SIGSEGV in oxide::InputMethodContext::SetImeBridge when running unit tests

Bug #1556323 reported by Chris Coulson
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Oxide
Fix Released
Critical
Chris Coulson
1.14
Fix Released
Critical
Chris Coulson

Bug Description

I'm seeing this crash sometimes when running tests:

#0 0x0000000000000000 in ?? ()
#1 0x00007ffff3360042 in oxide::InputMethodContext::SetImeBridge (this=0xfb2400, bridge=<optimised out>) at ../../../../shared/browser/input/oxide_input_method_context.cc:33
#2 0x00007ffff335fcfe in oxide::ImeBridgeImpl::SetContext (context=0x0, this=0x106fae0) at ../../../../shared/browser/input/oxide_ime_bridge_impl.cc:103
#3 oxide::ImeBridgeImpl::~ImeBridgeImpl (this=0x106fae0, __in_chrg=<optimised out>) at ../../../../shared/browser/input/oxide_ime_bridge_impl.cc:97
#4 0x00007ffff3379589 in oxide::RenderWidgetHostView::~RenderWidgetHostView (this=0x106f910, __in_chrg=<optimised out>) at ../../../../shared/browser/oxide_render_widget_host_view.cc:829
#5 0x00007ffff33798c8 in oxide::RenderWidgetHostView::~RenderWidgetHostView (this=0x106f910, __in_chrg=<optimised out>) at ../../../../shared/browser/oxide_render_widget_host_view.cc:833
#6 oxide::RenderWidgetHostView::Destroy (this=0x106f910) at ../../../../shared/browser/oxide_render_widget_host_view.cc:430
#7 0x00007ffff367219b in content::RenderWidgetHostImpl::Destroy (this=0xf5ab00, also_delete=<optimised out>) at ../../../../third_party/chromium/src/content/browser/renderer_host/render_widget_host_impl.cc:1454
#8 0x00007ffff3672702 in content::RenderWidgetHostImpl::ShutdownAndDestroyWidget (this=<optimised out>, also_delete=also_delete@entry=false)
    at ../../../../third_party/chromium/src/content/browser/renderer_host/render_widget_host_impl.cc:433
#9 0x00007ffff3668b4f in content::RenderViewHostImpl::ShutdownAndDestroy (this=0xd24920) at ../../../../third_party/chromium/src/content/browser/renderer_host/render_view_host_impl.cc:941
#10 0x00007ffff3523d4d in content::FrameTree::ReleaseRenderViewHostRef (this=0xe7c198, render_view_host=<optimised out>) at ../../../../third_party/chromium/src/content/browser/frame_host/frame_tree.cc:398
#11 0x00007ffff353f2d4 in content::RenderFrameHostImpl::~RenderFrameHostImpl (this=0x10510d0, __in_chrg=<optimised out>)
    at ../../../../third_party/chromium/src/content/browser/frame_host/render_frame_host_impl.cc:301
#12 0x00007ffff353f729 in content::RenderFrameHostImpl::~RenderFrameHostImpl (this=0x10510d0, __in_chrg=<optimised out>)
    at ../../../../third_party/chromium/src/content/browser/frame_host/render_frame_host_impl.cc:302
#13 0x00007ffff35455db in std::default_delete<content::RenderFrameHostImpl>::operator() (this=0x7fffffff5530, __ptr=<optimised out>) at /usr/include/c++/5/bits/unique_ptr.h:76
#14 base::internal::scoped_ptr_impl<content::RenderFrameHostImpl, std::default_delete<content::RenderFrameHostImpl> >::reset (p=0x0, this=0x7fffffff5530)
    at ../../../../third_party/chromium/src/base/memory/scoped_ptr.h:186
#15 base::internal::scoped_ptr_impl<content::RenderFrameHostImpl, std::default_delete<content::RenderFrameHostImpl> >::~scoped_ptr_impl (this=0x7fffffff5530, __in_chrg=<optimised out>)
    at ../../../../third_party/chromium/src/base/memory/scoped_ptr.h:175
#16 scoped_ptr<content::RenderFrameHostImpl, std::default_delete<content::RenderFrameHostImpl> >::~scoped_ptr (this=0x7fffffff5530, __in_chrg=<optimised out>)
    at ../../../../third_party/chromium/src/base/memory/scoped_ptr.h:249
#17 content::RenderFrameHostManager::~RenderFrameHostManager (this=0x10c3da0, __in_chrg=<optimised out>) at ../../../../third_party/chromium/src/content/browser/frame_host/render_frame_host_manager.cc:84
#18 0x00007ffff35251be in content::FrameTreeNode::~FrameTreeNode (this=0x10c3d90, __in_chrg=<optimised out>) at ../../../../third_party/chromium/src/content/browser/frame_host/frame_tree_node.cc:110
#19 0x00007ffff3522bdd in content::FrameTree::~FrameTree (this=0xe7c198, __in_chrg=<optimised out>) at ../../../../third_party/chromium/src/content/browser/frame_host/frame_tree.cc:148
#20 0x00007ffff3712eb7 in content::WebContentsImpl::~WebContentsImpl (this=0xe7bf50, __in_chrg=<optimised out>) at ../../../../third_party/chromium/src/content/browser/web_contents/web_contents_impl.cc:377
#21 0x00007ffff3713339 in content::WebContentsImpl::~WebContentsImpl (this=0xe7bf50, __in_chrg=<optimised out>) at ../../../../third_party/chromium/src/content/browser/web_contents/web_contents_impl.cc:464
#22 0x00007ffff337ffbe in ScopedVector<content::WebContents>::erase (position=, this=0x567ec8) at ../../../../third_party/chromium/src/base/memory/scoped_vector.h:124
#23 oxide::WebContentsUnloader::CloseContents (this=0x567e90, contents=<optimised out>) at ../../../../shared/browser/oxide_web_contents_unloader.cc:57
#24 0x00007ffff3668473 in base::DispatchToMethodImpl<content::RenderViewHostImpl*, void (content::RenderViewHostImpl::*)()>(content::RenderViewHostImpl* const&, void (content::RenderViewHostImpl::*)(), std::tuple<> const&, base::IndexSequence<>) (arg=empty std::tuple, method=<optimised out>, obj=<synthetic pointer>) at ../../../../third_party/chromium/src/base/tuple.h:203
#25 base::DispatchToMethod<content::RenderViewHostImpl*, void (content::RenderViewHostImpl::*)()>(content::RenderViewHostImpl* const&, void (content::RenderViewHostImpl::*)(), std::tuple<> const&) (
    arg=empty std::tuple, method=<optimised out>, obj=<synthetic pointer>) at ../../../../third_party/chromium/src/base/tuple.h:210
#26 IPC::DispatchToMethod<content::RenderViewHostImpl, void (content::RenderViewHostImpl::*)(), void, std::tuple<> >(content::RenderViewHostImpl*, void (content::RenderViewHostImpl::*)(), void*, std::tuple<> const&) (tuple=empty std::tuple, method=(void (content::RenderViewHostImpl::*)(content::RenderViewHostImpl * const)) 0x7ffff36678b0 <content::RenderViewHostImpl::OnClosePageACK()>, obj=0xd24920)
    at ../../../../third_party/chromium/src/ipc/ipc_message_templates.h:24
#27 IPC::MessageT<ViewHostMsg_ClosePage_ACK_Meta, std::tuple<>, void>::Dispatch<content::RenderViewHostImpl, content::RenderViewHostImpl, void, void (content::RenderViewHostImpl::*)()>(IPC::Message const*, content::RenderViewHostImpl*, content::RenderViewHostImpl*, void*, void (content::RenderViewHostImpl::*)()) (func=<optimised out>, parameter=0x0, sender=0xd24920, obj=0xd24920, msg=0x7fff8c17aba0)
    at ../../../../third_party/chromium/src/ipc/ipc_message_templates.h:118
#28 content::RenderViewHostImpl::OnMessageReceived (this=0xd24920, msg=...) at ../../../../third_party/chromium/src/content/browser/renderer_host/render_view_host_impl.cc:916
#29 0x00007ffff3673332 in content::RenderWidgetHostImpl::OnMessageReceived (this=0xf5ab00, msg=...) at ../../../../third_party/chromium/src/content/browser/renderer_host/render_widget_host_impl.cc:445
#30 0x00007ffff36617c0 in content::RenderProcessHostImpl::OnMessageReceived (this=0xecbdb0, msg=...) at ../../../../third_party/chromium/src/content/browser/renderer_host/render_process_host_impl.cc:1787
#31 0x00007ffff4149400 in IPC::ChannelProxy::Context::OnDispatchMessage (this=0xff1e90, message=...) at ../../../../third_party/chromium/src/ipc/ipc_channel_proxy.cc:293
#32 0x00007ffff33b072d in base::Callback<void ()>::Run() const (this=0x7fffffff5df8) at ../../../../third_party/chromium/src/base/callback.h:394
#33 base::debug::TaskAnnotator::RunTask (this=this@entry=0x9af4e8, queue_function=queue_function@entry=0x7ffff69a7db0 "MessageLoop::PostTask", pending_task=...)
    at ../../../../third_party/chromium/src/base/debug/task_annotator.cc:51
#34 0x00007ffff33ccaa9 in base::MessageLoop::RunTask (this=this@entry=0x9af370, pending_task=...) at ../../../../third_party/chromium/src/base/message_loop/message_loop.cc:476
#35 0x00007ffff33cd0cd in base::MessageLoop::DeferOrRunPendingTask (this=this@entry=0x9af370, pending_task=...) at ../../../../third_party/chromium/src/base/message_loop/message_loop.cc:485
#36 0x00007ffff33cd398 in base::MessageLoop::DoWork (this=0x9af370) at ../../../../third_party/chromium/src/base/message_loop/message_loop.cc:597
#37 0x00007ffff333f33b in oxide::qt::MessagePump::RunOneTask (this=0x9af950) at ../../../../qt/core/browser/oxide_qt_message_pump.cc:108
#38 0x00007ffff2122e23 in QObject::event(QEvent*) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#39 0x00007ffff20f3489 in QCoreApplication::notify(QObject*, QEvent*) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#40 0x00007ffff20f35bb in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#41 0x00007ffff20f59b6 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#42 0x00007ffff2149643 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#43 0x00007fffef536127 in g_main_context_dispatch () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#44 0x00007fffef536380 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#45 0x00007fffef53642c in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#46 0x00007ffff2149a4f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5

Changed in oxide:
importance: Undecided → Critical
assignee: nobody → Chris Coulson (chrisccoulson)
status: New → Triaged
milestone: none → branch-1.15
Changed in oxide:
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.