_
      #48 0x7f1df86d5cb0 base::internal::Invoker<>::Run()
      #49 0x7f1dfd15fe36 _ZNKR4base17RepeatingCallbackIFvjRKN4mojo18HandleSignalsStateEEE3RunEjS4_
      #50 0x7f1dfd15ecca mojo::SimpleWatcher::OnHandleReady()
      #51 0x7f1dfd15f34c mojo::SimpleWatcher::Context::Notify()
      #52 0x7f1dfd15f013 mojo::SimpleWatcher::Context::CallNotify()
      #53 0x7f1df88c418c mojo::core::WatcherDispatcher::InvokeWatchCallback()
      #54 0x7f1df88c3a8f mojo::core::Watch::InvokeCallback()
      #55 0x7f1df88b9a10 mojo::core::RequestContext::~RequestContext()
      #56 0x7f1df8898407 mojo::core::NodeChannel::OnChannelMessage()
      #57 0x7f1df8872249 mojo::core::Channel::TryDispatchMessage()
      #58 0x7f1df8871b60 mojo::core::Channel::OnReadComplete()
      #59 0x7f1df88d1912 mojo::core::(anonymous namespace)::ChannelPosix::OnFileCanReadWithoutBlocking()
      #60 0x7f1dfc239644 base::MessagePumpLibevent::FdWatchController::OnFileCanReadWithoutBlocking()
      #61 0x7f1dfc23b0d9 base::MessagePumpLibevent::OnLibeventNotification()
      #62 0x7f1dfd0eb354 event_process_active
      #63 0x7f1dfd0eb67b event_base_loop
      #64 0x7f1dfc23a60f base::MessagePumpLibevent::Run()
      #65 0x7f1dfc0eeb07 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run()
      #66 0x7f1dfc07207e base::RunLoop::Run()
      #67 0x7f1dfc163703 base::Thread::Run()
      #68 0x7f1e00bb5c7a content::BrowserProcessSubThread::IOThreadRun()
      #69 0x7f1e00bb5989 content::BrowserProcessSubThread::Run()
      #70 0x7f1dfc163d18 base::Thread::ThreadMain()
      #71 0x7f1dfc20a69f base::(anonymous namespace)::ThreadFunc()
      #72 0x7f1df02906db start_thread
      #73 0x7f1df235d88f clone
        r8: 0000000000000000  r9: 00007f1dbca2eab0 r10: 0000000000000008 r11: 0000000000000246
       r12: 0000000000001277 r13: 0000000000000000 r14: 000055d40f89f6f0 r15: 00007fffdb237610
        di: 0000000000000002  si: 00007f1dbca2eab0  bp: 00007f1dbca2ed00  bx: 0000000000000400
        dx: 0000000000000000  ax: 0000000000000000  cx: 00007f1df227ae97  sp: 00007f1dbca2eab0
        ip: 00007f1df227ae97 efl: 0000000000000246 cgf: 002b000000000033 erf: 0000000000000000
       trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000
      [end of stack trace]
      Calling _exit(1). Core file will not be generated.
      

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            ztamas Tamas Zakor
            ztamas Tamas Zakor
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes