78a40942-7628-4a1f-8a03-99b59c3251d6.dmp
Thread 4 (crashed)
 0  Google Chrome Framework!partition_alloc::internal::FreelistCorruptionDetected(unsigned long) [partition_freelist_entry.cc : 15 + 0x0]
 1  Google Chrome Framework!allocator_shim::internal::PartitionAllocFunctionsInternal<(partition_alloc::internal::AllocFlags)16, (partition_alloc::internal::FreeFlags)2>::Calloc(unsigned long, unsigned long, void*) [partition_freelist_entry.h : 0 + 0x44]
 2  Google Chrome Framework!allocator_shim::internal::PartitionAllocFunctionsInternal<(partition_alloc::internal::AllocFlags)16, (partition_alloc::internal::FreeFlags)2>::Calloc(unsigned long, unsigned long, void*) [partition_freelist_entry.h : 0 + 0x44]
 3  Google Chrome Framework!base::allocator::dispatcher::internal::DispatcherImpl<base::PoissonAllocationSampler>::AllocZeroInitializedFn(unsigned long, unsigned long, void*) [dispatcher_internal.h : 148 + 0x4]
 4  CoreGraphics + 0x20590
 5  CoreGraphics + 0x20590
 6  CoreGraphics + 0x20544
 7  CoreGraphics + 0x200c4
 8  CoreGraphics + 0x1ff1c
 9  CoreGraphics + 0x1f584
10  Google Chrome Framework!SkScalerContext_Mac::generateImage(SkGlyph const&, void*) [SkScalerContext_mac_ct.cpp : 226 + 0x8]
11  Google Chrome Framework!SkStrikeServerImpl::writeStrikeData(std::__Cr::vector<unsigned char, std::__Cr::allocator<unsigned char>>*) [SkGlyph.cpp : 185 + 0x8]
12  Google Chrome Framework!gpu::raster::ClientFontManager::Serialize() [SkChromeRemoteGlyphCache.cpp : 562 + 0x4]
13  Google Chrome Framework!gpu::raster::RasterImplementation::RasterCHROMIUM(cc::DisplayItemList const*, cc::ImageProvider*, gfx::Size const&, gfx::Rect const&, gfx::Rect const&, gfx::Vector2dF const&, gfx::Vector2dF const&, bool, base::flat_map<cc::ElementId, gfx::PointF, std::__Cr::less<void>, std::__Cr::vector<std::__Cr::pair<cc::ElementId, gfx::PointF>, std::__Cr::allocator<std::__Cr::pair<cc::ElementId, gfx::PointF>>>> const*, unsigned long*) [raster_implementation.cc : 378 + 0x0]
14  Google Chrome Framework!gpu::raster::RasterImplementation::RasterCHROMIUM(cc::DisplayItemList const*, cc::ImageProvider*, gfx::Size const&, gfx::Rect const&, gfx::Rect const&, gfx::Vector2dF const&, gfx::Vector2dF const&, bool, base::flat_map<cc::ElementId, gfx::PointF, std::__Cr::less<void>, std::__Cr::vector<std::__Cr::pair<cc::ElementId, gfx::PointF>, std::__Cr::allocator<std::__Cr::pair<cc::ElementId, gfx::PointF>>>> const*, unsigned long*) [raster_implementation.cc : 378 + 0x0]
15  Google Chrome Framework!cc::GpuRasterBufferProvider::RasterBufferImpl::RasterizeSource(cc::RasterSource const*, gfx::Rect const&, gfx::Rect const&, gfx::AxisTransform2d const&, cc::RasterSource::PlaybackSettings const&) [gpu_raster_buffer_provider.cc : 386 + 0x24]
16  Google Chrome Framework!cc::(anonymous namespace)::RasterTaskImpl::RunOnWorkerThread() [tile_manager.cc : 157 + 0x0]
17  Google Chrome Framework!cc::(anonymous namespace)::RasterTaskImpl::RunOnWorkerThread() [tile_manager.cc : 157 + 0x0]
18  Google Chrome Framework!cc::CategorizedWorkerPoolJob::Run(base::span<cc::TaskCategory const, 18446744073709551615ul, cc::TaskCategory const*>, base::JobDelegate*) [categorized_worker_pool.cc : 277 + 0x8]
19  Google Chrome Framework!base::internal::Invoker<base::internal::FunctorTraits<base::internal::JobTaskSource::JobTaskSource(base::Location const&, base::TaskTraits const&, base::RepeatingCallback<void (base::JobDelegate*)>, base::RepeatingCallback<unsigned long (unsigned long)>, base::internal::PooledTaskRunnerDelegate*)::$_0 const&, base::internal::JobTaskSource*>, base::internal::BindState<false, false, false, base::internal::JobTaskSource::JobTaskSource(base::Location const&, base::TaskTraits const&, base::RepeatingCallback<void (base::JobDelegate*)>, base::RepeatingCallback<unsigned long (unsigned long)>, base::internal::PooledTaskRunnerDelegate*)::$_0, base::internal::UnretainedWrapper<base::internal::JobTaskSource, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::Run(base::internal::BindStateBase*) [callback.h : 344 + 0x0]
20  Google Chrome Framework!base::internal::TaskTracker::RunAndPopNextTask(base::internal::RegisteredTaskSource) [task_tracker.cc : 706 + 0x14]
21  Google Chrome Framework!base::internal::TaskTracker::RunAndPopNextTask(base::internal::RegisteredTaskSource) [task_tracker.cc : 706 + 0x14]
22  Google Chrome Framework!base::internal::WorkerThread::RunWorker() [worker_thread.cc : 473 + 0x8]
23  Google Chrome Framework!base::internal::WorkerThread::RunPooledWorker() [worker_thread.cc : 359 + 0x0]
24  Google Chrome Framework!base::internal::WorkerThread::ThreadMain() [worker_thread.cc : 339 + 0x4]
25  Google Chrome Framework!base::(anonymous namespace)::ThreadFunc(void*) [platform_thread_posix.cc : 103 + 0xc]
26  libsystem_pthread.dylib + 0x1b7c

9e038f09-8976-45b5-8199-eae8e159ef68.dmp
Thread 4 (crashed)
 0  Google Chrome Framework!partition_alloc::internal::CorruptionDetected() [in_slot_metadata.cc : 65 + 0x0]
 1  Google Chrome Framework!partition_alloc::internal::InSlotMetadata::DoubleFreeOrCorruptionDetected(unsigned int, unsigned long, partition_alloc::internal::SlotSpanMetadata<(partition_alloc::internal::MetadataKind)1>*) [in_slot_metadata.cc : 96 + 0x0]
 2  Google Chrome Framework!allocator_shim::internal::PartitionAllocFunctionsInternal<(partition_alloc::internal::AllocFlags)16, (partition_alloc::internal::FreeFlags)2>::TryFreeDefault(void*, void*) [in_slot_metadata.h : 268 + 0x8]
 3  Google Chrome Framework!allocator_shim::internal::PartitionAllocFunctionsInternal<(partition_alloc::internal::AllocFlags)16, (partition_alloc::internal::FreeFlags)2>::TryFreeDefault(void*, void*) [in_slot_metadata.h : 268 + 0x8]
 4  Google Chrome Framework!av1_get_one_pass_rt_params [ratectrl.c : 0 + 0x4]
 5  Google Chrome Framework!av1_encode_strategy [encode_strategy.c : 1487 + 0x8]
 6  Google Chrome Framework!av1_get_compressed_data [encoder.c : 5228 + 0x8]
 7  Google Chrome Framework!encoder_encode [av1_cx_iface.c : 3504 + 0x8]
 8  Google Chrome Framework!aom_codec_encode [aom_encoder.c : 191 + 0x8]
 9  Google Chrome Framework!webrtc::(anonymous namespace)::LibaomAv1Encoder::Encode(webrtc::VideoFrame const&, std::__Cr::vector<webrtc::VideoFrameType, std::__Cr::allocator<webrtc::VideoFrameType>> const*) [libaom_av1_encoder.cc : 762 + 0xc]
10  Google Chrome Framework!webrtc::VideoStreamEncoder::EncodeVideoFrame(webrtc::VideoFrame const&, long long) [video_stream_encoder.cc : 2096 + 0x0]
11  Google Chrome Framework!webrtc::VideoStreamEncoder::MaybeEncodeVideoFrame(webrtc::VideoFrame const&, long long) [video_stream_encoder.cc : 1935 + 0xc]
12  Google Chrome Framework!webrtc::VideoStreamEncoder::OnFrame(webrtc::Timestamp, bool, webrtc::VideoFrame const&) [video_stream_encoder.cc : 1625 + 0xc]
13  Google Chrome Framework!void absl::internal_any_invocable::RemoteInvoker<false, void, webrtc::(anonymous namespace)::FrameCadenceAdapterImpl::OnFrame(webrtc::VideoFrame const&)::$_0&&>(absl::internal_any_invocable::TypeErasedState*) [frame_cadence_adapter.cc : 1020 + 0x4]
14  Google Chrome Framework!blink::WebRtcTaskQueue::RunTask(absl::AnyInvocable<void () &&>) [any_invocable.h : 762 + 0x4]
15  Google Chrome Framework!void base::internal::DecayedFunctorTraits<void (blink::WebRtcTaskQueue::*)(absl::AnyInvocable<void () &&>), blink::WebRtcTaskQueue*, absl::AnyInvocable<void () &&>&&>::Invoke<void (blink::WebRtcTaskQueue::*)(absl::AnyInvocable<void () &&>), blink::WebRtcTaskQueue*, absl::AnyInvocable<void () &&>>(void (blink::WebRtcTaskQueue::*)(absl::AnyInvocable<void () &&>), blink::WebRtcTaskQueue*&&, absl::AnyInvocable<void () &&>&&) [bind_internal.h : 731 + 0x8]
16  Google Chrome Framework!base::internal::Invoker<base::internal::FunctorTraits<void (blink::WebRtcTaskQueue::*&&)(absl::AnyInvocable<void () &&>), blink::WebRtcTaskQueue*, absl::AnyInvocable<void () &&>&&>, base::internal::BindState<true, true, false, void (blink::WebRtcTaskQueue::*)(absl::AnyInvocable<void () &&>), base::internal::RetainedRefWrapper<blink::WebRtcTaskQueue>, absl::AnyInvocable<void () &&>>, void ()>::RunOnce(base::internal::BindStateBase*) [bind_internal.h : 923 + 0x4]
17  Google Chrome Framework!base::internal::TaskTracker::RunSkipOnShutdown(base::internal::Task&, base::TaskTraits const&, base::internal::TaskSource*, base::internal::SequenceToken const&) [callback.h : 156 + 0x4]
18  Google Chrome Framework!base::internal::TaskTracker::RunSkipOnShutdown(base::internal::Task&, base::TaskTraits const&, base::internal::TaskSource*, base::internal::SequenceToken const&) [callback.h : 156 + 0x4]
19  Google Chrome Framework!base::internal::TaskTracker::RunAndPopNextTask(base::internal::RegisteredTaskSource) [task_tracker.cc : 706 + 0x14]
20  Google Chrome Framework!base::internal::WorkerThread::RunWorker() [worker_thread.cc : 473 + 0x8]
21  Google Chrome Framework!base::internal::WorkerThread::RunPooledWorker() [worker_thread.cc : 359 + 0x0]
22  Google Chrome Framework!base::internal::WorkerThread::ThreadMain() [worker_thread.cc : 339 + 0x4]
23  Google Chrome Framework!base::(anonymous namespace)::ThreadFunc(void*) [platform_thread_posix.cc : 103 + 0xc]
24  libsystem_pthread.dylib + 0x1b7c

10632e25-608c-4274-b3fd-7c5255fe0a9b.dmp
Thread 0 (crashed)
 0  Google Chrome Framework!partition_alloc::internal::FreelistCorruptionDetected(unsigned long) [partition_freelist_entry.cc : 15 + 0x0]
 1  Google Chrome Framework!partition_alloc::internal::SlotSpanMetadata<(partition_alloc::internal::MetadataKind)0>::SortFreelist(partition_alloc::PartitionRoot*) [partition_freelist_entry.h : 0 + 0x4]
 2  Google Chrome Framework!partition_alloc::PartitionRoot::PurgeMemory(int) [partition_bucket.cc : 1259 + 0x8]
 3  Google Chrome Framework!partition_alloc::PartitionRoot::PurgeMemory(int) [partition_bucket.cc : 1259 + 0x8]
 4  Google Chrome Framework!partition_alloc::MemoryReclaimer::ReclaimFast() [memory_reclaimer.cc : 72 + 0x4]
 5  Google Chrome Framework!base::allocator::MemoryReclaimerSupport::Run() [partition_alloc_support.cc : 213 + 0x0]
 6  Google Chrome Framework!base::internal::Invoker<base::internal::FunctorTraits<content::ServiceWorkerContextWrapper::RegisterServiceWorker(GURL const&, blink::StorageKey const&, blink::mojom::ServiceWorkerRegistrationOptions const&, base::OnceCallback<void (blink::ServiceWorkerStatusCode)>)::$_0&&, base::OnceCallback<void (blink::ServiceWorkerStatusCode)>&&>, base::internal::BindState<false, false, false, content::ServiceWorkerContextWrapper::RegisterServiceWorker(GURL const&, blink::StorageKey const&, blink::mojom::ServiceWorkerRegistrationOptions const&, base::OnceCallback<void (blink::ServiceWorkerStatusCode)>)::$_0, base::OnceCallback<void (blink::ServiceWorkerStatusCode)>>, void (blink::ServiceWorkerStatusCode, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&, long long)>::RunOnce(base::internal::BindStateBase*, blink::ServiceWorkerStatusCode, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>> const&, long long) [callback.h : 156 + 0x4]
 7  Google Chrome Framework!non-virtual thunk to base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() [callback.h : 156 + 0x4]
 8  Google Chrome Framework!non-virtual thunk to base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() [callback.h : 156 + 0x4]
 9  Google Chrome Framework!base::MessagePumpDefault::Run(base::MessagePump::Delegate*) [message_pump_default.cc : 42 + 0x8]
10  Google Chrome Framework!base::RunLoop::Run(base::Location const&) [run_loop.cc : 0 + 0xc]
11  Google Chrome Framework!base::RunLoop::Run(base::Location const&) [run_loop.cc : 0 + 0xc]
12  Google Chrome Framework!content::RendererMain(content::MainFunctionParams) [renderer_main.cc : 356 + 0x24]
13  Google Chrome Framework!content::ContentMain(content::ContentMainParams) [content_main.cc : 374 + 0x4]
14  Google Chrome Framework!content::ContentMain(content::ContentMainParams) [content_main.cc : 374 + 0x4]
15  Google Chrome Framework!ChromeMain [chrome_main.cc : 222 + 0x4]
16  Google Chrome Helper (Renderer) + 0x9b8
17  dyld + 0x6b94

457ec388-8484-4cc5-8b80-6102e28bdd82.dmp
Thread 3 (crashed)
 0  Google Chrome Framework!partition_alloc::internal::FreelistCorruptionDetected(unsigned long) [partition_freelist_entry.cc : 15 + 0x0]
 1  Google Chrome Framework!allocator_shim::internal::PartitionAllocFunctionsInternal<(partition_alloc::internal::AllocFlags)16, (partition_alloc::internal::FreeFlags)2>::Malloc(unsigned long, void*) [partition_freelist_entry.h : 0 + 0x44]
 2  Google Chrome Framework!allocator_shim::internal::PartitionAllocFunctionsInternal<(partition_alloc::internal::AllocFlags)16, (partition_alloc::internal::FreeFlags)2>::Malloc(unsigned long, void*) [partition_freelist_entry.h : 0 + 0x44]
 3  Google Chrome Framework!base::allocator::dispatcher::internal::DispatcherImpl<base::PoissonAllocationSampler>::AllocFn(unsigned long, void*) [dispatcher_internal.h : 130 + 0x4]
 4  Google Chrome Framework!aom_malloc [aom_mem.c : 59 + 0x0]

964ac523-1a02-4264-82d2-0ec765a7b7ee.dmp
Thread 19 (crashed)
 0  Google Chrome Framework!partition_alloc::internal::FreelistCorruptionDetected(unsigned long) [partition_freelist_entry.cc : 15 + 0x0]
 1  Google Chrome Framework!partition_alloc::internal::FreelistEntry::CheckFreeListForThreadCache(unsigned long) const [partition_freelist_entry.h : 0 + 0x4]
 2  Google Chrome Framework!partition_alloc::ThreadCache::ClearBucket(partition_alloc::ThreadCache::Bucket&, unsigned long) [thread_cache.cc : 683 + 0x0]
 3  Google Chrome Framework!allocator_shim::internal::PartitionAllocFunctionsInternal<(partition_alloc::internal::AllocFlags)16, (partition_alloc::internal::FreeFlags)2>::Free(void*, void*) [thread_cache.h : 498 + 0x8]
 4  Google Chrome Framework!allocator_shim::internal::PartitionAllocFunctionsInternal<(partition_alloc::internal::AllocFlags)16, (partition_alloc::internal::FreeFlags)2>::Free(void*, void*) [thread_cache.h : 498 + 0x8]
 5  Google Chrome Framework!mojo::Message::~Message() [ref_counted.h : 53 + 0x0]
 6  Google Chrome Framework!mojo::(anonymous namespace)::ThreadSafeInterfaceEndpointClientProxy::SendMessageWithResponder(mojo::Message&, std::__Cr::unique_ptr<mojo::MessageReceiver, std::__Cr::default_delete<mojo::MessageReceiver>>) [interface_endpoint_client.cc : 111 + 0x0]
 7  Google Chrome Framework!mojo::internal::ThreadSafeForwarderBase::AcceptWithResponder(mojo::Message*, std::__Cr::unique_ptr<mojo::MessageReceiver, std::__Cr::default_delete<mojo::MessageReceiver>>) [thread_safe_forwarder_base.cc : 32 + 0x8]
 8  Google Chrome Framework!gpu::mojom::GpuChannelProxy::Flush() [gpu_channel.mojom.cc : 2178 + 0x4]
 9  Google Chrome Framework!gpu::GpuChannelHost::VerifyFlush(unsigned int) [gpu_channel_host.cc : 247 + 0x8]
10  Google Chrome Framework!gpu::CommandBufferProxyImpl::EnsureWorkVisible() [command_buffer_proxy_impl.cc : 442 + 0x4]
11  Google Chrome Framework!base::internal::Invoker<base::internal::FunctorTraits<viz::ClientResourceProvider::PrepareSendToParent(std::__Cr::vector<base::IdType<viz::ResourceIdTypeMarker, unsigned int, 0u, 1u>, std::__Cr::allocator<base::IdType<viz::ResourceIdTypeMarker, unsigned int, 0u, 1u>>> const&, std::__Cr::vector<viz::TransferableResource, std::__Cr::allocator<viz::TransferableResource>>*, viz::RasterContextProvider*)::$_0&&, scoped_refptr<viz::RasterContextProvider>&&>, base::internal::BindState<false, false, false, viz::ClientResourceProvider::PrepareSendToParent(std::__Cr::vector<base::IdType<viz::ResourceIdTypeMarker, unsigned int, 0u, 1u>, std::__Cr::allocator<base::IdType<viz::ResourceIdTypeMarker, unsigned int, 0u, 1u>>> const&, std::__Cr::vector<viz::TransferableResource, std::__Cr::allocator<viz::TransferableResource>>*, viz::RasterContextProvider*)::$_0, scoped_refptr<viz::RasterContextProvider>>, void (std::__Cr::vector<signed char*, std::__Cr::allocator<signed char*>>*)>::RunOnce(base::internal::BindStateBase*, std::__Cr::vector<signed char*, std::__Cr::allocator<signed char*>>*) [client_resource_provider.cc : 249 + 0xc]
12  Google Chrome Framework!viz::ClientResourceProvider::PrepareSendToParentInternal(std::__Cr::vector<base::IdType<viz::ResourceIdTypeMarker, unsigned int, 0u, 1u>, std::__Cr::allocator<base::IdType<viz::ResourceIdTypeMarker, unsigned int, 0u, 1u>>> const&, std::__Cr::vector<viz::TransferableResource, std::__Cr::allocator<viz::TransferableResource>>*, base::OnceCallback<void (std::__Cr::vector<signed char*, std::__Cr::allocator<signed char*>>*)>) [callback.h : 156 + 0x8]
13  Google Chrome Framework!blink::VideoFrameSubmitter::SubmitFrame(viz::BeginFrameAck const&, scoped_refptr<media::VideoFrame>) [client_resource_provider.cc : 244 + 0xc]
14  Google Chrome Framework!blink::VideoFrameSubmitter::OnBeginFrame(viz::BeginFrameArgs const&, WTF::HashMap<unsigned int, viz::FrameTimingDetails, WTF::HashTraits<unsigned int>, WTF::HashTraits<viz::FrameTimingDetails>, WTF::PartitionAllocator> const&, WTF::Vector<viz::ReturnedResource, 0u, WTF::PartitionAllocator>) [video_frame_submitter.cc : 522 + 0x8]
15  Google Chrome Framework!blink::VideoFrameSinkBundle::FlushNotifications(WTF::Vector<mojo::StructPtr<viz::mojom::blink::BundledReturnedResources>, 0u, WTF::PartitionAllocator>, WTF::Vector<mojo::StructPtr<viz::mojom::blink::BeginFrameInfo>, 0u, WTF::PartitionAllocator>, WTF::Vector<mojo::StructPtr<viz::mojom::blink::BundledReturnedResources>, 0u, WTF::PartitionAllocator>) [video_frame_sink_bundle.cc : 232 + 0xc]
16  Google Chrome Framework!viz::mojom::blink::FrameSinkBundleClientStubDispatch::Accept(viz::mojom::blink::FrameSinkBundleClient*, mojo::Message*) [frame_sink_bundle.mojom-blink.cc : 1060 + 0x10]
17  Google Chrome Framework!mojo::InterfaceEndpointClient::HandleIncomingMessageThunk::Accept(mojo::Message*) [interface_endpoint_client.cc : 1059 + 0x8]
18  Google Chrome Framework!mojo::InterfaceEndpointClient::HandleIncomingMessageThunk::Accept(mojo::Message*) [interface_endpoint_client.cc : 1059 + 0x8]
19  Google Chrome Framework!mojo::InterfaceEndpointClient::HandleIncomingMessage(mojo::Message*) [message_dispatcher.cc : 43 + 0xc]
20  Google Chrome Framework!mojo::internal::MultiplexRouter::Accept(mojo::Message*) [multiplex_router.cc : 1120 + 0x8]
21  Google Chrome Framework!mojo::MessageDispatcher::Accept(mojo::Message*) [message_dispatcher.cc : 43 + 0xc]
22  Google Chrome Framework!base::internal::Invoker<base::internal::FunctorTraits<void (mojo::Connector::* const&)(char const*, unsigned int), mojo::Connector*, char const* const&>, base::internal::BindState<true, true, false, void (mojo::Connector::*)(char const*, unsigned int), base::internal::UnretainedWrapper<mojo::Connector, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>, base::internal::UnretainedWrapper<char const, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void (unsigned int)>::Run(base::internal::BindStateBase*, unsigned int) [connector.cc : 561 + 0x1c]
23  Google Chrome Framework!base::internal::Invoker<base::internal::FunctorTraits<void (mojo::SimpleWatcher::*&&)(int, unsigned int, mojo::HandleSignalsState const&), base::WeakPtr<mojo::SimpleWatcher>&&, int&&, unsigned int&&, mojo::HandleSignalsState&&>, base::internal::BindState<true, true, false, void (mojo::SimpleWatcher::*)(int, unsigned int, mojo::HandleSignalsState const&), base::WeakPtr<mojo::SimpleWatcher>, int, unsigned int, mojo::HandleSignalsState>, void ()>::RunOnce(base::internal::BindStateBase*) [callback.h : 344 + 0x8]
24  Google Chrome Framework!non-virtual thunk to base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() [callback.h : 156 + 0x4]
25  Google Chrome Framework!base::MessagePumpDefault::Run(base::MessagePump::Delegate*) [message_pump_default.cc : 42 + 0x8]
26  Google Chrome Framework!base::RunLoop::Run(base::Location const&) [run_loop.cc : 0 + 0xc]
27  Google Chrome Framework!base::RunLoop::Run(base::Location const&) [run_loop.cc : 0 + 0xc]
28  Google Chrome Framework!base::Thread::Run(base::RunLoop*) [thread.cc : 344 + 0x24]
29  Google Chrome Framework!base::(anonymous namespace)::ThreadFunc(void*) [platform_thread_posix.cc : 103 + 0xc]
30  libsystem_pthread.dylib + 0x6c08
31  libsystem_pthread.dylib + 0x6c08

efd440cb-a79c-49e7-b17c-7d53193166c2.dmp
Thread 25 (crashed)
 0  Google Chrome Framework!partition_alloc::internal::FreelistCorruptionDetected(unsigned long) [partition_freelist_entry.cc : 15 + 0x0]
 1  Google Chrome Framework!partition_alloc::internal::FreelistEntry::CheckFreeListForThreadCache(unsigned long) const [partition_freelist_entry.h : 0 + 0x4]
 2  Google Chrome Framework!partition_alloc::ThreadCache::ClearBucket(partition_alloc::ThreadCache::Bucket&, unsigned long) [thread_cache.cc : 683 + 0x0]
 3  Google Chrome Framework!allocator_shim::internal::PartitionAllocFunctionsInternal<(partition_alloc::internal::AllocFlags)16, (partition_alloc::internal::FreeFlags)2>::Free(void*, void*) [thread_cache.h : 498 + 0x8]
 4  Google Chrome Framework!allocator_shim::internal::PartitionAllocFunctionsInternal<(partition_alloc::internal::AllocFlags)16, (partition_alloc::internal::FreeFlags)2>::Free(void*, void*) [thread_cache.h : 498 + 0x8]
 5  Google Chrome Framework!mojo::Message::~Message() [ref_counted.h : 53 + 0x0]
 6  Google Chrome Framework!mojo::internal::MultiplexRouter::Accept(mojo::Message*) [multiplex_router.cc : 0 + 0x8]
 7  Google Chrome Framework!mojo::MessageDispatcher::Accept(mojo::Message*) [message_dispatcher.cc : 43 + 0xc]
 8  Google Chrome Framework!base::internal::Invoker<base::internal::FunctorTraits<void (mojo::Connector::* const&)(char const*, unsigned int), mojo::Connector*, char const* const&>, base::internal::BindState<true, true, false, void (mojo::Connector::*)(char const*, unsigned int), base::internal::UnretainedWrapper<mojo::Connector, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>, base::internal::UnretainedWrapper<char const, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void (unsigned int)>::Run(base::internal::BindStateBase*, unsigned int) [connector.cc : 561 + 0x1c]
 9  Google Chrome Framework!base::internal::Invoker<base::internal::FunctorTraits<void (mojo::SimpleWatcher::*&&)(int, unsigned int, mojo::HandleSignalsState const&), base::WeakPtr<mojo::SimpleWatcher>&&, int&&, unsigned int&&, mojo::HandleSignalsState&&>, base::internal::BindState<true, true, false, void (mojo::SimpleWatcher::*)(int, unsigned int, mojo::HandleSignalsState const&), base::WeakPtr<mojo::SimpleWatcher>, int, unsigned int, mojo::HandleSignalsState>, void ()>::RunOnce(base::internal::BindStateBase*) [callback.h : 344 + 0x8]
10  Google Chrome Framework!non-virtual thunk to base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() [callback.h : 156 + 0x4]
11  Google Chrome Framework!base::MessagePumpDefault::Run(base::MessagePump::Delegate*) [message_pump_default.cc : 42 + 0x8]
12  Google Chrome Framework!base::RunLoop::Run(base::Location const&) [run_loop.cc : 0 + 0xc]
13  Google Chrome Framework!base::RunLoop::Run(base::Location const&) [run_loop.cc : 0 + 0xc]
14  Google Chrome Framework!base::Thread::Run(base::RunLoop*) [thread.cc : 344 + 0x24]
15  Google Chrome Framework!base::(anonymous namespace)::ThreadFunc(void*) [platform_thread_posix.cc : 103 + 0xc]
16  libsystem_pthread.dylib + 0x6c08
17  libsystem_pthread.dylib + 0x6c08