search

chromiumembedded / cef

Chromium Embedded Framework (CEF). A simple framework for embedding Chromium-based browsers in other applications.
https://bitbucket.org/chromiumembedded/cef/
Other
3.34k stars 467 forks source link

crash when creating/destroying a browser window without allowing the message loop to run #1512

Closed magreenblatt closed 8 years ago

magreenblatt commented 9 years ago

Original report by Anonymous.

Original issue 1512 created by tomas.bambuch on 2015-01-29T08:28:12.000Z:

What steps will reproduce the problem?

  1. Create a new window with CEF browser
  2. Call ClientHandler.CloseAllBrowsers and destroy the window soon enough (eg after 200 millisecons sleep)
  3. Closing the window early will not let the message loop start (OnAfterCreated is not called) and results in a crash

What is the expected output? What do you see instead?
Expected is destroying the window without crashing

What version of the product are you using? On what operating system?
cef 3.2171.1979 32bit on Windows 8.1

Please provide any additional information below.
FAULTING_IP:
libcef!content::WebContentsImpl::SetIsLoading+13f [e:\cef\workspace\cef3-windows-2171\download\chromium\src\content\browser\web_contents\web_contents_impl.cc @ 3211]
131a9bbf 8b90d0000000 (bb) mov edx,dword ptr [eax+0D0h]

EXCEPTION_RECORD: ffffffffffffffff (bb) -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00000000131a9bbf (bb) (libcef!content::WebContentsImpl::SetIsLoading+0x000000000000013f)
ExceptionCode: c0000005 (bb) (Access violation)
ExceptionFlags: 00000000 (bb)
NumberParameters: 2
Parameter[0]: 0000000000000000 (bb)
Parameter[1]: 00000000f5bf2856 (bb)
Attempt to read from address 00000000f5bf2856 (bb)

CONTEXT: 0000000000000000 (bb) -- (.cxr 0x0;r)
eax=f5bf2786 ebx=00000000 ecx=0a404e00 edx=0a404e4c esi=08d9d86c edi=08d9d9cc
eip=131a9bbf esp=08d9d868 ebp=08d9d9cc iopl=0 nv up ei pl nz na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206
libcef!content::WebContentsImpl::SetIsLoading+0x13f:
131a9bbf 8b90d0000000 (bb) mov edx,dword ptr [eax+0D0h] ds:002b:f5bf2856=????????

STACK_TEXT:
08d9d9cc 1319aae3 (bb) 06416600 (bb) 00000001 (bb) 00000001 (bb) libcef!content::WebContentsImpl::SetIsLoading+0x13f
08d9d9f0 1321054b (bb) 22fa2c30 (bb) 00000001 (bb) 08d9e048 (bb) libcef!content::WebContentsImpl::DidStartLoading+0x43
08d9db18 1350c6e2 (bb) 08d9dda4 (bb) 08d9e150 (bb) 08d9e058 (bb) libcef!content::RenderFrameHostImpl::Navigate+0x33b
08d9e048 1350c975 (bb) 22fa2c30 (bb) 0a3f0680 (bb) 00000000 (bb) libcef!content::NavigatorImpl::NavigateToEntry+0x432
08d9e064 1319f702 (bb) 22fa2c30 (bb) 00000000 (bb) 08d9e2e0 (bb) libcef!content::NavigatorImpl::NavigateToPendingEntry+0x45
08d9e150 134bb3e6 (bb) 00000000 (bb) 08d9e708 (bb) 08d9e2fc (bb) libcef!content::WebContentsImpl::NavigateToPendingEntry+0x152
08d9e2e0 134ba864 (bb) 00000000 (bb) 0a404e58 (bb) 08d9e708 (bb) libcef!content::NavigationControllerImpl::NavigateToPendingEntry+0x2a6
08d9e2f0 134bb0a7 (bb) 0a3f0680 (bb) 08d9e944 (bb) 08d9e714 (bb) libcef!content::NavigationControllerImpl::LoadEntry+0x24
08d9e708 134ba938 (bb) 08d9e720 (bb) 08d9ed30 (bb) 08d9e95c (bb) libcef!content::NavigationControllerImpl::LoadURLWithParams+0x707
08d9e944 102e6b80 (bb) 08d9ecbc (bb) 08d9ef1c (bb) 00000001 (bb) libcef!content::NavigationControllerImpl::LoadURL+0x78
08d9ed30 102df699 (bb) ffffffff (bb) ffffffff (bb) 08d9eee4 (bb) libcef!CefBrowserHostImpl::LoadURL+0x1f0
08d9efa4 102dfe47 (bb) 08d9f204 (bb) 22f86d80 (bb) 22f84180 (bb) libcef!CefBrowserHostImpl::Create+0x2d9
08d9f20c 102dff48 (bb) 08d9f238 (bb) 22f86d80 (bb) 22f84180 (bb) libcef!CefBrowserHost::CreateBrowserSync+0x277
08d9f244 102ecae7 (bb) 22f86d80 (bb) 08d9f288 (bb) 08d9f26c (bb) libcef!`anonymous namespace'::CreateBrowserWithHelper+0x58
08d9f258 102e7038 (bb) 22f84210 (bb) 08d9f27c (bb) 102eb535 (bb) libcef!base::internal::RunnableAdapter<void (__cdecl*)(`anonymous namespace'::CreateBrowserHelper *)>::Run+0x27
08d9f264 102eb535 (bb) 102dfef0 (bb) 22f84210 (bb) 22f84210 (bb) libcef!base::internal::InvokeHelper<0,void,base::internal::RunnableAdapter<void (__cdecl*)(`anonymous namespace'::CreateBrowserHelper *)>,void __cdecl(`anonymous namespace'::CreateBrowserHelper * const &)>::MakeItSo+0x18
08d9f27c 102b073f (bb) 22f84200 (bb) 08d9f598 (bb) 102eb4f0 (bb) libcef!base::internal::Invoker<1,base::internal::BindState<base::internal::RunnableAdapter<void (__cdecl*)(`anonymous namespace'::CreateBrowserHelper *)>,void __cdecl(`anonymous namespace'::CreateBrowserHelper *),void __cdecl(`anonymous namespace'::CreateBrowserHelper *)>,void __cdecl(`anonymous namespace'::CreateBrowserHelper *)>::Run+0x45
08d9f294 10603f13 (bb) 08d9f520 (bb) cccccccc (bb) cccccccc (bb) libcef!base::Callback<void __cdecl(void)>::Run+0x2f
08d9f35c 105278d4 (bb) 167d69e4 (bb) 167d6a64 (bb) 08d9f550 (bb) libcef!base::debug::TaskAnnotator::RunTask+0x223
08d9f520 105258c4 (bb) 08d9f550 (bb) 06343e00 (bb) 08d9f590 (bb) libcef!base::MessageLoop::RunTask+0x1b4
08d9f530 10525ead (bb) 08d9f550 (bb) 08d9f6c4 (bb) 08d9f598 (bb) libcef!base::MessageLoop::DeferOrRunPendingTask+0x34
08d9f590 10607b84 (bb) 08d9f5b0 (bb) 06321e20 (bb) 00cccccc (bb) libcef!base::MessageLoop::DoWork+0xdd
08d9f5a8 10609012 (bb) 08d9f5f8 (bb) 00000001 (bb) 00000000 (bb) libcef!base::MessagePumpForUI::DoRunLoop+0x54
08d9f5d8 10608f7c (bb) 06343e00 (bb) 00000000 (bb) 0632f0a0 (bb) libcef!base::MessagePumpWin::RunWithDispatcher+0x82
08d9f5ec 105276f7 (bb) 06343e00 (bb) 08d9f6f8 (bb) 08d9f744 (bb) libcef!base::MessagePumpWin::Run+0x1c
08d9f6c4 105961fe (bb) 08d9f72c (bb) cccccccc (bb) 0f8f8cfa (bb) libcef!base::MessageLoop::RunHandler+0xf7
08d9f6f8 105275ab (bb) 08d9f850 (bb) cccccccc (bb) 06343e00 (bb) libcef!base::RunLoop::Run+0x3e
08d9f72c 10596a86 (bb) 0632f5a0 (bb) 08d9f850 (bb) 10597405 (bb) libcef!base::MessageLoop::Run+0x2b
08d9f738 10597405 (bb) 06343e00 (bb) 08d9f840 (bb) 08d9f858 (bb) libcef!base::Thread::Run+0x16
08d9f850 1051ed3b (bb) 1051ec60 (bb) 1051ec60 (bb) cccccccc (bb) libcef!base::Thread::ThreadMain+0x285
08d9f88c 76107c04 (bb) 06321e20 (bb) 76107be0 (bb) c8cc9faf (bb) libcef!base::`anonymous namespace'::ThreadFunc+0xdb
08d9f8a0 7703b90f (bb) 06321e20 (bb) c9e27707 (bb) 00000000 (bb) KERNEL32!BaseThreadInitThunk+0x24
08d9f8e8 7703b8da (bb) ffffffff (bb) 770206fd (bb) 00000000 (bb) ntdll_76fe0000!__RtlUserThreadStart+0x2f
08d9f8f8 00000000 (bb) 1051ec60 (bb) 06321e20 (bb) 00000000 (bb) ntdll_76fe0000!_RtlUserThreadStart+0x1b

STACK_COMMAND: .cxr 0x0 ; kb

FAULTING_SOURCE_LINE: e:\cef\workspace\cef3-windows-2171\download\chromium\src\content\browser\web_contents\web_contents_impl.cc

FAULTING_SOURCE_FILE: e:\cef\workspace\cef3-windows-2171\download\chromium\src\content\browser\web_contents\web_contents_impl.cc

FAULTING_SOURCE_LINE_NUMBER: 3211

FAULTING_SOURCE_CODE:
No source found for 'e:\cef\workspace\cef3-windows-2171\download\chromium\src\content\browser\web_contents\web_contents_impl.cc'

magreenblatt commented 8 years ago

If this problem reproduces with current CEF branches (2526 or newer) please post and we can re-open.

magreenblatt commented 8 years ago