My favorites | Sign in
Project Home Downloads Wiki Issues
New issue   Search
for
  Advanced search   Search tips
Issue 96727: Chrome: Crash Report - Stack Signature: webkit::ppapi::PPB_URLLoader_Impl::didReceiveData(WebKit::WebURLLoader *,char const *,int,int)-b2ccd3dc_d0458bae_0c574d03_c4f111e6_7ed986d5
1 person starred this issue and may be notified of changes. Back to list
 
Reported by project member dhar...@google.com, Sep 15, 2011
Here is ddorwin's comment about this bug:

That crash report is a NULL pointer access at ppb_url_loader_impl.cc:326.
According to http://src.chromium.org/viewvc/chrome/branches/874/src/webkit/plugins/ppapi/ppb_url_loader_impl.cc?annotate=99931, this line is:
  loader->setDefersLoading(true);
I'm guessing that loader, a parameter to PPB_URLLoader_Impl::didReceiveData(), is NULL.


Product: Chrome
Stack Signature: webkit::ppapi::PPB_URLLoader_Impl::didReceiveData(WebKit::WebURLLoader *,char const *,int,int)-20DE4B4
New Signature Label: webkit::ppapi::PPB_URLLoader_Impl::didReceiveData(WebKit::WebURLLoader *,char const *,int,int)
New Signature Hash: b2ccd3dc_d0458bae_0c574d03_c4f111e6_7ed986d5

Report link: http://go/crash/reportdetail?reportid=0cefccca9dd09d38

Meta information:
Product Name: Chrome
Product Version: 15.0.874.5
Report ID: 0cefccca9dd09d38
Report Time: 2011/09/10 16:41:58, Sat
Uptime: 3 sec
Cumulative Uptime: 0 sec
OS Name: Windows NT
OS Version: 6.1.7601 Service Pack 1
CPU Architecture: x86
CPU Info: AuthenticAMD family 15 model 104 stepping 2



Thread 0 *CRASHED* ( EXCEPTION_ACCESS_VIOLATION_READ @ 0x00000000 )

0x5cdeb613	 [chrome.dll	 - ppb_url_loader_impl.cc:326	webkit::ppapi::PPB_URLLoader_Impl::didReceiveData(WebKit::WebURLLoader *,char const *,int,int)
0x5cdcef5e	 [chrome.dll	 - ppapi_webplugin_impl.cc:166	webkit::ppapi::WebPluginImpl::didReceiveData(char const *,int)
0x5c880518	 [chrome.dll	 - frameloaderclientimpl.cpp:1133	WebKit::FrameLoaderClientImpl::committedLoad(WebCore::DocumentLoader *,char const *,int)
0x5d1af011	 [chrome.dll	 - documentloader.cpp:308	WebCore::DocumentLoader::commitLoad(char const *,int)
0x5d204a1a	 [chrome.dll	 - mainresourceloader.cpp:168	WebCore::MainResourceLoader::addData(char const *,int,bool)
0x5d6a0b86	 [chrome.dll	 - resourceloader.cpp:302	WebCore::ResourceLoader::didReceiveData(char const *,int,__int64,bool)
0x5d205262	 [chrome.dll	 - mainresourceloader.cpp:464	WebCore::MainResourceLoader::didReceiveData(char const *,int,__int64,bool)
0x5d6a0f08	 [chrome.dll	 - resourceloader.cpp:460	WebCore::ResourceLoader::didReceiveData(WebCore::ResourceHandle *,char const *,int,int)
0x5c8877b8	 [chrome.dll	 - resourcehandle.cpp:140	WebCore::ResourceHandleInternal::didReceiveData(WebKit::WebURLLoader *,char const *,int,int)
0x5cdca4d1	 [chrome.dll	 - weburlloader_impl.cc:584	webkit_glue::WebURLLoaderImpl::Context::OnReceivedData(char const *,int,int)
0x5c8ba24a	 [chrome.dll	 - resource_dispatcher.cc:375	ResourceDispatcher::OnReceivedData(IPC::Message const &,int,void *,int,int)
0x5c8ba7ec	 [chrome.dll	 - resource_dispatcher.cc:523	ResourceDispatcher::DispatchMessageW(IPC::Message const &)
0x5c8ba05d	 [chrome.dll	 - resource_dispatcher.cc:302	ResourceDispatcher::OnMessageReceived(IPC::Message const &)
0x5c8b1f9b	 [chrome.dll	 - child_thread.cc:149	ChildThread::OnMessageReceived(IPC::Message const &)
0x5caab230	 [chrome.dll	 - task.h:349	RunnableMethod<content::P2PSocketClient,void ( content::P2PSocketClient::*)(net::IPEndPoint const &),Tuple1<net::IPEndPoint> >::Run()
0x5c9d96d9	 [chrome.dll	 - task.cc:56	base::subtle::TaskClosureAdapter::Run()
0x5c9cad7f	 [chrome.dll	 - message_loop.cc:476	MessageLoop::RunTask(MessageLoop::PendingTask const &)
0x5c9cadeb	 [chrome.dll	 - message_loop.cc:492	MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const &)
0x5c9cb166	 [chrome.dll	 - message_loop.cc:682	MessageLoop::DoWork()
0x5c9e7049	 [chrome.dll	 - message_pump_default.cc:50	base::MessagePumpDefault::Run(base::MessagePump::Delegate *)
0x5c9cacd2	 [chrome.dll	 - message_loop.cc:443	MessageLoop::RunInternal()
0x5c9cac57	 [chrome.dll	 - message_loop.cc:416	MessageLoop::RunHandler()
0x5c9cabe9	 [chrome.dll	 - message_loop.cc:340	MessageLoop::Run()
0x5c7d5a5d	 [chrome.dll	 - renderer_main.cc:228	RendererMain(MainFunctionParams const &)
0x5c9eedee	 [chrome.dll	 - content_main.cc:292	`anonymous namespace'::RunNamedProcessTypeMain(std::basic_string<char,std::char_traits<char>,std::allocator<char> > const &,MainFunctionParams const &,content::ContentMainDelegate *)
0x5c9ef183	 [chrome.dll	 - content_main.cc:482	content::ContentMain(HINSTANCE__ *,sandbox::SandboxInterfaceInfo *,content::ContentMainDelegate *)
0x5c7d1a4e	 [chrome.dll	 - chrome_main.cc:760	ChromeMain
0x00231dc3	 [chrome.exe	 - client_util.cc:360	MainDllLoader::Launch(HINSTANCE__ *,sandbox::SandboxInterfaceInfo *)
0x002310c8	 [chrome.exe	 - chrome_exe_main_win.cc:36	wWinMain
0x002896af	 [chrome.exe	 - crt0.c:263	__tmainCRTStartup
0x75f7ed6b	 [kernel32.dll	 + 0x0004ed6b]	BaseThreadInitThunk
0x77b337f4	 [ntdll.dll	 + 0x000637f4]	__RtlUserThreadStart
0x77b337c7	 [ntdll.dll	 + 0x000637c7]	_RtlUserThreadStart
Comment 1 by ddor...@chromium.org, Sep 15, 2011
Copying some fields from the original report in  issue 81685 . The original report was:
  This is now happening in 15.0.874.5. There are 18 crashes reported so far. 
Status: Untriaged
Owner: ---
Cc: brettw@chromium.org
Labels: Feature-Plugins-Pepper ReleaseBlock-Beta
Comment 2 by dhar...@google.com, Sep 15, 2011
Now we have 23 crashes in 15.0.874.5 and 12 crashes in 15.0.874.12.
Comment 3 by brettw@chromium.org, Sep 15, 2011
(No comment was entered for this change.)
Status: Started
Owner: brettw@chromium.org
Cc: -brettw@chromium.org
Comment 4 by brettw@chromium.org, Sep 15, 2011
(No comment was entered for this change.)
Labels: Stability-CodeYellow
Comment 5 by bugdro...@chromium.org, Sep 16, 2011
The following revision refers to this bug:
    http://src.chromium.org/viewvc/chrome?view=rev&revision=101524

------------------------------------------------------------------------
r101524 | brettw@google.com | Fri Sep 16 11:11:55 PDT 2011

Changed paths:
 M http://src.chromium.org/viewvc/chrome/trunk/src/webkit/plugins/ppapi/ppb_url_loader_impl.cc?r1=101524&r2=101523&pathrev=101524
 M http://src.chromium.org/viewvc/chrome/trunk/src/webkit/plugins/ppapi/ppb_url_loader_impl.h?r1=101524&r2=101523&pathrev=101524

Don't try to call setDefersLoading when the loader is null. This does a bit of cleanup so the checks for the null-ness of this variable is centralized, and I filed a bug for not having this implemented for main document loads.

TEST=manual
BUG=96727
Review URL: http://codereview.chromium.org/7920001
------------------------------------------------------------------------
Comment 6 by zelid...@chromium.org, Sep 19, 2011
(No comment was entered for this change.)
Blocking: chromium-os:20574
Comment 7 by brettw@chromium.org, Sep 19, 2011
(No comment was entered for this change.)
Labels: Merge-Requested
Comment 8 by kar...@google.com, Sep 19, 2011
(No comment was entered for this change.)
Labels: ReleaseBlock-Stable
Comment 9 by kar...@google.com, Sep 19, 2011
(No comment was entered for this change.)
Labels: -ReleaseBlock-Beta
Comment 10 by kar...@google.com, Sep 22, 2011
(No comment was entered for this change.)
Labels: -Merge-Requested Merge-Approved
Comment 11 by bugdro...@chromium.org, Sep 22, 2011
The following revision refers to this bug:
    http://src.chromium.org/viewvc/chrome?view=rev&revision=102279

------------------------------------------------------------------------
r102279 | brettw@chromium.org | Thu Sep 22 08:55:03 PDT 2011

Changed paths:
 M http://src.chromium.org/viewvc/chrome/branches/874/src/webkit/plugins/ppapi/ppb_url_loader_impl.cc?r1=102279&r2=102278&pathrev=102279
 M http://src.chromium.org/viewvc/chrome/branches/874/src/webkit/plugins/ppapi/ppb_url_loader_impl.h?r1=102279&r2=102278&pathrev=102279

Merge 101524 - Don't try to call setDefersLoading when the loader is null. This does a bit of cleanup so the checks for the null-ness of this variable is centralized, and I filed a bug for not having this implemented for main document loads.

TEST=manual
BUG=96727
Review URL: http://codereview.chromium.org/7920001

TBR=brettw@google.com
Review URL: http://codereview.chromium.org/7988005
------------------------------------------------------------------------
Labels: -merge-approved merge-merged-874
Comment 12 by brettw@chromium.org, Sep 23, 2011
Should be all merged now.
Status: Fixed
Sign in to add a comment

Powered by Google Project Hosting