Status: Assigned
Owner: m...@chromium.org
Labels: Type-Bug Pri-1 OS-All Area-BrowserUI Regression

New issue 8477 by s...@chromium.org: Crash in BrowserView
http://code.google.com/p/chromium/issues/detail?id=8477

http://crash/reportdetail?
reportid=dfc802909b6c00f6&product=Chrome&version=2.0.167.0&date=&signature=BrowserVie
w::CanCurrentlyResize()-155F97F

0x015c5a88       [chrome.dll     - browser_view.cc:266] 
BrowserView::CanCurrentlyResize()
0x015c562e       [chrome.dll     - browser_view.cc:163] 
ResizeCorner::GetPreferredSize()
0x015c5669       [chrome.dll     - browser_view.cc:169]  ResizeCorner::Layout()
0x016ff034       [chrome.dll     - view.cc:219]  views::View::Layout()
0x015d022c       [chrome.dll     - download_shelf_view.cc:210]  
DownloadShelfView::Layout()
0x015c7b7a       [chrome.dll     - browser_view.cc:1423]        
BrowserView::LayoutDownloadShelf()
0x015c74ab       [chrome.dll     - browser_view.cc:1199]        
BrowserView::Layout()
0x015c7d5c       [chrome.dll     - browser_view.cc:1478]        
BrowserView::UpdateUIForContents(TabContents *)
0x015c6f6e       [chrome.dll     - browser_view.cc:947] 
BrowserView::TabSelectedAt(TabContents *,TabContents *,int,bool)
0x012ea93b       [chrome.dll     - tab_strip_model.cc:584]      
TabStripModel::ChangeSelectedContentsFrom(TabContents *,int,bool)
0x012e9c1f       [chrome.dll     - tab_strip_model.cc:143]      
TabStripModel::DetachTabContentsAt(int)
0x012ea7aa       [chrome.dll     - tab_strip_model.cc:527]      
TabStripModel::Observe(NotificationType,NotificationSource const
&,NotificationDetails const &)
0x011ec538       [chrome.dll     - notification_service.cc:107] 
NotificationService::Notify(NotificationType,NotificationSource const
&,NotificationDetails const &)
0x012a09aa       [chrome.dll     - tab_contents.cc:114]  TabContents::Destroy()
0x0129ad4c       [chrome.dll     - web_contents.cc:343]  WebContents::Destroy()
0x012c7a74       [chrome.dll     - navigation_controller.cc:440]        
NavigationController::Destroy()
0x012ea82d       [chrome.dll     - tab_strip_model.cc:560]      
TabStripModel::InternalCloseTabContentsAt(int,bool)
0x012a5814       [chrome.dll     - browser.cc:1723]     
Browser::CloseContents(TabContents *)
0x0129bab3       [chrome.dll     - web_contents.cc:831] 
WebContents::Close(RenderViewHost *)
0x0129ce5e       [chrome.dll     - web_contents.cc:1366]        
WebContents::RendererUnresponsive(RenderViewHost *,bool)
0x012d77f1       [chrome.dll     - render_view_host.cc:1304]    
RenderViewHost::NotifyRendererUnresponsive()
0x012f200a       [chrome.dll     - render_widget_host.cc:385]   
RenderWidgetHost::CheckRendererIsUnresponsive()
0x01549cd8       [chrome.dll     - message_loop.cc:308]  
MessageLoop::RunTask(Task  
*)
0x01549d0f       [chrome.dll     - message_loop.cc:316] 
MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const &)
0x01549f63       [chrome.dll     - message_loop.cc:435] 
MessageLoop::DoDelayedWork(base::Time *)
0x01563c1d       [chrome.dll     - message_pump_win.cc:213]     
base::MessagePumpForUI::DoRunLoop()
0x01563a30       [chrome.dll     - message_pump_win.cc:52]      
base::MessagePumpWin::RunWithDispatcher(base::MessagePump::Delegate
*,base::MessagePumpWin::Dispatcher *)
0x01549b99       [chrome.dll     - message_loop.cc:192]  
MessageLoop::RunInternal()
0x01549b73       [chrome.dll     - message_loop.cc:180]  
MessageLoop::RunHandler()
0x0154a0d9       [chrome.dll     - message_loop.cc:558] 
MessageLoopForUI::Run(base::MessagePumpWin::Dispatcher *)
0x0126aac1       [chrome.dll     - browser_main.cc:183]  `anonymous
namespace'::RunUIMessageLoop(BrowserProcess *)
0x0126b9db       [chrome.dll     - browser_main.cc:562] 
BrowserMain(MainFunctionParams const &)
0x011c340f       [chrome.dll     - chrome_dll_main.cc:332]       ChromeMain
0x00402a70       [chrome.exe     - google_update_client.cc:93]  
google_update::GoogleUpdateClient::Launch(HINSTANCE__  
*,sandbox::SandboxInterfaceInfo
*,wchar_t *,char const *,int *)
0x004024ce       [chrome.exe     - chrome_exe_main.cc:67]        wWinMain

Here's how to repro:

. Create a window with two tabs.
. in the second tab download something so that the shelf remains visible.
. drag the second tab out.
. close the first window.
. resize the second window.

This is happening because dragging a tab out results in moving the download  
shelf to
a new window. The ResizeCorner in the download shelf still references the  
old
BrowserView and once the window closes the resize corner references a  
deleted object.

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to