My favorites | Sign in
Project Home Downloads Wiki Issues
New issue   Search
for
  Advanced search   Search tips
Issue 20511: Crash - AutocompletePopupModel::URLsForCurrentSelection(unsigned int *,bool *,GURL *)
7 people starred this issue and may be notified of changes. Back to list
 
Reported by project member crash...@chromium.org, Aug 28, 2009
This crash was detected in 3.0.195.10 and appears to be a regression from 3.0.195.6.
It is currently ranked #4 (based on the relative number of reports in the release).  There have been 19 reports from 19 clients.
Search query: http://crash/search?query=Chrome+3.0.195.10+AutocompletePopupModel%3A%3AURLsForCurrentSelection%28unsigned+int+*%2Cbool+*%2CGURL+*%29
----------------------------
*       Summary Data       *
----------------------------
Report Link: http://crash/reportdetail?reportid=a3b6f8517f3fd9b9
Mini Dump Link: http://crash/file?reportid=a3b6f8517f3fd9b9&name=upload_file_minidump

Uptime: 195 sec
User Comments: null
OS: Windows XP Service Pack 3
CPU Architecture: x86
CPU Info: GenuineIntel family 15 model 6 stepping 5
rept: null
ptype: browser
plat: Win32
crash type:(EXCEPTION_BREAKPOINT@0x01ff0e14)

----------------------------
*        Crash Trace       *
----------------------------
                  [logging.cc:557] - logging::LogMessage::~LogMessage()
 [autocomplete_popup_model.cc:175] - AutocompletePopupModel::URLsForCurrentSelection(unsigned int *,bool *,GURL *)
        [autocomplete_edit.cc:561] - AutocompleteEditModel::GetURLForCurrentText(unsigned int *,bool *,GURL *)
        [autocomplete_edit.cc:150] - AutocompleteEditModel::CurrentTextIsURL()
[autocomplete_edit_view_win.cc:2008] - AutocompleteEditViewWin::EmphasizeURLComponents()
[autocomplete_edit_view_win.cc:2177] - AutocompleteEditViewWin::TextChanged()
[autocomplete_edit_view_win.cc:872] - AutocompleteEditViewWin::OnAfterPossibleChange()
[autocomplete_edit_view_win.cc:1715] - AutocompleteEditViewWin::HandleKeystroke(unsigned int,wchar_t,unsigned int,unsigned int)
[autocomplete_edit_view_win.cc:1302] - AutocompleteEditViewWin::OnKeyDown(wchar_t,unsigned int,unsigned int)
[autocomplete_edit_view_win.h:159] - AutocompleteEditViewWin::ProcessWindowMessage(HWND__ *,unsigned int,unsigned int,long,long &,unsigned long)
                   [atlwin.h:3073] - ATL::CWindowImplBaseT<WTL::CRichEditCtrlT<ATL::CWindow>,ATL::CWinTraits<1342177664,0> >::WindowProc(HWND__ *,unsigned int,unsigned int,long)
           [user32.dll+0x00008733] - InternalCallWinProc
           [user32.dll+0x00008815] - UserCallWinProcCheckWow
           [user32.dll+0x000089cc] - DispatchMessageWorker
           [user32.dll+0x00008a0f] - DispatchMessageW
       [accelerator_handler.cc:35] - views::AcceleratorHandler::Dispatch(tagMSG const &)
         [message_pump_win.cc:357] - base::MessagePumpForUI::ProcessMessageHelper(tagMSG const &)
         [message_pump_win.cc:396] - base::MessagePumpForUI::ProcessPumpReplacementMessage()
         [message_pump_win.cc:352] - base::MessagePumpForUI::ProcessMessageHelper(tagMSG const &)
         [message_pump_win.cc:205] - base::MessagePumpForUI::DoRunLoop()
          [message_pump_win.cc:52] - base::MessagePumpWin::RunWithDispatcher(base::MessagePump::Delegate *,base::MessagePumpWin::Dispatcher *)
             [message_loop.cc:193] - MessageLoop::RunInternal()
             [message_loop.cc:181] - MessageLoop::RunHandler()
             [message_loop.cc:589] - MessageLoopForUI::Run(base::MessagePumpWin::Dispatcher *)
             [browser_main.cc:194] - `anonymous namespace'::RunUIMessageLoop(BrowserProcess *)
             [browser_main.cc:767] - BrowserMain(MainFunctionParams const &)
          [chrome_dll_main.cc:511] - ChromeMain
      [google_update_client.cc:96] - google_update::GoogleUpdateClient::Launch(HINSTANCE__ *,sandbox::SandboxInterfaceInfo *,wchar_t *,char const *,int *)
         [kernel32.dll+0x0002ffff] - CreateFiberEx

----------------------------
*      Loaded Modules      *
----------------------------
    pt-BR.dll
    default.dll
    chrome.dll
    gears.dll
    icudt38.dll
    rlz.dll
    chrome.exe
    rpchromebrowserrecordhelper.dll
    klg.dat
    smum32.dll
    UnlockerHook.dll
    comctl32.dll
    GdiPlus.dll
    advapi32.dll
    crypt32.dll
    cryptnet.dll
    dnsapi.dll
    dssenh.dll
    gdi32.dll
    hnetcfg.dll
    iertutil.dll
    imm32.dll
    iphlpapi.dll
    kernel32.dll
    lz32.dll
    msasn1.dll
    msctf.dll
    msctfime.ime
    msv1_0.dll
    msvcp60.dll
    msvcp71.dll
    msvcr71.dll
    msvcrt.dll
    mswsock.dll
    netapi32.dll
    normaliz.dll
    ntdll.dll
    ntmarta.dll
    ole32.dll
    oleacc.dll
    oleaut32.dll
    psapi.dll
    rasadhlp.dll
    rasapi32.dll
    rasman.dll
    riched20.dll
    rpcrt4.dll
    rsaenh.dll
    rtutils.dll
    samlib.dll
    schannel.dll
    secur32.dll
    sensapi.dll
    shell32.dll
    shlwapi.dll
    sxs.dll
    t2embed.dll
    tapi32.dll
    urlmon.dll
    user32.dll
    userenv.dll
    usp10.dll
    uxtheme.dll
    version.dll
    winhttp.dll
    wininet.dll
    winmm.dll
    wldap32.dll
    ws2_32.dll
    ws2help.dll
    wshtcpip.dll
    xpsp2res.dll

Comment 1 by lafo...@chromium.org, Aug 28, 2009
Hey Peter, this looks like the same Check we saw in 13500.  The strange part is that 
195 was branch after the change in there was fixed.  Could you take a look?
Status: Assigned
Owner: pkast...@chromium.org
Labels: Mstone-3
Comment 2 by pkasting@chromium.org, Aug 28, 2009
Note: My fix in r20395 went in to 3.0.193.1 and later.

This stack also appears in 3.0.195.6, 3.0.195.1, and 3.0.193.2; I can't find it in 3.0.193.1.

The following two stacks also occur in 3.0.195.10, 3.0.195.6, 3.0.195.1, 3.0.193.2, 3.0.193.1, 3.0.193.0:

0x01fea448	 [chrome.dll	 - logging.cc:553]	 logging::LogMessage::~LogMessage()
0x0216a3ef	 [chrome.dll	 - autocomplete_popup_model.cc:175]	 AutocompletePopupModel::URLsForCurrentSelection(unsigned int 
*,bool *,GURL *)
0x0211d29f	 [chrome.dll	 - autocomplete_edit.cc:561]	 AutocompleteEditModel::GetURLForCurrentText(unsigned int *,bool 
*,GURL *)
0x0211c61a	 [chrome.dll	 - autocomplete_edit.cc:150]	 AutocompleteEditModel::CurrentTextIsURL()
0x020f830e	 [chrome.dll	 - go_button.cc:122]	 
GoButton::GetTooltipText(int,int,std::basic_string<wchar_t,std::char_traits<wchar_t>,std::allocator<wchar_t> > *)
0x0227c05c	 [chrome.dll	 - tooltip_manager_win.cc:350]	 views::TooltipManagerWin::UpdateTooltip(int,int)
0x0227c134	 [chrome.dll	 - tooltip_manager_win.cc:377]	 views::TooltipManagerWin::OnMouse(unsigned int,unsigned int,long)
0x02271dc0	 [chrome.dll	 - widget_win.cc:675]	 views::WidgetWin::OnMouseRange(unsigned int,unsigned int,long)
0x022705d3	 [chrome.dll	 - widget_win.h:129]	 views::WidgetWin::_ProcessWindowMessage(HWND__ *,unsigned int,unsigned 
int,long,long &,unsigned long)
0x02272668	 [chrome.dll	 - widget_win.cc:1067]	 views::WidgetWin::WndProc(HWND__ *,unsigned int,unsigned int,long)


0x5925a448	 [chrome.dll	 - logging.cc:553]	 logging::LogMessage::~LogMessage()
0x593da3ef	 [chrome.dll	 - autocomplete_popup_model.cc:175]	 AutocompletePopupModel::URLsForCurrentSelection(unsigned int 
*,bool *,GURL *)
0x5938d29f	 [chrome.dll	 - autocomplete_edit.cc:561]	 AutocompleteEditModel::GetURLForCurrentText(unsigned int *,bool 
*,GURL *)
0x5938c9e9	 [chrome.dll	 - autocomplete_edit.cc:260]	 AutocompleteEditModel::AcceptInput(WindowOpenDisposition,bool)
0x593ee4e4	 [chrome.dll	 - autocomplete_edit_view_win.cc:1725]	 
AutocompleteEditViewWin::OnKeyDownOnlyWritable(wchar_t,unsigned int,unsigned int)
0x593edb30	 [chrome.dll	 - autocomplete_edit_view_win.cc:1291]	 AutocompleteEditViewWin::OnKeyDown(wchar_t,unsigned 
int,unsigned int)
0x593ebc1d	 [chrome.dll	 - autocomplete_edit_view_win.h:159]	 AutocompleteEditViewWin::ProcessWindowMessage(HWND__ 
*,unsigned int,unsigned int,long,long &,unsigned long)


The following stack occurs in 3.0.193.1:

0x01fea448	 [chrome.dll	 - logging.cc:553]	 logging::LogMessage::~LogMessage()
0x0216a3ef	 [chrome.dll	 - autocomplete_popup_model.cc:175]	 AutocompletePopupModel::URLsForCurrentSelection(unsigned int 
*,bool *,GURL *)
0x0211d29f	 [chrome.dll	 - autocomplete_edit.cc:561]	 AutocompleteEditModel::GetURLForCurrentText(unsigned int *,bool 
*,GURL *)
0x0211c61a	 [chrome.dll	 - autocomplete_edit.cc:150]	 AutocompleteEditModel::CurrentTextIsURL()
0x0217eb3e	 [chrome.dll	 - autocomplete_edit_view_win.cc:2002]	 AutocompleteEditViewWin::EmphasizeURLComponents()
0x0217f15e	 [chrome.dll	 - autocomplete_edit_view_win.cc:2171]	 AutocompleteEditViewWin::TextChanged()
0x0217cc89	 [chrome.dll	 - autocomplete_edit_view_win.cc:624]	 
AutocompleteEditViewWin::SetUserText(std::basic_string<wchar_t,std::char_traits<wchar_t>,std::allocator<wchar_t> > const 
&,std::basic_string<wchar_t,std::char_traits<wchar_t>,std::allocator<wchar_t> > const &,bool)
0x0211c4a6	 [chrome.dll	 - autocomplete_edit.cc:101]	 AutocompleteEditModel::RestoreState(AutocompleteEditModel::State 
const &)
0x0217cabe	 [chrome.dll	 - autocomplete_edit_view_win.cc:551]	 AutocompleteEditViewWin::Update(TabContents const *)
0x0214c04e	 [chrome.dll	 - location_bar_view.cc:234]	 LocationBarView::Update(TabContents const *)
0x0206278f	 [chrome.dll	 - browser_view.cc:785]	 BrowserView::UpdateToolbar(TabContents *,bool)
0x02075a37	 [chrome.dll	 - browser.cc:2255]	 Browser::UpdateToolbar(bool)
0x020749dd	 [chrome.dll	 - browser.cc:1638]	 Browser::TabSelectedAt(TabContents *,TabContents *,int,bool)
0x0209d8b7	 [chrome.dll	 - tab_strip_model.cc:657]	 TabStripModel::ChangeSelectedContentsFrom(TabContents *,int,bool)
0x0209ca57	 [chrome.dll	 - tab_strip_model.cc:147]	 TabStripModel::DetachTabContentsAt(int)
0x0209d528	 [chrome.dll	 - tab_strip_model.cc:554]	 TabStripModel::Observe(NotificationType,NotificationSource const 
&,NotificationDetails const &)
0x0219dd4a	 [chrome.dll	 - notification_service.cc:107]	 NotificationService::Notify(NotificationType,NotificationSource 
const &,NotificationDetails const &)
0x0206b940	 [chrome.dll	 - tab_contents.cc:333]	 TabContents::~TabContents()
Comment 3 by pkasting@chromium.org, Aug 28, 2009
 Issue 15591  has been merged into this issue.
Comment 4 by pkasting@chromium.org, Aug 28, 2009
 Issue 17024  has been merged into this issue.
Comment 5 by pkasting@chromium.org, Aug 28, 2009
According to the duped bugs, this affects both XP and Vista, and has been present 
since at least build 189 (which is probably around when I added this CHECK).

The stacks indicate that the popup is open, the controller is done, and the 
controller |result_| is empty.  I don't see how this can be true.  Note that r20395 
fixed a case in which we were mutating the results inside the callstack; stacks like 
the first one in comment 2 don't have any room for that to happen.

I have tried playing around a bit with Japanese, Korean and Chinese IMEs on my fista 
box, and with rapidly typing & hitting <esc> while moving the mouse on the go button.  
I haven't been able to repro so far.

CCing the people who know anything about omnibox code.  This one has me stumped :(
Cc: s...@chromium.org bre...@chromium.org b...@chromium.org
Comment 6 by sky@chromium.org, Aug 31, 2009
Can you get into this state if there is no default search engine?
Comment 7 by pkasting@chromium.org, Aug 31, 2009
Is that state possible?  We don't let users delete their default engine, and the 
prepopulate data ensures that we start with a nonzero number of engines.  I guess if 
a user fiddled with the bits on disk this could happen, but it seems unlikely that 
that would result in a topcrash.

To answer the question directly, I don't think so, but I'm not sure.  If there is no 
default engine there may be no results, but in that case the popup shouldn't ever 
open.

My current idea is to try to (locally) add some code which runs on a rapid timer 
(e.g. 10 ms) and just polls GetURLForCurrentText(), and then run that build and play 
around with it hoping to trip some kind of race condition.  I can't see any places in 
the code that should be races, though...
Comment 8 by pkasting@chromium.org, Sep 8, 2009
Updates:

* I tried to repro with no search engines, and failed.
* I tried to repro by adding code that called GetURLForCurrentText() every 10 ms and 
then banging on things, and failed.
* Stacks like these are still present on trunk, even after my recent cleanups (which, 
admittedly, I didn't think would help).  Because the line numbers have changed 
slightly I'll paste some from 4.206 below:


0x67fd49ca	 [chrome.dll	 - logging.cc:557]	 
logging::LogMessage::~LogMessage()
0x6815ead3	 [chrome.dll	 - autocomplete_popup_model.cc:171]	 
AutocompletePopupModel::URLsForCurrentSelection(unsigned int *,bool *,GURL *)
0x680efdee	 [chrome.dll	 - autocomplete_edit.cc:598]	 
AutocompleteEditModel::GetURLForCurrentText(unsigned int *,bool *,GURL *)
0x680ef3cd	 [chrome.dll	 - autocomplete_edit.cc:266]	 
AutocompleteEditModel::AcceptInput(WindowOpenDisposition,bool)
0x681a9760	 [chrome.dll	 - autocomplete_edit_view_win.cc:1736]	 
AutocompleteEditViewWin::OnKeyDownOnlyWritable(wchar_t,unsigned int,unsigned int)
0x681a8dac	 [chrome.dll	 - autocomplete_edit_view_win.cc:1302]	 
AutocompleteEditViewWin::OnKeyDown(wchar_t,unsigned int,unsigned int)


0x020049ca	 [chrome.dll	 - logging.cc:557]	 
logging::LogMessage::~LogMessage()
0x0218ead3	 [chrome.dll	 - autocomplete_popup_model.cc:171]	 
AutocompletePopupModel::URLsForCurrentSelection(unsigned int *,bool *,GURL *)
0x0211fdee	 [chrome.dll	 - autocomplete_edit.cc:598]	 
AutocompleteEditModel::GetURLForCurrentText(unsigned int *,bool *,GURL *)
0x0211effa	 [chrome.dll	 - autocomplete_edit.cc:156]	 
AutocompleteEditModel::CurrentTextIsURL()
0x02150a6d	 [chrome.dll	 - go_button.cc:122]	 
GoButton::GetTooltipText(int,int,std::basic_string<wchar_t,std::char_traits<wchar_t>,
std::allocator<wchar_t> > *)
0x022e9ac1	 [chrome.dll	 - tooltip_manager_win.cc:349]	 
views::TooltipManagerWin::UpdateTooltip(int,int)
0x022e9ba5	 [chrome.dll	 - tooltip_manager_win.cc:377]	 
views::TooltipManagerWin::OnMouse(unsigned int,unsigned int,long)


0x020049ca	 [chrome.dll	 - logging.cc:557]	 
logging::LogMessage::~LogMessage()
0x0218ead3	 [chrome.dll	 - autocomplete_popup_model.cc:171]	 
AutocompletePopupModel::URLsForCurrentSelection(unsigned int *,bool *,GURL *)
0x0211fdee	 [chrome.dll	 - autocomplete_edit.cc:598]	 
AutocompleteEditModel::GetURLForCurrentText(unsigned int *,bool *,GURL *)
0x0211effa	 [chrome.dll	 - autocomplete_edit.cc:156]	 
AutocompleteEditModel::CurrentTextIsURL()
0x021d9dba	 [chrome.dll	 - autocomplete_edit_view_win.cc:2013]	 
AutocompleteEditViewWin::EmphasizeURLComponents()
0x021da3da	 [chrome.dll	 - autocomplete_edit_view_win.cc:2182]	 
AutocompleteEditViewWin::TextChanged()
0x021d854f	 [chrome.dll	 - autocomplete_edit_view_win.cc:873]	 
AutocompleteEditViewWin::OnAfterPossibleChange()
0x021d96af	 [chrome.dll	 - autocomplete_edit_view_win.cc:1720]	 
AutocompleteEditViewWin::HandleKeystroke(unsigned int,wchar_t,unsigned int,unsigned 
int)
0x021d8dc6	 [chrome.dll	 - autocomplete_edit_view_win.cc:1307]	 
AutocompleteEditViewWin::OnKeyDown(wchar_t,unsigned int,unsigned int)
Comment 9 by lafo...@chromium.org, Sep 9, 2009
This has been happening since 1.0, I'd still like to see the fix for this pulled into 
3.0, but at this point I'm not going to hold up the 3.0 release.
Labels: -Mstone-3 Mstone-4
Comment 10 by j...@chromium.org, Sep 10, 2009
4.0.206.1 has been in the field for about a week.  We have a lot of crash data 
for it.  This crash is no longer being reported.  It is probable that we can close 
this.
Comment 11 by pkasting@chromium.org, Sep 10, 2009
Comment 10 lies utterly; 4.0.206.1 has these same stacks.
Comment 12 by lafo...@chromium.org, Sep 10, 2009
This crash is indeed still in trunk.
Comment 13 by j...@chromium.org, Sep 10, 2009
My apologies, for some reason a query for the entire signature returns no results, 
http://crash/search?
query=product:Chrome+version:4.0.206.1+AutocompletePopupModel::URLsForCurrent
Selection(unsigned+int+*,bool+*,GURL+*)
Comment 14 by pkasting@chromium.org, Sep 10, 2009
The top of the stack is "~LogMessage()", not "URLsForCurrentSelection()".  Perhaps 
crash/'s search function will only find that.  Or perhaps it's broken utterly.  I don't 
know, I never use it because it never works for me.
Comment 15 by kuchhal@chromium.org, Sep 16, 2009
 Issue 21817  has been merged into this issue.
Comment 16 by lafo...@chromium.org, Sep 16, 2009
This is currently 4.7% of our browser crashes in the current stable release 3.0.195.21, 
it's second only to sqlite and empty crashers.  Any more thoughts on things we could do 
to tackle this issue?
Cc: kuch...@chromium.org
Labels: -Mstone-4 Mstone-3
Comment 17 by pkasting@chromium.org, Sep 16, 2009
Why CC Rahul?

The only thing I can think of is to put the current address bar text/selection, and the 
popup size/contents, onto the stack right before crashing, so we can see them in the 
crash reports and see if we can deduce a pattern.
Comment 18 by cpu@chromium.org, Oct 6, 2009
This crash is showing in healthy numbers in 3.0.195.25

reportid=62c44b39a606da2b
reportid=46158e6a597276dc

I guesstimate that is the 6th more common crash but we are still early in the push.

Comment 19 by cpu@chromium.org, Oct 7, 2009
This is probably the top crasher, right now is at third place but the top two buckets 
are mixing several different crashes.

Comment 20 by pkasting@chromium.org, Oct 7, 2009
Telling me that doesn't fix the crash or give me any more ideas of how to track it 
down.

I'm pretty stacked with Jank work, and basically haven't thought about this much in the 
last month, after I spent days getting nowhere.
Comment 21 by bugdroid1@gmail.com, Oct 7, 2009
The following revision refers to this bug:
    http://src.chromium.org/viewvc/chrome?view=rev&revision=28348 

------------------------------------------------------------------------
r28348 | pkasting@chromium.org | 2009-10-07 16:44:12 -0700 (Wed, 07 Oct 2009) | 5 lines
Changed paths:
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_contents_view.cc?r1=28348&r2=28347

Add another sanity check, this time that the popup's "open state" (HWND) matches its result count (views).

BUG=20511
TEST=none
Review URL: http://codereview.chromium.org/271013
------------------------------------------------------------------------

Comment 22 by bugdroid1@gmail.com, Oct 7, 2009
The following revision refers to this bug:
    http://src.chromium.org/viewvc/chrome?view=rev&revision=28361 

------------------------------------------------------------------------
r28361 | pkasting@chromium.org | 2009-10-07 18:00:03 -0700 (Wed, 07 Oct 2009) | 6 lines
Changed paths:
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_contents_view.cc?r1=28361&r2=28360

Revert sanity check; this doesn't actually work since UpdatePopupAppearance() never removes child views (the popup quickly grows to its child limit and then stays there forever; we only show some of the children at a time though).

BUG=20511
TEST=none
TBR=huanr
Review URL: http://codereview.chromium.org/262018
------------------------------------------------------------------------

Comment 23 by kuchhal@chromium.org, Oct 12, 2009
 Issue 24137  has been merged into this issue.
Comment 24 by project member crash...@chromium.org, Oct 12, 2009
This crash was found in 4.0.221.6 and is currently ranked #19 (based on the relative number of reports in the release).  There have been 70 reports from 70 clients.

Report Link: http://crash/reportdetail?reportid=609952bbf1d8d54d
http://crash/search?query=Chrome+4.0.221.6+AutocompletePopupModel%3A%3AURLsForCurrentSelection%28unsigned+int+*%2Cbool+*%2CGURL+*%29
Labels: Crash-4.0.221.6
Comment 25 by scarybea...@gmail.com, Oct 19, 2009
@pkasting: I'm intrigued by your mention of Japanese in comment #5. Is there a 
positive correlation with a visit to a CJK page around the time of the crash?
Comment 26 by pkasting@chromium.org, Oct 19, 2009
How would I know?  We don't track what sites people visit, and anyway, why would 
visiting some site trigger a crash in the address bar code?
Comment 27 by lafo...@chromium.org, Oct 21, 2009
Since this is also happening on ToT, I'm going to move this to 4.0.  If we have a fix 
to back port, it will get priority for 3.0.
Labels: -Mstone-3 Mstone-4
Comment 28 by venkatar...@chromium.org, Oct 26, 2009
Build: 4.0.223.11

I got this crash on my personal laptop (XP/SP3) today morning. 
-Launched chrome (my laptop was little bit slow) before the NNTP is loaded, navigated
to a webpage.
Browser window crashed on me once. 

The full callstack can be found @
http://crash/reportdetail?reportid=68429e96948e97d9#crashing_thread
Comment 29 by pkasting@chromium.org, Oct 26, 2009
Can you say precisely what page and how you navigated?  Also what the UI did while you 
were interacting with it (e.g. showed the address bar dropdown, kept up with your 
typing, etc.)?  When did the crash occur?

Basically, I need steps that trigger this, and what the browser acts like when this 
gets triggered.
Comment 30 by pkasting@chromium.org, Oct 28, 2009
(No comment was entered for this change.)
Status: Available
Comment 31 by huanr@chromium.org, Nov 3, 2009
It seems we are just collecting crashes but not getting more useful information and 
making progress. Do we still need this CHECK in place? 14% of total browser crashes are 
due to this. If we are not gaining anything from it and have no plan to further 
proceed, can we just gracefully handle empty result?
Cc: lafo...@chromium.org
Comment 32 by pkasting@chromium.org, Nov 3, 2009
No, we do not have "no plan to further proceed", and no, we cannot remove this.
Comment 33 by venkatar...@chromium.org, Nov 3, 2009
@comment29 (sorry for late reply)

-Set NNTP as my home page.
-Launched Chrome
-Before NNTP page is loading, put cursor in Omnibox and typed cnn.com in Omnibox
(selected from Omnibox dropdown list) and hit return key.

That's it, the browser is crashed on me.

I guess the crash happened on Oct 26th @ 8.00 a.m.
Comment 34 by pkasting@chromium.org, Nov 3, 2009
"typed cnn.com in Omnibox (selected from Omnibox dropdown list)"

What does this mean?  Does this mean you started to type it and then arrowed down to an 
entry in the dropdown, or clicked one with your mouse?  Do you recall how much you 
typed, whether it inline autocompleted, or how many entries were in the dropdown?
Comment 35 by venkatar...@chromium.org, Nov 3, 2009
Does this mean you started to type it and then arrowed down to an 
entry in the dropdown, - Yes.

I typed c in the omnibox and selected cnn.com from the nav-suggested drop-down list
and hit return key.

I guess it is not inline autocompleted. 


Comment 36 by pkasting@chromium.org, Nov 3, 2009
Thanks.  "cnn.com" isn't a navsuggest result for 'c' in my testing, but it could have 
been in your list due to a previous visit.

Are you able to reproduce by trying your steps again?
Comment 37 by venkatar...@chromium.org, Nov 3, 2009
Are you able to reproduce by trying your steps again? NO
As I said @comment28, it happened once. Could not be able to reproduce it again. In
case, if I'm luck one more time to reproduce it, I will update the thread.



Comment 38 by lafo...@chromium.org, Nov 3, 2009
(No comment was entered for this change.)
Labels: Mstone-5
Comment 39 by pkasting@chromium.org, Nov 3, 2009
Checked the uptime figures on some of the stacks.  The numbers were all over, many very 
long, so this isn't happening due to some startup-specific condition.
Comment 41 by bugdroid1@gmail.com, Nov 5, 2009
The following revision refers to this bug:
    http://src.chromium.org/viewvc/chrome?view=rev&revision=31119 

------------------------------------------------------------------------
r31119 | pkasting@chromium.org | 2009-11-05 11:40:26 -0800 (Thu, 05 Nov 2009) | 7 lines
Changed paths:
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_gtk.cc?r1=31119&r2=31118
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_gtk.h?r1=31119&r2=31118
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_win.cc?r1=31119&r2=31118

Fix checkfailure on Linux Views build by actually opening the popup when it's initted.

Also add sanity checking like in the Windows version.

BUG=20511
TEST=none
Review URL: http://codereview.chromium.org/361020
------------------------------------------------------------------------

Comment 42 by huanr@chromium.org, Nov 5, 2009
(No comment was entered for this change.)
Cc: hu...@chromium.org
Comment 43 by project member crash...@chromium.org, Nov 6, 2009
This crash was found in 4.0.223.16 and is currently ranked #8 (based on the relative number of reports in the release).  There have been 82 reports from 78 clients.

Report Link: http://crash/reportdetail?reportid=617604f5317f6763&newsig=
http://crash/search?query=Chrome+4.0.223.16+AutocompletePopupModel%3A%3AURLsForCurrentSelection%28unsigned+int+*%2Cbool+*%2CGURL+*%29
Labels: Crash-4.0.223.16
Comment 44 by project member crash...@chromium.org, Nov 7, 2009
This crash was not found in 4.0.237.0. We last saw it in 4.0.223.16.  Assuming the crash has been fixed, please mark accordingly.
Comment 45 by kuchhal@chromium.org, Nov 9, 2009
 Issue 27069  has been merged into this issue.
Comment 46 by kuchhal@chromium.org, Nov 9, 2009
Now the crash happens on this CHECK:

autocomplete_popup_win.cc:63 CHECK(is_open == is_open_);

0x64ead8d7	 [chrome.dll	 - logging.cc:561]	 logging::LogMessage::~LogMessage()
0x650a43f4	 [chrome.dll	 - autocomplete_popup_win.cc:63]	 AutocompletePopupWin::IsOpen()
0x6509ff36	 [chrome.dll	 - autocomplete_popup_contents_view.cc:623]	 AutocompletePopupContentsView::IsOpen()
0x650a037e	 [chrome.dll	 - autocomplete_popup_contents_view.cc:746]	 AutocompletePopupContentsView::AnimationProgressed(Animation const *)
0x65520709	 [chrome.dll	 - animation.cc:107]	 Animation::Step()
0x64f09a92	 [chrome.dll	 - timer.h:159]	 base::BaseTimer<BookmarkDropInfo,1>::TimerTask::Run()
Comment 47 by pkasting@chromium.org, Nov 9, 2009
Excellent!  That narrows the issue down considerably.
Comment 48 by kuchhal@chromium.org, Nov 10, 2009
adding label for Henry's report.
Labels: Crash-TopCrasher
Comment 49 by pkasting@chromium.org, Nov 10, 2009
I have a repro for this.

Type a character in the address bar, hit the minimize button, click the taskbar entry 
to restore the window, hover the Go button.

The problem is that Windows hides the popup window (for minimizing) directly, then 
the edit tries to close it (which is implemented as a second hide).  Then on restore 
Windows shows the window, and the state becomes inconsistent.

There are a number of ways to attack this.  Probably the simplest is to truly close 
the window instead of just hiding it, which will prevent Windows from restoring it.  
I'm not sure why we aren't doing that currently.
Status: Started
Cc: -s...@chromium.org -bre...@chromium.org -kuch...@chromium.org -lafo...@chromium.org -hu...@chromium.org
Labels: -Mstone-5 Mstone-4 ReleaseBlock-Beta
Comment 50 by pkasting@chromium.org, Nov 10, 2009
Fixed in r31649.
Status: Fixed
Comment 51 by bugdroid1@gmail.com, Nov 10, 2009
The following revision refers to this bug:
    http://src.chromium.org/viewvc/chrome?view=rev&revision=31649 

------------------------------------------------------------------------
r31649 | pkasting@chromium.org | 2009-11-10 21:42:41 -0800 (Tue, 10 Nov 2009) | 7 lines
Changed paths:
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/autocomplete/autocomplete_popup_model.cc?r1=31649&r2=31648
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_contents_view.cc?r1=31649&r2=31648
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_contents_view.h?r1=31649&r2=31648
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_gtk.cc?r1=31649&r2=31648
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_gtk.h?r1=31649&r2=31648
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_win.cc?r1=31649&r2=31648
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_win.h?r1=31649&r2=31648

Avoid inconsistent state (leading to checkfailures) due to Windows minimize/restore functionality hiding and showing the autocomplete dropdown outside of the awareness of the controller.

Instead, this switches to the simpler model of just creating a new HWND when we want to show the dropdown, and destroying it when we want to close it.  Happily, this also seems to save quite a bit of code.

BUG=20511
TEST=Type a character in the omnibox, minimize the window, and restore it.  The dropdown should have disappeared.
Review URL: http://codereview.chromium.org/391011
------------------------------------------------------------------------

Comment 52 by scarybea...@gmail.com, Nov 10, 2009
Woohoo! Go pkasting@ !!!
Comment 53 by bugdroid1@gmail.com, Nov 11, 2009
The following revision refers to this bug:
    http://src.chromium.org/viewvc/chrome?view=rev&revision=31694 

------------------------------------------------------------------------
r31694 | pkasting@chromium.org | 2009-11-11 12:07:39 -0800 (Wed, 11 Nov 2009) | 5 lines
Changed paths:
   M http://src.chromium.org/viewvc/chrome/branches/195/src/chrome/browser/views/autocomplete/autocomplete_popup_contents_view.cc?r1=31694&r2=31693
   M http://src.chromium.org/viewvc/chrome/branches/195/src/chrome/browser/views/autocomplete/autocomplete_popup_contents_view.h?r1=31694&r2=31693
   M http://src.chromium.org/viewvc/chrome/branches/195/src/chrome/browser/views/autocomplete/autocomplete_popup_win.cc?r1=31694&r2=31693
   M http://src.chromium.org/viewvc/chrome/branches/195/src/chrome/browser/views/autocomplete/autocomplete_popup_win.h?r1=31694&r2=31693

Merge crash fix to 3.0.

BUG=20511
TEST=Type a character in the omnibox, minimize the window, and restore it.  The dropdown should have disappeared.
Review URL: http://codereview.chromium.org/385041
------------------------------------------------------------------------

Comment 54 by kuchhal@chromium.org, Nov 13, 2009
 Issue 27209  has been merged into this issue.
Comment 55 by hbri...@google.com, Nov 17, 2009
(No comment was entered for this change.)
Labels: -Crash-TopCrasher Crash-TopFixed
Comment 56 by bugdroid1@gmail.com, Nov 19, 2009
The following revision refers to this bug:
    http://src.chromium.org/viewvc/chrome?view=rev&revision=31649 

------------------------------------------------------------------------
r31649 | pkasting@chromium.org | 2009-11-10 21:42:41 -0800 (Tue, 10 Nov 2009) | 7 lines
Changed paths:
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/autocomplete/autocomplete_popup_model.cc?r1=31649&r2=31648
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_contents_view.cc?r1=31649&r2=31648
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_contents_view.h?r1=31649&r2=31648
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_gtk.cc?r1=31649&r2=31648
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_gtk.h?r1=31649&r2=31648
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_win.cc?r1=31649&r2=31648
   M http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/views/autocomplete/autocomplete_popup_win.h?r1=31649&r2=31648

Avoid inconsistent state (leading to checkfailures) due to Windows minimize/restore functionality hiding and showing the autocomplete dropdown outside of the awareness of the controller.

Instead, this switches to the simpler model of just creating a new HWND when we want to show the dropdown, and destroying it when we want to close it.  Happily, this also seems to save quite a bit of code.

BUG=20511
TEST=Type a character in the omnibox, minimize the window, and restore it.  The dropdown should have disappeared.
Review URL: http://codereview.chromium.org/391011
------------------------------------------------------------------------

Comment 57 by bugdroid1@gmail.com, Nov 19, 2009
The following revision refers to this bug:
    http://src.chromium.org/viewvc/chrome?view=rev&revision=31694 

------------------------------------------------------------------------
r31694 | pkasting@chromium.org | 2009-11-11 12:07:39 -0800 (Wed, 11 Nov 2009) | 5 lines
Changed paths:
   M http://src.chromium.org/viewvc/chrome/branches/195/src/chrome/browser/views/autocomplete/autocomplete_popup_contents_view.cc?r1=31694&r2=31693
   M http://src.chromium.org/viewvc/chrome/branches/195/src/chrome/browser/views/autocomplete/autocomplete_popup_contents_view.h?r1=31694&r2=31693
   M http://src.chromium.org/viewvc/chrome/branches/195/src/chrome/browser/views/autocomplete/autocomplete_popup_win.cc?r1=31694&r2=31693
   M http://src.chromium.org/viewvc/chrome/branches/195/src/chrome/browser/views/autocomplete/autocomplete_popup_win.h?r1=31694&r2=31693

Merge crash fix to 3.0.

BUG=20511
TEST=Type a character in the omnibox, minimize the window, and restore it.  The dropdown should have disappeared.
Review URL: http://codereview.chromium.org/385041
------------------------------------------------------------------------

Comment 58 by venkatar...@chromium.org, Dec 10, 2009
@comment7&8:
Yes, It is possoble to have a empty search engines list. Pls refer to
 Issue 2714 :  Don't allow the user to have empty search engine list  
Comment 59 by venkatar...@chromium.org, Dec 10, 2009
Just reproduced the empty search engines list with 3.0.195.38 and screenshot 
attached.
2714.PNG
24.1 KB   View   Download
Comment 60 by venkatar...@chromium.org, Dec 11, 2009
Build: 3.0.195.38 (Official Build 34131)
Status: Verified
Sign in to add a comment

Powered by Google Project Hosting