Crash Report

[benjamin238]

IMPORTANT: Your crash has already been automatically reported to our crash system. Please file this bug only if you can provide more information about it.

Brave Version: 1.49.132 Chromium: 111.0.5563.147
Operating System: Windows NT 10.0.19045

URL (if applicable) where crash occurred: google.com, but happens with any website

Can you reproduce this crash? Yes

What steps will reproduce this crash? (If it's not reproducible, what were you doing just before the crash?)

1. Open a private browsing tab
2. Browse anything as normal in that tab
3. Browser crashes at random. Opening a new tab within the private browsing window seems to trigger it the most.

chrome_debug.log

DO NOT CHANGE BELOW THIS LINE
Crash ID: crash/6ddb0000-0385-da09-0000-000000000000

[bsclifton]

Backtrace link here:
https://brave.sp.backtrace.io/p/brave/debug?filters=(_deleted%3D0%2C_rxid%3D%226ddb0000-0385-da09-0000-000000000000%22)&fingerprint=cb5c365429071fb6f0f3e56ec596d2ca052642303947276ffa3dc47dd215b51d&debug=(%2248cfb02%22,0,0)

@benjamin238 are you low on memory or disk space? Seems it failed right after malloc

[benjamin238]

No, I have enough disk space and memory. I've tried restarting my PC with nothing open and I can still reproduce the problem.

[iefremov]

The stack is apparently corrupted, @benjamin238 if it happens frequently can you please upload more crash reports and shared IDs?

[ 00 ] content::IndexedDBFactory::GetInMemoryDBSize(storage::BucketLocator const &) ( indexed_db_factory.cc:576 )
[ 01 ] base::Histogram::Factory::Build() ( histogram.cc:242 )
[ 02 ] static void * allocator_shim::internal::PartitionMalloc(const struct allocator_shim::AllocatorDispatch *, unsigned __int64, void *) ( allocator_shim_default_dispatch_to_partition_alloc.cc:303 )
[ 03 ] static void * allocator_shim::internal::PartitionMalloc(const struct allocator_shim::AllocatorDispatch *, unsigned __int64, void *) ( allocator_shim_default_dispatch_to_partition_alloc.cc:303 )
[ 04 ] static void * allocator_shim::internal::PartitionMalloc(const struct allocator_shim::AllocatorDispatch *, unsigned __int64, void *) ( allocator_shim_default_dispatch_to_partition_alloc.cc:303 )
[ 05 ] static void allocator_shim::internal::PartitionFree(const struct allocator_shim::AllocatorDispatch *, void *, void *) ( allocator_shim_default_dispatch_to_partition_alloc.cc:441 )
[ 06 ] static void * allocator_shim::internal::PartitionMalloc(const struct allocator_shim::AllocatorDispatch *, unsigned __int64, void *) ( allocator_shim_default_dispatch_to_partition_alloc.cc:303 )
[ 07 ] malloc ( allocator_shim_override_ucrt_symbols_win.h:71 )
[ 08 ] _tailMerge_esent.dll
[ 09 ] net::SchemefulSite::SchemefulSite(net::SchemefulSite const &) ( schemeful_site.cc:76 )
[ 10 ] static void allocator_shim::internal::PartitionFree(const struct allocator_shim::AllocatorDispatch *, void *, void *) ( allocator_shim_default_dispatch_to_partition_alloc.cc:441 )
[ 11 ] woff2::ComputeULongSum(unsigned char const *,unsigned __int64) ( woff2_common.cc:24 )
[ 12 ] static __int64 content::IndexedDBContextImpl::ReadUsageFromDisk(const struct storage::BucketLocator & const) ( indexed_db_context_impl.cc:1082 )
[ 13 ] _tailMerge_esent.dll
[ 14 ] content::IndexedDBContextImpl::QueryDiskAndUpdateQuotaUsage(storage::BucketLocator const &) ( indexed_db_context_impl.cc:1102 )
[ 15 ] operator new(unsigned __int64) ( new_scalar.cpp:35 )
[ 16 ] struct std::Cr::pair<std::Cr::__tree_iterator<storage::BucketLocator,std::Cr::__tree_node<storage::BucketLocator,void *> *,long long>,bool> std::Cr::__tree<storage::BucketLocator,std::Cr::less<storage::BucketLocator>,std::Cr::allocator<storage::BucketLocator> >::__emplace_unique_key_args<storage::BucketLocator,const storage::BucketLocator &>(const struct storage::BucketLocator & const, const struct storage::BucketLocator & const) ( __tree:2114 )
[ 17 ] content::IndexedDBContextImpl::FactoryOpened(storage::BucketLocator const &) ( indexed_db_context_impl.cc:932 )
[ 18 ] static struct std::Cr::pair<std::Cr::__wrap_iter<std::Cr::pair<base::IdType<storage::BucketTag,long long,0,1>,std::Cr::unique_ptr<content::IndexedDBBucketState,std::Cr::default_delete<content::IndexedDBBucketState> > > *>,bool> base::internal::flat_tree<base::IdType<storage::BucketTag,long long,0,1>,base::internal::GetFirst,std::Cr::less<void>,std::Cr::vector<std::Cr::pair<base::IdType<storage::BucketTag,long long,0,1>,std::Cr::unique_ptr<content::IndexedDBBucketState,std::Cr::default_delete<content::IndexedDBBucketState> > >,std::Cr::allocator<std::Cr::pair<base::IdType<storage::BucketTag,long long,0,1>,std::Cr::unique_ptr<content::IndexedDBBucketState,std::Cr::default_delete<content::IndexedDBBucketState> > > > > >::emplace<const base::IdType<storage::BucketTag,long long,0,1> &,std::Cr::unique_ptr<content::IndexedDBBucketState,std::Cr::default_delete<content::IndexedDBBucketState> > >(const class base::IdType<storage::BucketTag,long long,0,1> & const, class std::Cr::unique_ptr<content::IndexedDBBucketState,std::Cr::default_delete<content::IndexedDBBucketState> > *) ( flat_tree.h:867 )
[ 19 ] content::IndexedDBFactory::GetOrOpenBucketFactory(storage::BucketLocator const &,base::FilePath const &,bool) ( indexed_db_factory.cc:785 )
[ 20 ] _tailMerge_esent.dll
[ 21 ] _tailMerge_esent.dll
[ 22 ] _tailMerge_esent.dll

[iefremov]

stale