Updates:
Summary: Browser crash @ JavascriptMessageBoxDialog::CloseModalDialog()
Status: Untriaged
Cc: [email protected] [email protected] [email protected]
Labels: -Pri-2 -Area-Misc Pri-1 Area-BrowserBackend Crash
Comment #1 on issue 26015 by [email protected]: Browser crash @
JavascriptMessageBoxDialog::CloseModalDialog()
http://code.google.com/p/chromium/issues/detail?id=26015
Good catch!!.
Thanks for the report
Here is the crash analysis
##########################
FAULTING_IP:
chrome_1c30000!JavascriptMessageBoxDialog::CloseModalDialog+0
[c:\b\slave\chromium-rel-xp\build\src\chrome\browser\views\jsmessage_box_dialog.cc
@
54]
01e56650 83791000 cmp dword ptr [ecx+10h],0
EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 01e56650
(chrome_1c30000!JavascriptMessageBoxDialog::CloseModalDialog)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000010
Attempt to read from address 00000010
PROCESS_NAME: chrome.exe
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced
memory at
"0x%08lx". The memory could not be "%s".
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx"
referenced
memory at "0x%08lx". The memory could not be "%s".
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 00000010
READ_ADDRESS: 00000010
FOLLOWUP_IP:
chrome_1c30000!JavascriptMessageBoxDialog::CloseModalDialog+0
[c:\b\slave\chromium-rel-xp\build\src\chrome\browser\views\jsmessage_box_dialog.cc
@
54]
01e56650 83791000 cmp dword ptr [ecx+10h],0
FAULTING_THREAD: 00003444
BUGCHECK_STR:
APPLICATION_FAULT_NULL_CLASS_PTR_DEREFERENCE_NULL_POINTER_READ_INVALID_POINTER_READ
PRIMARY_PROBLEM_CLASS: NULL_CLASS_PTR_DEREFERENCE
DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE
LAST_CONTROL_TRANSFER: from 01e41264 to 01e56650
STACK_TEXT:
0013ee8c 01e41264 00000000 0013ef58 024cae82
chrome_1c30000!JavascriptMessageBoxDialog::CloseModalDialog
[c:\b\slave\chromium-rel-xp\build\src\chrome\browser\views\jsmessage_box_dialog.cc
@
54]
0013ee98 024cae82 0000002f 0013f010 0013f018
chrome_1c30000!AppModalDialog::Observe+0x44
[c:\b\slave\chromium-rel-xp\build\src\chrome\browser\app_modal_dialog.cc @
51]
0013ef58 01c92ccf 0000002f 00000000 0013f018
chrome_1c30000!NotificationService::Notify+0x2d2
[c:\b\slave\chromium-rel-xp\build\src\chrome\common\notification_service.cc
@ 107]
0013f01c 01c9375b 00000000 0013f064 01c83f0f
chrome_1c30000!TabContents::~TabContents+0x14f
[c:\b\slave\chromium-rel-xp\build\src\chrome\browser\tab_contents\tab_contents.cc
@
366]
0013f028 01c83f0f 00000001 ffffffff 00000000
chrome_1c30000!TabContents::`scalar
deleting destructor'+0xb
0013f064 01c841ba 01c84195 00f60d98 00f60d9c
chrome_1c30000!TabStripModel::InternalCloseTabs+0x28f
[c:\b\slave\chromium-rel-xp\build\src\chrome\browser\tabs\tab_strip_model.cc
@
667]
0013f0a8 01d20fb2 03f04a38 0013f0dc 74dc4712
chrome_1c30000!TabStripModel::CloseAllTabs+0xaa
[c:\b\slave\chromium-rel-xp\build\src\chrome\browser\tabs\tab_strip_model.cc
@
222]
0013f0bc 01f9e464 03f04a24 01d6dd53 00000001
chrome_1c30000!BrowserView::CanClose+0x62
[c:\b\slave\chromium-rel-xp\build\src\chrome\browser\views\frame\browser_view.cc
@
1489]
0013f0c4 01d6dd53 00000001 03f04a24 01580258
chrome_1c30000!views::WindowWin::Close+0x14
[c:\b\slave\chromium-rel-xp\build\src\views\window\window_win.cc @ 253]
0013f190 01d6e919 01580258 00000010 00000000
chrome_1c30000!views::WidgetWin::_ProcessWindowMessage+0x263
[c:\b\slave\chromium-rel-xp\build\src\views\widget\widget_win.h @ 122]
0013f1b8 01fa63bb 01580258 00000010 00000000
chrome_1c30000!views::WidgetWin::ProcessWindowMessage+0x29
[c:\b\slave\chromium-rel-xp\build\src\views\widget\widget_win.h @ 95]
0013f1e8 02020a90 00000010 00000000 00000000
chrome_1c30000!views::WidgetWin::OnWndProc+0x4b
[c:\b\slave\chromium-rel-xp\build\src\views\widget\widget_win.cc @ 1125]
0013f294 7e418734 01580258 00000010 00000000
chrome_1c30000!app::WindowImpl::WndProc+0xb0
[c:\b\slave\chromium-rel-xp\build\src\app\win\window_impl.cc @ 183]
0013f2c0 7e418816 020209e0 01580258 00000010 user32!InternalCallWinProc+0x28
0013f328 7e428ea0 00000000 020209e0 01580258
user32!UserCallWinProcCheckWow+0x150
0013f37c 7e428eec 006e4fb0 00000010 00000000
user32!DispatchClientMessage+0xa3
0013f3a4 7c90e473 0013f3b4 00000018 006e4fb0 user32!__fnDWORD+0x24
0013f3c8 7e4194be 7e428e0d 01580258 00000112
ntdll!KiUserCallbackDispatcher+0x13
0013f41c 7e428dd9 01580258 00000112 0000f060 user32!NtUserMessageCall+0xc
0013f438 7e428d77 01580258 00000112 0000f060 user32!RealDefWindowProcW+0x47
0013f480 01f9e38f 01580258 00000112 0000f060 user32!DefWindowProcW+0x72
0013f4a0 01d6df3c 0000f060 000003dd 000003e2
chrome_1c30000!views::WindowWin::OnSysCommand+0xef
[c:\b\slave\chromium-rel-xp\build\src\views\window\window_win.cc @ 1099]
0013f578 01d6e919 01580258 00000112 0000f060
chrome_1c30000!views::WidgetWin::_ProcessWindowMessage+0x44c
[c:\b\slave\chromium-rel-xp\build\src\views\widget\widget_win.h @ 135]
0013f5a0 01fa63bb 01580258 00000112 0000f060
chrome_1c30000!views::WidgetWin::ProcessWindowMessage+0x29
[c:\b\slave\chromium-rel-xp\build\src\views\widget\widget_win.h @ 95]
0013f5d0 02020a90 00000112 0000f060 03e203dd
chrome_1c30000!views::WidgetWin::OnWndProc+0x4b
[c:\b\slave\chromium-rel-xp\build\src\views\widget\widget_win.cc @ 1125]
0013f67c 7e418734 01580258 00000112 0000f060
chrome_1c30000!app::WindowImpl::WndProc+0xb0
[c:\b\slave\chromium-rel-xp\build\src\app\win\window_impl.cc @ 183]
0013f6a8 7e418816 020209e0 01580258 00000112 user32!InternalCallWinProc+0x28
0013f710 7e4189cd 00000000 020209e0 01580258
user32!UserCallWinProcCheckWow+0x150
0013f770 7e418a10 0013f7f4 00000000 0013f7c4
user32!DispatchMessageWorker+0x306
0013f780 01f98d37 0013f7f4 0013f7f4 00f68040 user32!DispatchMessageW+0xf
0013f7c4 0200065c 0013f7f4 00f68060 00f68040
chrome_1c30000!views::AcceleratorHandler::Dispatch+0x107
[c:\b\slave\chromium-rel-xp\build\src\views\focus\accelerator_handler_win.cc
@
57]
0013f7dc 02001174 0013f7f4 00000000 00f68040
chrome_1c30000!base::MessagePumpForUI::ProcessMessageHelper+0x6c
[c:\b\slave\chromium-rel-xp\build\src\base\message_pump_win.cc @ 357]
0013f810 020002d2 00f83000 0013fa5c 0013fa5c
chrome_1c30000!base::MessagePumpForUI::DoRunLoop+0x44
[c:\b\slave\chromium-rel-xp\build\src\base\message_pump_win.cc @ 205]
0013f830 01fdd36f 0013fa5c 0013f904 00f87000
chrome_1c30000!base::MessagePumpWin::RunWithDispatcher+0x42
[c:\b\slave\chromium-rel-xp\build\src\base\message_pump_win.cc @ 54]
0013f8d8 01fddff7 00000001 00000000 0013f904
chrome_1c30000!MessageLoop::RunInternal+0xaf
[c:\b\slave\chromium-rel-xp\build\src\base\message_loop.cc @ 200]
0013f8f4 01c4954f 0013f904 00f87000 029a6268
chrome_1c30000!MessageLoopForUI::Run+0x67
[c:\b\slave\chromium-rel-xp\build\src\base\message_loop.cc @ 606]
0013f91c 01c4b608 00f700e0 00f68440 ffffffff chrome_1c30000!`anonymous
namespace'::RunUIMessageLoop+0x1f
[c:\b\slave\chromium-rel-xp\build\src\chrome\browser\browser_main.cc @ 155]
0013fcbc 01c35a79 0013fda4 00000008 01c30000
chrome_1c30000!BrowserMain+0x1be8
[c:\b\slave\chromium-rel-xp\build\src\chrome\browser\browser_main.cc @ 887]
0013fe34 00403b17 00400000 0013fec8 0002127e chrome_1c30000!ChromeMain+0x7f9
[c:\b\slave\chromium-rel-xp\build\src\chrome\app\chrome_dll_main.cc @ 601]
0013ff28 0042a601 00400000 00000000 0002127e chrome!wWinMain+0x287
[c:\b\slave\chromium-rel-xp\build\src\chrome\app\chrome_exe_main.cc @ 103]
0013ffc0 7c817077 2091f1fc 01ca5768 7ffd6000 chrome!__tmainCRTStartup+0x176
[f:\dd\vctools\crt_bld\self_x86\crt\src\crt0.c @ 324]
0013fff0 00000000 0042a66a 00000000 00000000 kernel32!BaseProcessStart+0x23
STACK_COMMAND: ~0s; .ecxr ; kb
FAULTING_SOURCE_CODE:
No source found for
'c:\b\slave\chromium-rel-xp\build\src\chrome\browser\views\jsmessage_box_dialog.cc'
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: chrome!JavascriptMessageBoxDialog::CloseModalDialog+0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: chrome_1c30000
IMAGE_NAME: chrome.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 4ae75add
FAILURE_BUCKET_ID:
NULL_CLASS_PTR_DEREFERENCE_c0000005_chrome.dll!JavascriptMessageBoxDialog::CloseModalDialog
BUCKET_ID:
APPLICATION_FAULT_NULL_CLASS_PTR_DEREFERENCE_NULL_POINTER_READ_INVALID_POINTER_READ_chrome!JavascriptMessageBoxDialog::CloseModalDialog+0
WATSON_STAGEONE_URL:
http://watson.microsoft.com/StageOne/chrome_exe/0_0_0_0/4ae75b32/chrome_dll/4_0_227_0/4ae75add/c0000005/00226650.htm?Retriage=1
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---
