Comment #7 on issue 5046 by bre...@chromium.org: Chrome: Crash Report - Stack Signature: ObserverList<TabStripModelObserver,0>::Iterator::Iterator(ObserverList<TabStripModelObserver,0> const &)-A8D563 http://code.google.com/p/chromium/issues/detail?id=5046
The crash is because in NotificationService::Notify: observers_[type][AllSources().map_key()] is NULL. This is then dereferenced by the iterator created by the FOR_EACH_OBSERVER macro. I have stared at this for a while and have made no progress. The above code always checks that the key exists before doing this, so we know we have an existing but NULL key. It doesn't look like the code to add or remove observers will ever generate a NULL key. Even more perplexing, is that WebContents::DomOperationResponse will only get called by the DOMAutomationController, which will only ever be hooked up when the --dom- automation command line flag is passed (this is used for UI tests). So normal users shouldn't even be running this codepath. However, the crash dumps look like normal users judging from the paths of chrome.exe (in Documents and Settings for different usernames and locales). -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings --~--~---------~--~----~------------~-------~--~----~ Automated mail from issue updates at http://crbug.com/ Subscription options: http://groups.google.com/group/chromium-bugs -~----------~----~----~----~------~----~------~--~---