Crashing after 102.0.10

[delphirules]

Yes, i downloaded from here :

https://cef-builds.spotifycdn.com/cef_b ... nt.tar.bz2

But here is the problem : the crash does not occur on all machines ; in my development machine it won't occur too. But it's happening in a lot of machines of some of my customers, not only one or two, so far since i updated to 105 i got 7 complains. To generate this call stack i had to access a customer machine via Teamviewer and download the official sample app from CEF.

[magreenblatt]

Please post a symbolized call stack. That means downloading the PDB file at the correct version, placing it next to libcef.dll, and running the application with a debugger.

[delphirules]

Please post a symbolized call stack. That means downloading the PDB file at the correct version, placing it next to libcef.dll, and running the application with a debugger.

I'm trying but i'm getting an error when trying to load the PDB file on windbg.. it's tricky because i'm using a machine from a customer with the issue on Teamviewer .

Do you have any ideas about what could be causing the crash ? Maybe some config switch on chrome to try ?

[amaitland]

Enable crash reporting in your application, just use a folder on disk for the crash reports then copy the crash report to your local machine for analysis.

https://bitbucket.org/chromiumembedded/ ... porting.md

[JasonLP]

I am also experiencing a similar issue. The application crashes after the user selects a file from the file picker on both Mac and Windows when running on a version built with 105, but not when running on 103.

[magreenblatt]

I am also experiencing a similar issue. The application crashes after the user selects a file from the file picker on both Mac and Windows when running on a version built with 105, but not when running on 103.

Selects from a file picker how? Are you referring to <input type="file"> elements? Does it crash in both Debug and Release builds?

[delphirules]

I enabled log in CEF, here is the log right after the app crashed :

https://we.tl/t-xmOZKSqa67

It's like the user above said : rigth after Chromium open the popup window to select a file , when you select the file the app crashes. In my case this happens on Facebook timeline.

[delphirules]

New info regarding this issue : the same crash happens in Whatsapp Web when you try to save message attachments; when you click on a PDF document sent by someone, for instance, after the 'Save as' window pops up , right after you type a name to the file and click on 'Save' button , CEF crashes.

Same thing : won't happen with versions previous to 102, but happens on all newer, and won't happen in all machines.

[JasonLP]

Here is the call stack of the crash in Windows in release mode:

Screen Shot 2022-09-23 at 10.40.26 AM.png (17.19 KiB) Viewed 3695 times

Code: Select all


>   libcef.dll!PrefService::GetBoolean(const std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>> & path) Line 226   C++
    libcef.dll!AccountConsistencyModeManager::AccountConsistencyModeManager(Profile * profile) Line 98   C++
    libcef.dll!AccountConsistencyModeManagerFactory::BuildServiceInstanceFor(content::BrowserContext * context) Line 37   C++
    libcef.dll!BrowserContextKeyedServiceFactory::BuildServiceInstanceFor(void * context) Line 94   C++
    libcef.dll!KeyedServiceFactory::GetServiceForContext(void * context, bool create) Line 93   C++
    libcef.dll!AccountConsistencyModeManagerFactory::GetForProfile(Profile * profile) Line 20   C++
    [Inline Frame] libcef.dll!AccountConsistencyModeManager::GetForProfile(Profile * profile) Line 84   C++
    libcef.dll!AccountConsistencyModeManager::GetMethodForProfile(Profile * profile) Line 124   C++
    libcef.dll!IdentityManagerFactory::BuildServiceInstanceFor(content::BrowserContext * context) Line 119   C++
    libcef.dll!BrowserContextKeyedServiceFactory::BuildServiceInstanceFor(void * context) Line 94   C++
    libcef.dll!KeyedServiceFactory::GetServiceForContext(void * context, bool create) Line 93   C++
    libcef.dll!IdentityManagerFactory::GetForProfile(Profile * profile) Line 83   C++
    libcef.dll!enterprise_connectors::RealtimeReportingClient::RealtimeReportingClient(content::BrowserContext * context) Line 78   C++
    libcef.dll!BrowserContextKeyedServiceFactory::BuildServiceInstanceFor(void * context) Line 94   C++
    libcef.dll!KeyedServiceFactory::GetServiceForContext(void * context, bool create) Line 93   C++
    libcef.dll!enterprise_connectors::RealtimeReportingClientFactory::GetForProfile(content::BrowserContext * context) Line 20   C++
    libcef.dll!enterprise_connectors::ExtensionInstallEventRouter::ExtensionInstallEventRouter(content::BrowserContext * context) Line 26   C++
    libcef.dll!enterprise_connectors::ConnectorsServiceFactory::BuildServiceInstanceFor(content::BrowserContext * context) Line 559   C++
    libcef.dll!BrowserContextKeyedServiceFactory::BuildServiceInstanceFor(void * context) Line 94   C++
    libcef.dll!KeyedServiceFactory::GetServiceForContext(void * context, bool create) Line 93   C++
    libcef.dll!enterprise_connectors::ConnectorsServiceFactory::GetForBrowserContext(content::BrowserContext * context) Line 546   C++
    libcef.dll!enterprise_connectors::ContentAnalysisDelegate::IsEnabled(Profile * profile, GURL url, enterprise_connectors::ContentAnalysisDelegate::Data * data, enterprise_connectors::AnalysisConnector connector) Line 237   C++
    libcef.dll!FileSelectHelper::PerformContentAnalysisIfNeeded(std::Cr::vector<mojo::StructPtr<blink::mojom::FileChooserFileInfo>,std::Cr::allocator<mojo::StructPtr<blink::mojom::FileChooserFileInfo>>> list) Line 370   C++
    libcef.dll!FileSelectHelper::CheckIfPolicyAllowed(std::Cr::vector<mojo::StructPtr<blink::mojom::FileChooserFileInfo>,std::Cr::allocator<mojo::StructPtr<blink::mojom::FileChooserFileInfo>>> list) Line 356   C++
    libcef.dll!FileSelectHelper::ConvertToFileChooserFileInfoList(const std::Cr::vector<ui::SelectedFileInfo,std::Cr::allocator<ui::SelectedFileInfo>> & files) Line 339   C++
    libcef.dll!FileSelectHelper::FileSelectedWithExtraInfo(const ui::SelectedFileInfo & file, int index, void * params) Line 203   C++
    libcef.dll!FileSelectHelper::FileSelected(const base::FilePath & path, int index, void * params) Line 167   C++
    libcef.dll!CefSelectFileDialogListener::FileSelected(const base::FilePath & path, int index, void * params) Line 230   C++
    libcef.dll!ui::`anonymous namespace'::SelectFileDialogImpl::OnSelectFileExecuted(ui::SelectFileDialog::Type type, std::Cr::unique_ptr<ui::BaseShellDialogImpl::RunState,std::Cr::default_delete<ui::BaseShellDialogImpl::RunState>> run_state, void * params, const std::Cr::vector<base::FilePath,std::Cr::allocator<base::FilePath>> & paths, int index) Line 305   C++
    [Inline Frame] libcef.dll!base::internal::FunctorTraits<void (ui::(anonymous namespace)::SelectFileDialogImpl::*)(ui::SelectFileDialog::Type, std::Cr::unique_ptr<ui::BaseShellDialogImpl::RunState,std::Cr::default_delete<ui::BaseShellDialogImpl::RunState>>, void *, const std::Cr::vector<base::FilePath,std::Cr::allocator<base::FilePath>> &, int) __attribute__((thiscall)),void>::Invoke(void(ui::`anonymous namespace'::SelectFileDialogImpl::*)(ui::SelectFileDialog::Type, std::Cr::unique_ptr<ui::BaseShellDialogImpl::RunState,std::Cr::default_delete<ui::BaseShellDialogImpl::RunState>>, void *, const std::Cr::vector<base::FilePath,std::Cr::allocator<base::FilePath>> &, int) method, scoped_refptr<ui::(anonymous namespace)::SelectFileDialogImpl> && receiver_ptr, ui::SelectFileDialog::Type && args, std::Cr::unique_ptr<ui::BaseShellDialogImpl::RunState,std::Cr::default_delete<ui::BaseShellDialogImpl::RunState>> && args, void * && args, const std::Cr::vector<base::FilePath,std::Cr::allocator<base::FilePath>> & args, int && args) Line 580   C++
    [Inline Frame] libcef.dll!base::internal::InvokeHelper<0,void>::MakeItSo(void(ui::`anonymous namespace'::SelectFileDialogImpl::*)(ui::SelectFileDialog::Type, std::Cr::unique_ptr<ui::BaseShellDialogImpl::RunState,std::Cr::default_delete<ui::BaseShellDialogImpl::RunState>>, void *, const std::Cr::vector<base::FilePath,std::Cr::allocator<base::FilePath>> &, int) && functor, scoped_refptr<ui::(anonymous namespace)::SelectFileDialogImpl> && args, ui::SelectFileDialog::Type && args, std::Cr::unique_ptr<ui::BaseShellDialogImpl::RunState,std::Cr::default_delete<ui::BaseShellDialogImpl::RunState>> && args, void * && args, const std::Cr::vector<base::FilePath,std::Cr::allocator<base::FilePath>> & args, int && args) Line 749   C++
    [Inline Frame] libcef.dll!base::internal::Invoker<base::internal::BindState<void (ui::(anonymous namespace)::SelectFileDialogImpl::*)(ui::SelectFileDialog::Type, std::Cr::unique_ptr<ui::BaseShellDialogImpl::RunState,std::Cr::default_delete<ui::BaseShellDialogImpl::RunState>>, void *, const std::Cr::vector<base::FilePath,std::Cr::allocator<base::FilePath>> &, int) __attribute__((thiscall)),scoped_refptr<ui::(anonymous namespace)::SelectFileDialogImpl>,ui::SelectFileDialog::Type,std::Cr::unique_ptr<ui::BaseShellDialogImpl::RunState,std::Cr::default_delete<ui::BaseShellDialogImpl::RunState>>,base::internal::UnretainedWrapper<void>>,void (const std::Cr::vector<base::FilePath,std::Cr::allocator<base::FilePath>> &, int)>::RunImpl(void(ui::`anonymous namespace'::SelectFileDialogImpl::*)(ui::SelectFileDialog::Type, std::Cr::unique_ptr<ui::BaseShellDialogImpl::RunState,std::Cr::default_delete<ui::BaseShellDialogImpl::RunState>>, void *, const std::Cr::vector<base::FilePath,std::Cr::allocator<base::FilePath>> &, int) && functor, std::Cr::tuple<scoped_refptr<ui::(anonymous namespace)::SelectFileDialogImpl>,ui::SelectFileDialog::Type,std::Cr::unique_ptr<ui::BaseShellDialogImpl::RunState,std::Cr::default_delete<ui::BaseShellDialogImpl::RunState>>,base::internal::UnretainedWrapper<void>> && bound, std::Cr::integer_sequence<unsigned int,0,1,2,3> unbound_args, const std::Cr::vector<base::FilePath,std::Cr::allocator<base::FilePath>> & unbound_args, int &&) Line 822   C++
    libcef.dll!base::internal::Invoker<base::internal::BindState<void (ui::(anonymous namespace)::SelectFileDialogImpl::*)(ui::SelectFileDialog::Type, std::Cr::unique_ptr<ui::BaseShellDialogImpl::RunState,std::Cr::default_delete<ui::BaseShellDialogImpl::RunState>>, void *, const std::Cr::vector<base::FilePath,std::Cr::allocator<base::FilePath>> &, int) __attribute__((thiscall)),scoped_refptr<ui::(anonymous namespace)::SelectFileDialogImpl>,ui::SelectFileDialog::Type,std::Cr::unique_ptr<ui::BaseShellDialogImpl::RunState,std::Cr::default_delete<ui::BaseShellDialogImpl::RunState>>,base::internal::UnretainedWrapper<void>>,void (const std::Cr::vector<base::FilePath,std::Cr::allocator<base::FilePath>> &, int)>::RunOnce(base::internal::BindStateBase * base, const std::Cr::vector<base::FilePath,std::Cr::allocator<base::FilePath>> & unbound_args, int unbound_args) Line 791   C++
    [Inline Frame] libcef.dll!base::OnceCallback<void (const std::Cr::vector<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>,std::Cr::allocator<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>>> &, blink::ServiceWorkerStatusCode)>::Run(const std::Cr::vector<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>,std::Cr::allocator<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>>> & args, blink::ServiceWorkerStatusCode args) Line 145   C++
    [Inline Frame] libcef.dll!base::internal::FunctorTraits<base::OnceCallback<void (const std::Cr::vector<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>,std::Cr::allocator<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>>> &, blink::ServiceWorkerStatusCode)>,void>::Invoke(base::OnceCallback<void (const std::Cr::vector<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>,std::Cr::allocator<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>>> &, blink::ServiceWorkerStatusCode)> && callback, std::Cr::vector<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>,std::Cr::allocator<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>>> && args, blink::ServiceWorkerStatusCode && args) Line 683   C++
    [Inline Frame] libcef.dll!base::internal::InvokeHelper<0,void>::MakeItSo(base::OnceCallback<void (const std::Cr::vector<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>,std::Cr::allocator<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>>> &, blink::ServiceWorkerStatusCode)> && functor, std::Cr::vector<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>,std::Cr::allocator<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>>> && args, blink::ServiceWorkerStatusCode && args) Line 749   C++
    [Inline Frame] libcef.dll!base::internal::Invoker<base::internal::BindState<base::OnceCallback<void (const std::Cr::vector<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>,std::Cr::allocator<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>>> &, blink::ServiceWorkerStatusCode)>,std::Cr::vector<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>,std::Cr::allocator<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>>>,blink::ServiceWorkerStatusCode>,void ()>::RunImpl(base::OnceCallback<void (const std::Cr::vector<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>,std::Cr::allocator<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>>> &, blink::ServiceWorkerStatusCode)> && functor, std::Cr::tuple<std::Cr::vector<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>,std::Cr::allocator<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>>>,blink::ServiceWorkerStatusCode> && bound, std::Cr::integer_sequence<unsigned int,0,1>) Line 822   C++
    libcef.dll!base::internal::Invoker<base::internal::BindState<base::OnceCallback<void (const std::Cr::vector<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>,std::Cr::allocator<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>>> &, blink::ServiceWorkerStatusCode)>,std::Cr::vector<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>,std::Cr::allocator<std::Cr::pair<long long,std::Cr::basic_string<char,std::Cr::char_traits<char>,std::Cr::allocator<char>>>>>,blink::ServiceWorkerStatusCode>,void ()>::RunOnce(base::internal::BindStateBase * base) Line 791   C++
    [Inline Frame] libcef.dll!base::OnceCallback<void ()>::Run() Line 145   C++
    libcef.dll!base::TaskAnnotator::RunTaskImpl(base::PendingTask & pending_task) Line 135   C++
    [Inline Frame] libcef.dll!base::TaskAnnotator::RunTask(perfetto::StaticString event_name, base::PendingTask & pending_task, base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl::<lambda_0> && args) Line 74   C++
    libcef.dll!base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::sequence_manager::LazyNow * continuation_lazy_now) Line 428   C++
    libcef.dll!base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() Line 298   C++
    libcef.dll!base::MessagePumpForUI::DoRunLoop() Line 215   C++
    libcef.dll!base::MessagePumpWin::Run(base::MessagePump::Delegate * delegate) Line 79   C++
    libcef.dll!base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool application_tasks_allowed, base::TimeDelta timeout) Line 581   C++
    libcef.dll!base::RunLoop::Run(const base::Location & location) Line 141   C++
    libcef.dll!CefMainRunner::RunMessageLoop() Line 282   C++



[magreenblatt]

Here is the call stack of the crash in Windows in release mode:

Thanks. Please add a bug with reproduction steps, stack trace and linking to this thread.