Status: Assigned Owner: m...@chromium.org Labels: Type-Bug Pri-1 OS-All Area-BrowserUI Regression
New issue 8477 by s...@chromium.org: Crash in BrowserView http://code.google.com/p/chromium/issues/detail?id=8477 http://crash/reportdetail? reportid=dfc802909b6c00f6&product=Chrome&version=2.0.167.0&date=&signature=BrowserVie w::CanCurrentlyResize()-155F97F 0x015c5a88 [chrome.dll - browser_view.cc:266] BrowserView::CanCurrentlyResize() 0x015c562e [chrome.dll - browser_view.cc:163] ResizeCorner::GetPreferredSize() 0x015c5669 [chrome.dll - browser_view.cc:169] ResizeCorner::Layout() 0x016ff034 [chrome.dll - view.cc:219] views::View::Layout() 0x015d022c [chrome.dll - download_shelf_view.cc:210] DownloadShelfView::Layout() 0x015c7b7a [chrome.dll - browser_view.cc:1423] BrowserView::LayoutDownloadShelf() 0x015c74ab [chrome.dll - browser_view.cc:1199] BrowserView::Layout() 0x015c7d5c [chrome.dll - browser_view.cc:1478] BrowserView::UpdateUIForContents(TabContents *) 0x015c6f6e [chrome.dll - browser_view.cc:947] BrowserView::TabSelectedAt(TabContents *,TabContents *,int,bool) 0x012ea93b [chrome.dll - tab_strip_model.cc:584] TabStripModel::ChangeSelectedContentsFrom(TabContents *,int,bool) 0x012e9c1f [chrome.dll - tab_strip_model.cc:143] TabStripModel::DetachTabContentsAt(int) 0x012ea7aa [chrome.dll - tab_strip_model.cc:527] TabStripModel::Observe(NotificationType,NotificationSource const &,NotificationDetails const &) 0x011ec538 [chrome.dll - notification_service.cc:107] NotificationService::Notify(NotificationType,NotificationSource const &,NotificationDetails const &) 0x012a09aa [chrome.dll - tab_contents.cc:114] TabContents::Destroy() 0x0129ad4c [chrome.dll - web_contents.cc:343] WebContents::Destroy() 0x012c7a74 [chrome.dll - navigation_controller.cc:440] NavigationController::Destroy() 0x012ea82d [chrome.dll - tab_strip_model.cc:560] TabStripModel::InternalCloseTabContentsAt(int,bool) 0x012a5814 [chrome.dll - browser.cc:1723] Browser::CloseContents(TabContents *) 0x0129bab3 [chrome.dll - web_contents.cc:831] WebContents::Close(RenderViewHost *) 0x0129ce5e [chrome.dll - web_contents.cc:1366] WebContents::RendererUnresponsive(RenderViewHost *,bool) 0x012d77f1 [chrome.dll - render_view_host.cc:1304] RenderViewHost::NotifyRendererUnresponsive() 0x012f200a [chrome.dll - render_widget_host.cc:385] RenderWidgetHost::CheckRendererIsUnresponsive() 0x01549cd8 [chrome.dll - message_loop.cc:308] MessageLoop::RunTask(Task *) 0x01549d0f [chrome.dll - message_loop.cc:316] MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const &) 0x01549f63 [chrome.dll - message_loop.cc:435] MessageLoop::DoDelayedWork(base::Time *) 0x01563c1d [chrome.dll - message_pump_win.cc:213] base::MessagePumpForUI::DoRunLoop() 0x01563a30 [chrome.dll - message_pump_win.cc:52] base::MessagePumpWin::RunWithDispatcher(base::MessagePump::Delegate *,base::MessagePumpWin::Dispatcher *) 0x01549b99 [chrome.dll - message_loop.cc:192] MessageLoop::RunInternal() 0x01549b73 [chrome.dll - message_loop.cc:180] MessageLoop::RunHandler() 0x0154a0d9 [chrome.dll - message_loop.cc:558] MessageLoopForUI::Run(base::MessagePumpWin::Dispatcher *) 0x0126aac1 [chrome.dll - browser_main.cc:183] `anonymous namespace'::RunUIMessageLoop(BrowserProcess *) 0x0126b9db [chrome.dll - browser_main.cc:562] BrowserMain(MainFunctionParams const &) 0x011c340f [chrome.dll - chrome_dll_main.cc:332] ChromeMain 0x00402a70 [chrome.exe - google_update_client.cc:93] google_update::GoogleUpdateClient::Launch(HINSTANCE__ *,sandbox::SandboxInterfaceInfo *,wchar_t *,char const *,int *) 0x004024ce [chrome.exe - chrome_exe_main.cc:67] wWinMain Here's how to repro: . Create a window with two tabs. . in the second tab download something so that the shelf remains visible. . drag the second tab out. . close the first window. . resize the second window. This is happening because dragging a tab out results in moving the download shelf to a new window. The ResizeCorner in the download shelf still references the old BrowserView and once the window closes the resize corner references a deleted object. -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings --~--~---------~--~----~------------~-------~--~----~ Automated mail from issue updates at http://crbug.com/ Subscription options: http://groups.google.com/group/chromium-bugs -~----------~----~----~----~------~----~------~--~---