search

brave / brave-browser

Brave browser for Android, iOS, Linux, macOS, Windows.
https://brave.com
Mozilla Public License 2.0
17.54k stars 2.27k forks source link

Crash Report #40119

Open nanedi opened 1 month ago

nanedi commented 1 month ago

Brave Version: 1.69.129 Chromium: 127.0.6533.73 Operating System: Windows NT 10.0.19045

URL (if applicable) where crash occurred: youtube.com, brave://settings/ and more.

Can you reproduce this crash? Crashing randomly, I have no idea.

What steps will reproduce this crash? (If it's not reproducible, what were you doing just before the crash?)

  1. crashing randomly

DO NOT CHANGE BELOW THIS LINE Crash ID: crash/6bc50600-3daa-5d0c-0000-000000000000

I have tried clearing the browser cache and disabling all extensions; and add this to Bitdefender’s Exclusion.

%LOCALAPPDATA%\BraveSoftware\Brave-Browser-Beta\User Data

Thanks

nanedi commented 1 month ago

Add youtube.com x.com crashes too.

Reinstalled windows 10 pro, and no extensions.

Thanks

bsclifton commented 1 month ago

Backtrace https://brave.sp.backtrace.io/p/brave/debug?time=month&filters=JTVCJTVCJTIyX2RlbGV0ZWQlMjIlMkMlMjJlcXVhbCUyMiUyQyUyMjAlMjIlNUQlMkMlNUIlMjJfcnhpZCUyMiUyQyUyMmVxdWFsJTIyJTJDJTIyNmJjNTA2MDAtM2RhYS01ZDBjLTAwMDAtMDAwMDAwMDAwMDAwJTIyJTVEJTVE&fingerprint=92e9fc05bfa609a259efdb1ad6d2af358ec92cb3a07f6c5619aa9ca606a609a5&debug=(%228137c53%22,0,0)

Unfortunately, it doesn't seem the crash is symbolized cc: @iefremov @goodov

goodov commented 1 month ago

Backtrace https://brave.sp.backtrace.io/p/brave/debug?time=month&filters=JTVCJTVCJTIyX2RlbGV0ZWQlMjIlMkMlMjJlcXVhbCUyMiUyQyUyMjAlMjIlNUQlMkMlNUIlMjJfcnhpZCUyMiUyQyUyMmVxdWFsJTIyJTJDJTIyNmJjNTA2MDAtM2RhYS01ZDBjLTAwMDAtMDAwMDAwMDAwMDAwJTIyJTVEJTVE&fingerprint=92e9fc05bfa609a259efdb1ad6d2af358ec92cb3a07f6c5619aa9ca606a609a5&debug=(%228137c53%22,0,0)

Unfortunately, it doesn't seem the crash is symbolized cc: @iefremov @goodov

The dump can be loaded in visual studio, it will download symbols and you can look into it.

The callstack points to some stack issues detected during Safe Browsing store update. It's possible the stack breaks somewhere else, so we get this as an aftermath:

chrome.dll!__report_gsfailure(unsigned __int64 stack_cookie) Line 220
    at D:\a\_work\1\s\src\vctools\crt\vcstartup\src\gs\gs_report.c(220)
chrome.dll!safe_browsing::V4Store::GetNextSmallestUnmergedPrefix(const safe_browsing::HashPrefixMap & hash_prefix_map, const std::__Cr::unordered_map<unsigned long long,std::__Cr::__wrap_iter<const char *>,std::__Cr::hash<unsigned long long>,std::__Cr::equal_to<unsigned long long>,std::__Cr::allocator<std::__Cr::pair<const unsigned long long,std::__Cr::__wrap_iter<const char *>>>> & iterator_map, std::__Cr::basic_string<char,std::__Cr::char_traits<char>,std::__Cr::allocator<char>> * smallest_hash_prefix) Line 701
    at C:\jenkins\x64-beta\src\components\safe_browsing\core\browser\db\v4_store.cc(701)
chrome.dll!safe_browsing::V4Store::MergeUpdate(const safe_browsing::HashPrefixMap & old_prefixes_map, const safe_browsing::HashPrefixMap & additions_map, const google::protobuf::RepeatedField<int> * raw_removals, const std::__Cr::basic_string<char,std::__Cr::char_traits<char>,std::__Cr::allocator<char>> & expected_checksum) Line 818
    at C:\jenkins\x64-beta\src\components\safe_browsing\core\browser\db\v4_store.cc(818)
chrome.dll!safe_browsing::V4Store::ProcessUpdate(const std::__Cr::basic_string<char,std::__Cr::char_traits<char>,std::__Cr::allocator<char>> & metric, const safe_browsing::HashPrefixMap & hash_prefix_map_old, const std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>> & response, bool delay_checksum_check) Line 532
    at C:\jenkins\x64-beta\src\components\safe_browsing\core\browser\db\v4_store.cc(532)
chrome.dll!safe_browsing::V4Store::ProcessPartialUpdateAndWriteToDisk(const std::__Cr::basic_string<char,std::__Cr::char_traits<char>,std::__Cr::allocator<char>> & metric, const safe_browsing::HashPrefixMap & hash_prefix_map_old, std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>> response) Line 429
    at C:\jenkins\x64-beta\src\components\safe_browsing\core\browser\db\v4_store.cc(429)
chrome.dll!safe_browsing::V4Store::ApplyUpdate(std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>> response, const scoped_refptr<base::SequencedTaskRunner> & callback_task_runner, base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)> callback) Line 556
    at C:\jenkins\x64-beta\src\components\safe_browsing\core\browser\db\v4_store.cc(556)
[Inline Frame] chrome.dll!base::internal::DecayedFunctorTraits<void (safe_browsing::V4Store::*)(std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>>, const scoped_refptr<base::SequencedTaskRunner> &, base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)>),safe_browsing::V4Store *,std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>> &&,scoped_refptr<base::SequencedTaskRunner> &&,base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)> &&>::Invoke(void(safe_browsing::V4Store::*)(std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>>, const scoped_refptr<base::SequencedTaskRunner> &, base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)>) method, safe_browsing::V4Store * && receiver_ptr, std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>> && args, scoped_refptr<base::SequencedTaskRunner> && args, base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)> && args) Line 738
    at C:\jenkins\x64-beta\src\base\functional\bind_internal.h(738)
[Inline Frame] chrome.dll!base::internal::InvokeHelper<0,base::internal::FunctorTraits<void (safe_browsing::V4Store::*&&)(std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>>, const scoped_refptr<base::SequencedTaskRunner> &, base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)>),safe_browsing::V4Store *,std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>> &&,scoped_refptr<base::SequencedTaskRunner> &&,base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)> &&>,void,0,1,2,3>::MakeItSo(void(safe_browsing::V4Store::*)(std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>>, const scoped_refptr<base::SequencedTaskRunner> &, base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)>) && functor, std::__Cr::tuple<base::internal::UnretainedWrapper<safe_browsing::V4Store,base::unretained_traits::MayNotDangle,0>,std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>>,scoped_refptr<base::SequencedTaskRunner>,base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)>> && bound) Line 930
    at C:\jenkins\x64-beta\src\base\functional\bind_internal.h(930)
[Inline Frame] chrome.dll!base::internal::Invoker<base::internal::FunctorTraits<void (safe_browsing::V4Store::*&&)(std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>>, const scoped_refptr<base::SequencedTaskRunner> &, base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)>),safe_browsing::V4Store *,std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>> &&,scoped_refptr<base::SequencedTaskRunner> &&,base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)> &&>,base::internal::BindState<1,1,0,void (safe_browsing::V4Store::*)(std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>>, const scoped_refptr<base::SequencedTaskRunner> &, base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)>),base::internal::UnretainedWrapper<safe_browsing::V4Store,base::unretained_traits::MayNotDangle,0>,std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>>,scoped_refptr<base::SequencedTaskRunner>,base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)>>,void ()>::RunImpl(void(safe_browsing::V4Store::*)(std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>>, const scoped_refptr<base::SequencedTaskRunner> &, base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)>) && functor, std::__Cr::tuple<base::internal::UnretainedWrapper<safe_browsing::V4Store,base::unretained_traits::MayNotDangle,0>,std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>>,scoped_refptr<base::SequencedTaskRunner>,base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)>> && bound, std::__Cr::integer_sequence<unsigned long long,0,1,2,3>) Line 1067
    at C:\jenkins\x64-beta\src\base\functional\bind_internal.h(1067)
chrome.dll!base::internal::Invoker<base::internal::FunctorTraits<void (safe_browsing::V4Store::*&&)(std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>>, const scoped_refptr<base::SequencedTaskRunner> &, base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)>),safe_browsing::V4Store *,std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>> &&,scoped_refptr<base::SequencedTaskRunner> &&,base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)> &&>,base::internal::BindState<1,1,0,void (safe_browsing::V4Store::*)(std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>>, const scoped_refptr<base::SequencedTaskRunner> &, base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)>),base::internal::UnretainedWrapper<safe_browsing::V4Store,base::unretained_traits::MayNotDangle,0>,std::__Cr::unique_ptr<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse,std::__Cr::default_delete<safe_browsing::FetchThreatListUpdatesResponse_ListUpdateResponse>>,scoped_refptr<base::SequencedTaskRunner>,base::OnceCallback<void (std::__Cr::unique_ptr<safe_browsing::V4Store,safe_browsing::V4StoreDeleter>)>>,void ()>::RunOnce(base::internal::BindStateBase * base) Line 980
    at C:\jenkins\x64-beta\src\base\functional\bind_internal.h(980)
[Inline Frame] chrome.dll!base::OnceCallback<void ()>::Run() Line 156
    at C:\jenkins\x64-beta\src\base\functional\callback.h(156)
[Inline Frame] chrome.dll!base::TaskAnnotator::RunTaskImpl(base::PendingTask & pending_task) Line 203
    at C:\jenkins\x64-beta\src\base\task\common\task_annotator.cc(203)
[Inline Frame] chrome.dll!base::TaskAnnotator::RunTask(perfetto::StaticString event_name, base::PendingTask & pending_task, base::internal::TaskTracker::RunTaskImpl::<lambda_0> && args) Line 90
    at C:\jenkins\x64-beta\src\base\task\common\task_annotator.h(90)
[Inline Frame] chrome.dll!base::internal::TaskTracker::RunTaskImpl(base::internal::Task & task, const base::TaskTraits & traits, base::internal::TaskSource * task_source, const base::internal::SequenceToken & token) Line 679
    at C:\jenkins\x64-beta\src\base\task\thread_pool\task_tracker.cc(679)
iefremov commented 1 month ago

@nanedi if it crashes randomly, can you please upload more dumps (from brave://crashes) and share more ids?

nanedi commented 1 month ago

@iefremov

20f00200-66eb-6f0c-0000-000000000000 1bf00200-66eb-6f0c-0000-000000000000

nanedi commented 3 weeks ago

@iefremov

f0651200-ebf9-720c-0000-000000000000 5d6c1200-ebf9-720c-0000-000000000000