Assigned
Status Update
No update yet.
Comments
va...@google.com
Labels: Needs-Triage-M122
an...@chromium.org
Only managed to reproduce it on Windows.
I also can't repro on Linux. Does it reproduce every time on Windows?
ap...@gmail.com
Yes, it crashes every time when using attached files
du...@me.com
I was able to consistently reproduce it on Linux by setting a specific scaling value, e.g. --force-device-scale-factor=1.2 would always lead to a crash, whereas 1.3, 1.5 or 1.8 works.
Description
Steps to reproduce the problem
Problem Description
Tab crashes when setting the CSS cursor property to "url('./test.svg'), not-allowed" and SVG file has a width or height of "128px". Only managed to reproduce it on Windows.
Additional Comments
Error part of logs: [16072:5000:0221/173258.018:ERROR:validation_errors.cc(117)] Invalid message: VALIDATION_ERROR_DESERIALIZATION_FAILED [16072:5000:0221/173258.018:ERROR:render_process_host_impl.cc(5445)] Terminating render process for bad Mojo message: Received bad user message: Validation failed for blink.mojom.WidgetHost.0 [VALIDATION_ERROR_DESERIALIZATION_FAILED] [16072:5000:0221/173258.018:ERROR:bad_message.cc(29)] Terminating renderer for bad IPC message, reason 123 [16072:5000:0221/173258.443:ERROR:interface_endpoint_client.cc(707)] Message 0 rejected by interface blink.mojom.WidgetHost
Summary
Tab crashes when setting css cursor to svg with width or height = "128px"
Custom Questions
How much crashed?
Just one tab
Is it a problem with a plugin?
No - It's the browser itself
Additional Data
Category: Crashes
Chrome Channel: Stable
Regression: N/A