Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-99119

[REG 5 -> 6] Segfault in QtWebEngineCore::WebContentsDelegateQt::webEngineSettings() on Google Meet

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • P2: Important
    • 6.3
    • 6.2.2
    • WebEngine
    • None

    Description

      When starting a meeting on meet.google.com, a segfault happens here:

      #0  0x00007fffdd012ae9 in QtWebEngineCore::WebContentsDelegateQt::webEngineSettings() const (this=0x555555f381e8) at ../../../../../../qt5.git/qtwebengine/src/core/web_contents_delegate_qt.cpp:852
      #1  0x00007fffdce79e84 in QtWebEngineCore::ContentBrowserClientQt::RegisterNonNetworkSubresourceURLLoaderFactories(int, int, std::map<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, mojo::PendingRemote<network::mojom::URLLoaderFactory>, std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >, std::allocator<std::pair<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const, mojo::PendingRemote<network::mojom::URLLoaderFactory> > > >*) (this=0x5555558c5bc0, render_process_id=8, render_frame_id=1, factories=0x7fffffff8d50) at ../../../../../../qt5.git/qtwebengine/src/core/content_browser_client_qt.cpp:1087
      #2  0x00007fffe54e3f05 in content::RenderFrameHostImpl::CommitNavigation(content::NavigationRequest*, mojo::StructPtr<blink::mojom::CommonNavigationParams>, mojo::StructPtr<blink::mojom::CommitNavigationParams>, mojo::StructPtr<network::mojom::URLResponseHead>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, absl::optional<content::SubresourceLoaderParams>, absl::optional<std::vector<mojo::StructPtr<blink::mojom::TransferrableURLLoader>, std::allocator<mojo::StructPtr<blink::mojom::TransferrableURLLoader> > > >, mojo::StructPtr<blink::mojom::ServiceWorkerContainerInfoForClient>, base::UnguessableToken const&, std::unique_ptr<content::WebBundleHandle, std::default_delete<content::WebBundleHandle> >) (this=0x55555563e370, navigation_request=0x555556d3eb90, common_params=..., commit_params=..., response_head=..., response_body=..., url_loader_client_endpoints=..., subresource_loader_params=..., subresource_overrides=..., container_info=..., devtools_navigation_token=..., web_bundle_handle=std::unique_ptr<content::WebBundleHandle> = {...}) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/render_frame_host_impl.cc:7799
      #3  0x00007fffe5473e3b in content::NavigationRequest::CommitNavigation() (this=0x555556d3eb90) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/navigation_request.cc:4265
      #4  0x00007fffe5472571 in content::NavigationRequest::OnCommitDeferringConditionChecksComplete(content::CommitDeferringCondition::NavigationType, absl::optional<int>) (this=0x555556d3eb90, navigation_type=content::CommitDeferringCondition::NavigationType::kOther, candidate_prerender_frame_tree_node_id=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/navigation_request.cc:4028
      #5  0x00007fffe5298616 in content::CommitDeferringConditionRunner::ProcessConditions() (this=0x555556028ae0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/commit_deferring_condition_runner.cc:149
      #6  0x00007fffe5297f18 in content::CommitDeferringConditionRunner::ProcessChecks() (this=0x555556028ae0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/commit_deferring_condition_runner.cc:50
      #7  0x00007fffe54724b0 in content::NavigationRequest::RunCommitDeferringConditions() (this=0x555556d3eb90) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/navigation_request.cc:4010
      #8  0x00007fffe5472446 in content::NavigationRequest::OnWillProcessResponseChecksComplete(content::NavigationThrottle::ThrottleCheckResult) (this=0x555556d3eb90, result=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/navigation_request.cc:4000
      #9  0x00007fffe5477c79 in content::NavigationRequest::OnWillProcessResponseProcessed(content::NavigationThrottle::ThrottleCheckResult) (this=0x555556d3eb90, result=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/navigation_request.cc:5115
      #10 0x00007fffe5477063 in content::NavigationRequest::OnNavigationEventProcessed(content::NavigationThrottleRunner::Event, content::NavigationThrottle::ThrottleCheckResult) (this=0x555556d3eb90, event=content::NavigationThrottleRunner::Event::WillProcessResponse, result=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/navigation_request.cc:5021
      #11 0x00007fffe54a0907 in content::NavigationThrottleRunner::InformDelegate(content::NavigationThrottle::ThrottleCheckResult const&) (this=0x555556028b30, result=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/navigation_throttle_runner.cc:263
      #12 0x00007fffe54a085d in content::NavigationThrottleRunner::ProcessInternal() (this=0x555556028b30) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/navigation_throttle_runner.cc:252
      #13 0x00007fffe549fc15 in content::NavigationThrottleRunner::ProcessNavigationEvent(content::NavigationThrottleRunner::Event) (this=0x555556028b30, event=content::NavigationThrottleRunner::Event::WillProcessResponse) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/navigation_throttle_runner.cc:109
      #14 0x00007fffe5478a51 in content::NavigationRequest::WillProcessResponse() (this=0x555556d3eb90) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/navigation_request.cc:5295
      #15 0x00007fffe546e0de in content::NavigationRequest::OnResponseStarted(mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::StructPtr<network::mojom::URLResponseHead>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID, bool, blink::NavigationDownloadPolicy, net::NetworkIsolationKey, absl::optional<content::SubresourceLoaderParams>, content::NavigationURLLoaderDelegate::EarlyHints) (this=0x555556d3eb90, url_loader_client_endpoints=..., response_head=..., response_body=..., request_id=..., is_download=false, download_policy=..., network_isolation_key=..., subresource_loader_params=..., early_hints=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/renderer_host/navigation_request.cc:3261
      #16 0x00007fffe5002dea in content::NavigationURLLoaderImpl::NotifyResponseStarted(mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID const&, bool) (this=0x555556055580, response_head=..., url_loader_client_endpoints=..., response_body=..., global_request_id=..., is_download=false) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/loader/navigation_url_loader_impl.cc:1360
      #17 0x00007fffe500e705 in base::internal::FunctorTraits<void (content::NavigationURLLoaderImpl::*)(mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID const&, bool), void>::Invoke<void (content::NavigationURLLoaderImpl::*)(mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID const&, bool), base::WeakPtr<content::NavigationURLLoaderImpl>, mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID, bool>(void (content::NavigationURLLoaderImpl::*)(mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID const&, bool), base::WeakPtr<content::NavigationURLLoaderImpl>&&, mojo::StructPtr<network::mojom::URLResponseHead>&&, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>&&, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>&&, content::GlobalRequestID&&, bool&&) (method=(void (content::NavigationURLLoaderImpl::*)(content::NavigationURLLoaderImpl * const, mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, const content::GlobalRequestID &, bool)) 0x7fffe5002980 <content::NavigationURLLoaderImpl::NotifyResponseStarted(mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID const&, bool)>, receiver_ptr=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:509
      #18 0x00007fffe500cc07 in base::internal::InvokeHelper<true, void>::MakeItSo<void (content::NavigationURLLoaderImpl::*)(mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID const&, bool), base::WeakPtr<content::NavigationURLLoaderImpl>, mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID, bool>(void (content::NavigationURLLoaderImpl::*&&)(mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID const&, bool), base::WeakPtr<content::NavigationURLLoaderImpl>&&, mojo::StructPtr<network::mojom::URLResponseHead>&&, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>&&, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>&&, content::GlobalRequestID&&, bool&&) (functor=@0x7fff0c37caf0: (void (content::NavigationURLLoaderImpl::*)(content::NavigationURLLoaderImpl * const, mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, const content::GlobalRequestID &, bool)) 0x7fffe5002980 <content::NavigationURLLoaderImpl::NotifyResponseStarted(mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID const&, bool)>, weak_ptr=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:668
      #19 0x00007fffe500aabd in base::internal::Invoker<base::internal::BindState<void (content::NavigationURLLoaderImpl::*)(mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID const&, bool), base::WeakPtr<content::NavigationURLLoaderImpl>, mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID, bool>, void ()>::RunImpl<void (content::NavigationURLLoaderImpl::*)(mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID const&, bool), std::tuple<base::WeakPtr<content::NavigationURLLoaderImpl>, mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID, bool>, 0ul, 1ul, 2ul, 3ul, 4ul, 5ul>(void (content::NavigationURLLoaderImpl::*&&)(mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID const&, bool), std::tuple<base::WeakPtr<content::NavigationURLLoaderImpl>, mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID, bool>&&, std::integer_sequence<unsigned long, 0ul, 1ul, 2ul, 3ul, 4ul, 5ul>) (functor=@0x7fff0c37caf0: (void (content::NavigationURLLoaderImpl::*)(content::NavigationURLLoaderImpl * const, mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, const content::GlobalRequestID &, bool)) 0x7fffe5002980 <content::NavigationURLLoaderImpl::NotifyResponseStarted(mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID const&, bool)>, bound=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:721
      #20 0x00007fffe50089c6 in base::internal::Invoker<base::internal::BindState<void (content::NavigationURLLoaderImpl::*)(mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID const&, bool), base::WeakPtr<content::NavigationURLLoaderImpl>, mojo::StructPtr<network::mojom::URLResponseHead>, mojo::StructPtr<network::mojom::URLLoaderClientEndpoints>, mojo::ScopedHandleBase<mojo::DataPipeConsumerHandle>, content::GlobalRequestID, bool>, void ()>::RunOnce(base::internal::BindStateBase*) (base=0x7fff0c37cad0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:690
      #21 0x00007fffdceadc90 in base::OnceCallback<void ()>::Run() && (this=0x7fffffffb740) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/callback.h:98
      #22 0x00007fffe500121e in operator()(base::OnceClosure, network::mojom::URLResponseHead*, network::mojom::ParsedHeadersPtr) const (__closure=0x555555c33300, continuation=..., head=0x555555e156f0, parsed_headers=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/content/browser/loader/navigation_url_loader_impl.cc:1130
      #23 0x00007fffe5004ed9 in base::internal::FunctorTraits<content::NavigationURLLoaderImpl::ParseHeaders(const GURL&, network::mojom::URLResponseHead*, base::OnceClosure)::<lambda(base::OnceClosure, network::mojom::URLResponseHead*, network::mojom::ParsedHeadersPtr)>, void>::Invoke<content::NavigationURLLoaderImpl::ParseHeaders(const GURL&, network::mojom::URLResponseHead*, base::OnceClosure)::<lambda(base::OnceClosure, network::mojom::URLResponseHead*, network::mojom::ParsedHeadersPtr)>, base::OnceCallback<void()>, network::mojom::URLResponseHead*, mojo::StructPtr<network::mojom::ParsedHeaders> >(struct {...} &&) (functor=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:390
      #24 0x00007fffe5004bf5 in base::internal::InvokeHelper<false, void>::MakeItSo<content::NavigationURLLoaderImpl::ParseHeaders(const GURL&, network::mojom::URLResponseHead*, base::OnceClosure)::<lambda(base::OnceClosure, network::mojom::URLResponseHead*, network::mojom::ParsedHeadersPtr)>, base::OnceCallback<void()>, network::mojom::URLResponseHead*, mojo::StructPtr<network::mojom::ParsedHeaders> >(struct {...} &&) (functor=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:648
      #25 0x00007fffe5004802 in base::internal::Invoker<base::internal::BindState<content::NavigationURLLoaderImpl::ParseHeaders(const GURL&, network::mojom::URLResponseHead*, base::OnceClosure)::<lambda(base::OnceClosure, network::mojom::URLResponseHead*, network::mojom::ParsedHeadersPtr)>, base::OnceCallback<void()>, network::mojom::URLResponseHead*>, void(mojo::StructPtr<network::mojom::ParsedHeaders>)>::RunImpl<content::NavigationURLLoaderImpl::ParseHeaders(const GURL&, network::mojom::URLResponseHead*, base::OnceClosure)::<lambda(base::OnceClosure, network::mojom::URLResponseHead*, network::mojom::ParsedHeadersPtr)>, std::tuple<base::OnceCallback<void()>, network::mojom::URLResponseHead*>, 0, 1>(struct {...} &&, std::tuple<base::OnceCallback<void()>, network::mojom::URLResponseHead*> &&, std::index_sequence, mojo::StructPtr<network::mojom::ParsedHeaders> &&) (functor=..., bound=..., unbound_args#0=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:721
      #26 0x00007fffe50042f2 in base::internal::Invoker<base::internal::BindState<content::NavigationURLLoaderImpl::ParseHeaders(const GURL&, network::mojom::URLResponseHead*, base::OnceClosure)::<lambda(base::OnceClosure, network::mojom::URLResponseHead*, network::mojom::ParsedHeadersPtr)>, base::OnceCallback<void()>, network::mojom::URLResponseHead*>, void(mojo::StructPtr<network::mojom::ParsedHeaders>)>::RunOnce(base::internal::BindStateBase *, base::internal::PassingType) (base=0x555555c332e0, unbound_args#0=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:690
      #27 0x00007fffdda1eab7 in base::OnceCallback<void (mojo::StructPtr<network::mojom::ParsedHeaders>)>::Run(mojo::StructPtr<network::mojom::ParsedHeaders>) && (this=0x555555bfa608, args#0=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/callback.h:98
      #28 0x00007fffdda11d12 in network::mojom::NetworkService_ParseHeaders_ForwardToCallback::Accept(mojo::Message*) (this=0x555555bfa600, message=0x7fffffffbdf0) at gen/services/network/public/mojom/network_service.mojom.cc:2448
      #29 0x00007fffe871bb76 in mojo::InterfaceEndpointClient::HandleValidatedMessage(mojo::Message*) (this=0x555556124b30, message=0x7fffffffbdf0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:893
      #30 0x00007fffe8718adb in mojo::InterfaceEndpointClient::HandleIncomingMessageThunk::Accept(mojo::Message*) (this=0x555556124c50, message=0x7fffffffbdf0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:329
      #31 0x00007fffe872ca6b in mojo::MessageDispatcher::Accept(mojo::Message*) (this=0x555556124c60, message=0x7fffffffbdf0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/mojo/public/cpp/bindings/lib/message_dispatcher.cc:43
      #32 0x00007fffe871a8cb in mojo::InterfaceEndpointClient::HandleIncomingMessage(mojo::Message*) (this=0x555556124b30, message=0x7fffffffbdf0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:655
      #33 0x00007fffe87324ec in mojo::internal::MultiplexRouter::ProcessIncomingMessage(mojo::internal::MultiplexRouter::MessageWrapper*, mojo::internal::MultiplexRouter::ClientCallBehavior, base::SequencedTaskRunner*) (this=0x5555560e2720, message_wrapper=0x7fffffffbed0, client_call_behavior=mojo::internal::MultiplexRouter::ALLOW_DIRECT_CLIENT_CALLS, current_task_runner=0x5555559aeb90) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/mojo/public/cpp/bindings/lib/multiplex_router.cc:1099
      #34 0x00007fffe873089f in mojo::internal::MultiplexRouter::Accept(mojo::Message*) (this=0x5555560e2720, message=0x7fffffffc1d0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/mojo/public/cpp/bindings/lib/multiplex_router.cc:719
      #35 0x00007fffe872ca6b in mojo::MessageDispatcher::Accept(mojo::Message*) (this=0x5555560e2758, message=0x7fffffffc1d0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/mojo/public/cpp/bindings/lib/message_dispatcher.cc:43
      #36 0x00007fffe8712bb3 in mojo::Connector::DispatchMessage(mojo::Message) (this=0x5555560e2788, message=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/mojo/public/cpp/bindings/lib/connector.cc:546
      #37 0x00007fffe8712fe6 in mojo::Connector::ReadAllAvailableMessages() (this=0x5555560e2788) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/mojo/public/cpp/bindings/lib/connector.cc:604
      #38 0x00007fffe8711e84 in mojo::Connector::OnHandleReadyInternal(unsigned int) (this=0x5555560e2788, result=0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/mojo/public/cpp/bindings/lib/connector.cc:439
      #39 0x00007fffe8711d0a in mojo::Connector::OnWatcherHandleReady(unsigned int) (this=0x5555560e2788, result=0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/mojo/public/cpp/bindings/lib/connector.cc:410
      #40 0x00007fffe871667a in base::internal::FunctorTraits<void (mojo::Connector::*)(unsigned int), void>::Invoke<void (mojo::Connector::*)(unsigned int), mojo::Connector*, unsigned int>(void (mojo::Connector::*)(unsigned int), mojo::Connector*&&, unsigned int&&) (method=(void (mojo::Connector::*)(mojo::Connector * const, unsigned int)) 0x7fffe8711cea <mojo::Connector::OnWatcherHandleReady(unsigned int)>, receiver_ptr=@0x7fffffffc378: 0x5555560e2788) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:509
      #41 0x00007fffe8716189 in base::internal::InvokeHelper<false, void>::MakeItSo<void (mojo::Connector::* const&)(unsigned int), mojo::Connector*, unsigned int>(void (mojo::Connector::* const&)(unsigned int), mojo::Connector*&&, unsigned int&&) (functor=@0x5555560c1b10: (void (mojo::Connector::*)(mojo::Connector * const, unsigned int)) 0x7fffe8711cea <mojo::Connector::OnWatcherHandleReady(unsigned int)>) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:648
      #42 0x00007fffe8715b04 in base::internal::Invoker<base::internal::BindState<void (mojo::Connector::*)(unsigned int), base::internal::UnretainedWrapper<mojo::Connector> >, void (unsigned int)>::RunImpl<void (mojo::Connector::* const&)(unsigned int), std::tuple<base::internal::UnretainedWrapper<mojo::Connector> > const&, 0ul>(void (mojo::Connector::* const&)(unsigned int), std::tuple<base::internal::UnretainedWrapper<mojo::Connector> > const&, std::integer_sequence<unsigned long, 0ul>, unsigned int&&) (functor=@0x5555560c1b10: (void (mojo::Connector::*)(mojo::Connector * const, unsigned int)) 0x7fffe8711cea <mojo::Connector::OnWatcherHandleReady(unsigned int)>, bound=std::tuple containing = {...}, unbound_args#0=@0x7fffffffc3a4: 0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:721
      #43 0x00007fffe871536f in base::internal::Invoker<base::internal::BindState<void (mojo::Connector::*)(unsigned int), base::internal::UnretainedWrapper<mojo::Connector> >, void (unsigned int)>::Run(base::internal::BindStateBase*, unsigned int) (base=0x5555560c1af0, unbound_args#0=0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:703
      #44 0x00007fffe0477b22 in base::RepeatingCallback<void (unsigned int)>::Run(unsigned int) const & (this=0x5555560c1b58, args#0=0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/callback.h:166
      #45 0x00007fffe047699a in mojo::SimpleWatcher::DiscardReadyState(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&) (callback=..., result=0, state=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/mojo/public/cpp/system/simple_watcher.h:189
      #46 0x00007fffe0484d4d in base::internal::FunctorTraits<void (*)(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&), void>::Invoke<void (* const&)(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&), base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&>(void (* const&)(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&), base::RepeatingCallback<void (unsigned int)> const&, unsigned int&&, mojo::HandleSignalsState const&) (function=@0x5555560c1b50: 0x7fffe0476976 <mojo::SimpleWatcher::DiscardReadyState(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&)>) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:404
      #47 0x00007fffe048214f in base::internal::InvokeHelper<false, void>::MakeItSo<void (* const&)(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&), base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&>(void (* const&)(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&), base::RepeatingCallback<void (unsigned int)> const&, unsigned int&&, mojo::HandleSignalsState const&) (functor=@0x5555560c1b50: 0x7fffe0476976 <mojo::SimpleWatcher::DiscardReadyState(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&)>) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:648
      #48 0x00007fffe047eacb in base::internal::Invoker<base::internal::BindState<void (*)(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&), base::RepeatingCallback<void (unsigned int)> >, void (unsigned int, mojo::HandleSignalsState const&)>::RunImpl<void (* const&)(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&), std::tuple<base::RepeatingCallback<void (unsigned int)> > const&, 0ul>(void (* const&)(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&), std::tuple<base::RepeatingCallback<void (unsigned int)> > const&, std::integer_sequence<unsigned long, 0ul>, unsigned int&&, mojo::HandleSignalsState const&) (functor=@0x5555560c1b50: 0x7fffe0476976 <mojo::SimpleWatcher::DiscardReadyState(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&)>, bound=std::tuple containing = {...}, unbound_args#0=@0x7fffffffc544: 0, unbound_args#1=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:721
      #49 0x00007fffe047b0bb in base::internal::Invoker<base::internal::BindState<void (*)(base::RepeatingCallback<void (unsigned int)> const&, unsigned int, mojo::HandleSignalsState const&), base::RepeatingCallback<void (unsigned int)> >, void (unsigned int, mojo::HandleSignalsState const&)>::Run(base::internal::BindStateBase*, unsigned int, mojo::HandleSignalsState const&) (base=0x5555560c1b30, unbound_args#0=0, unbound_args#1=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:703
      #50 0x00007fffe8782950 in base::RepeatingCallback<void (unsigned int, mojo::HandleSignalsState const&)>::Run(unsigned int, mojo::HandleSignalsState const&) const & (this=0x7fffffffc600, args#0=0, args#1=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/callback.h:166
      #51 0x00007fffe87815c6 in mojo::SimpleWatcher::OnHandleReady(int, unsigned int, mojo::HandleSignalsState const&) (this=0x5555560c18e0, watch_id=1, result=0, state=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/mojo/public/cpp/system/simple_watcher.cc:278
      #52 0x00007fffe878361a in base::internal::FunctorTraits<void (mojo::SimpleWatcher::*)(int, unsigned int, mojo::HandleSignalsState const&), void>::Invoke<void (mojo::SimpleWatcher::*)(int, unsigned int, mojo::HandleSignalsState const&), base::WeakPtr<mojo::SimpleWatcher>, int, unsigned int, mojo::HandleSignalsState>(void (mojo::SimpleWatcher::*)(int, unsigned int, mojo::HandleSignalsState const&), base::WeakPtr<mojo::SimpleWatcher>&&, int&&, unsigned int&&, mojo::HandleSignalsState&&) (method=(void (mojo::SimpleWatcher::*)(mojo::SimpleWatcher * const, int, unsigned int, const mojo::HandleSignalsState &)) 0x7fffe87814ac <mojo::SimpleWatcher::OnHandleReady(int, unsigned int, mojo::HandleSignalsState const&)>, receiver_ptr=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:509
      #53 0x00007fffe8783326 in base::internal::InvokeHelper<true, void>::MakeItSo<void (mojo::SimpleWatcher::*)(int, unsigned int, mojo::HandleSignalsState const&), base::WeakPtr<mojo::SimpleWatcher>, int, unsigned int, mojo::HandleSignalsState>(void (mojo::SimpleWatcher::*&&)(int, unsigned int, mojo::HandleSignalsState const&), base::WeakPtr<mojo::SimpleWatcher>&&, int&&, unsigned int&&, mojo::HandleSignalsState&&) (functor=@0x7fff0c1656c0: (void (mojo::SimpleWatcher::*)(mojo::SimpleWatcher * const, int, unsigned int, const mojo::HandleSignalsState &)) 0x7fffe87814ac <mojo::SimpleWatcher::OnHandleReady(int, unsigned int, mojo::HandleSignalsState const&)>, weak_ptr=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:668
      #54 0x00007fffe8782e8e in base::internal::Invoker<base::internal::BindState<void (mojo::SimpleWatcher::*)(int, unsigned int, mojo::HandleSignalsState const&), base::WeakPtr<mojo::SimpleWatcher>, int, unsigned int, mojo::HandleSignalsState>, void ()>::RunImpl<void (mojo::SimpleWatcher::*)(int, unsigned int, mojo::HandleSignalsState const&), std::tuple<base::WeakPtr<mojo::SimpleWatcher>, int, unsigned int, mojo::HandleSignalsState>, 0ul, 1ul, 2ul, 3ul>(void (mojo::SimpleWatcher::*&&)(int, unsigned int, mojo::HandleSignalsState const&), std::tuple<base::WeakPtr<mojo::SimpleWatcher>, int, unsigned int, mojo::HandleSignalsState>&&, std::integer_sequence<unsigned long, 0ul, 1ul, 2ul, 3ul>) (functor=@0x7fff0c1656c0: (void (mojo::SimpleWatcher::*)(mojo::SimpleWatcher * const, int, unsigned int, const mojo::HandleSignalsState &)) 0x7fffe87814ac <mojo::SimpleWatcher::OnHandleReady(int, unsigned int, mojo::HandleSignalsState const&)>, bound=...) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:721
      #55 0x00007fffe8782ab6 in base::internal::Invoker<base::internal::BindState<void (mojo::SimpleWatcher::*)(int, unsigned int, mojo::HandleSignalsState const&), base::WeakPtr<mojo::SimpleWatcher>, int, unsigned int, mojo::HandleSignalsState>, void ()>::RunOnce(base::internal::BindStateBase*) (base=0x7fff0c1656a0) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/bind_internal.h:690
      #56 0x00007fffdceadc90 in base::OnceCallback<void ()>::Run() && (this=0x5555558e5490) at ../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/callback.h:98
      #57 0x00007fffe74a3424 in base::TaskAnnotator::RunTask(char const*, base::PendingTask*) (this=0x5555558e47b0, trace_event_name=0x7fffefdc3726 "SequenceManager RunTask", pending_task=0x5555558e5490) at ./../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/task/common/task_annotator.cc:178
      #58 0x00007fffe74e0f28 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::sequence_manager::LazyNow*) (this=0x5555558e45f0, continuation_lazy_now=0x7fffffffc9c0) at ./../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:360
      #59 0x00007fffe74e04b3 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() (this=0x5555558e45f0) at ./../../../../../../qt5.git/qtwebengine/src/3rdparty/chromium/base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:260
      #60 0x00007fffdce4ac1b in QtWebEngineCore::MessagePumpForUIQt::handleScheduledWork() (this=0x5555559af7d0) at ../../../../../../qt5.git/qtwebengine/src/core/browser_main_parts_qt.cpp:214
      #61 0x00007fffdce4a92d in QtWebEngineCore::MessagePumpForUIQt::MessagePumpForUIQt()::{lambda()#1}::operator()() const (__closure=0x5555559af7f8) at ../../../../../../qt5.git/qtwebengine/src/core/browser_main_parts_qt.cpp:127
      #62 0x00007fffdce4cd7e in std::__invoke_impl<void, QtWebEngineCore::MessagePumpForUIQt::MessagePumpForUIQt()::{lambda()#1}&>(std::__invoke_other, QtWebEngineCore::MessagePumpForUIQt::MessagePumpForUIQt()::{lambda()#1}&) (__f=...) at /usr/include/c++/11.1.0/bits/invoke.h:61
      #63 0x00007fffdce4c3f5 in std::__invoke_r<void, QtWebEngineCore::MessagePumpForUIQt::MessagePumpForUIQt()::{lambda()#1}&>(QtWebEngineCore::MessagePumpForUIQt::MessagePumpForUIQt()::{lambda()#1}&) (__fn=...) at /usr/include/c++/11.1.0/bits/invoke.h:111
      #64 0x00007fffdce4b861 in std::_Function_handler<void (), QtWebEngineCore::MessagePumpForUIQt::MessagePumpForUIQt()::{lambda()#1}>::_M_invoke(std::_Any_data const&) (__functor=...) at /usr/include/c++/11.1.0/bits/std_function.h:291
      #65 0x00007fffdd2cf0b4 in std::function<void ()>::operator()() const (this=0x5555559af7f8) at /usr/include/c++/11.1.0/bits/std_function.h:560
      #66 0x00007fffe73325e8 in QWebEngineMessagePumpScheduler::timerEvent(QTimerEvent*) (this=0x5555559af7e0, ev=0x7fff0c12f370) at /home/florian/proj/qt/dev6/qt5.git/qtwebengine/src/core/api/qwebenginemessagepumpscheduler.cpp:71
      #67 0x00007fffd848d674 in QObject::event(QEvent*) (this=0x5555559af7e0, e=0x7fff0c12f370) at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/corelib/kernel/qobject.cpp:1328
      #68 0x00007fffd99a0be2 in QApplicationPrivate::notify_helper(QObject*, QEvent*) (this=0x5555555e5000, receiver=0x5555559af7e0, e=0x7fff0c12f370) at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/widgets/kernel/qapplication.cpp:3335
      #69 0x00007fffd99a09d9 in QApplication::notify(QObject*, QEvent*) (this=0x7fffffffd3c0, receiver=0x5555559af7e0, e=0x7fff0c12f370) at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/widgets/kernel/qapplication.cpp:3286
      #70 0x00007fffd840a6b5 in QCoreApplication::notifyInternal2(QObject*, QEvent*) (receiver=0x5555559af7e0, event=0x7fff0c12f370) at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/corelib/kernel/qcoreapplication.cpp:1063
      #71 0x00007fffd840b223 in QCoreApplication::sendEvent(QObject*, QEvent*) (receiver=0x5555559af7e0, event=0x7fff0c12f370) at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/corelib/kernel/qcoreapplication.cpp:1479
      #72 0x00007fffd840c0d7 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) (receiver=0x0, event_type=0, data=0x5555555eccc0) at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/corelib/kernel/qcoreapplication.cpp:1843
      #73 0x00007fffd840b9cc in QCoreApplication::sendPostedEvents(QObject*, int) (receiver=0x0, event_type=0) at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/corelib/kernel/qcoreapplication.cpp:1702
      #74 0x00007fffd87f6d07 in postEventSourceDispatch(GSource*, GSourceFunc, gpointer) (s=0x5555555f1410) at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/corelib/kernel/qeventdispatcher_glib.cpp:279
      #75 0x00007fffd6a954dc in g_main_context_dispatch () at /usr/lib/libglib-2.0.so.0
      #76 0x00007fffd6ae9799 in  () at /usr/lib/libglib-2.0.so.0
      #77 0x00007fffd6a92bc1 in g_main_context_iteration () at /usr/lib/libglib-2.0.so.0
      #78 0x00007fffd87f759c in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (this=0x555555645e80, flags=...) at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/corelib/kernel/qeventdispatcher_glib.cpp:429
      #79 0x00007fffd3c9ad5a in QXcbGlibEventDispatcher::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (this=0x555555645e80, flags=...) at ../qt5.git/qtbase/src/plugins/platforms/xcb/qxcbeventdispatcher.cpp:132
      #80 0x00007fffd841e6c5 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (this=0x7fffffffd320, flags=...) at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/corelib/kernel/qeventloop.cpp:136
      #81 0x00007fffd841ea30 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) (this=0x7fffffffd320, flags=...) at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/corelib/kernel/qeventloop.cpp:218
      #82 0x00007fffd840aff8 in QCoreApplication::exec() () at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/corelib/kernel/qcoreapplication.cpp:1384
      #83 0x00007fffd8d9b2b4 in QGuiApplication::exec() () at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/gui/kernel/qguiapplication.cpp:1862
      #84 0x00007fffd999dce3 in QApplication::exec() () at /home/florian/proj/qt/dev6/qt5.git/qtbase/src/widgets/kernel/qapplication.cpp:2617
      #85 0x00005555555833bf in main ()
      

      bt full from the first frame:

              settings = 0x555555dab480
              process_host = 0x555555b29b00
              profile = 0x555555aa5920
              profileAdapter = 0x5555560a0900
              frame_host = 0x55555563e370
              web_contents = 0x5555556444c0
              url = {spec_ = "chrome-extension://nkeimhogjdpnpccoofpliimaahmaaome/background.html", is_valid_ = true, parsed_ = {scheme = {begin = 0, len = 16}, username = {begin = 0, len = -1}, password = {begin = 0, len = -1}, host = {begin = 19, len = 32}, port = {begin = 0, len = -1}, path = {begin = 51, len = 16}, query = {begin = 0, len = -1}, ref = {begin = 0, len = -1}, potentially_dangling_markup = false, inner_parsed_ = 0x0}, inner_url_ = std::unique_ptr<GURL> = {get() = {<No data fields>}}}
              install_file_scheme = false
              factory = {state_ = {pipe = {handle_ = {<mojo::Handle> = {value_ = 1441541896}, <No data fields>}}, version = 21845}}
              web_observer = 0x7fffdce83e27 <std::less<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > >::operator()(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) const+39>
              extension = 0x7fffffff8a60
              allowed_webui_hosts = Python Exception <class 'gdb.MemoryError'>: Cannot access memory at address 0x0
      

      Attachments

        For Gerrit Dashboard: QTBUG-99119
        # Subject Branch Project Status CR V

        Activity

          People

            davidsz Szabolcs David
            the compiler Florian Bruhin
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes