Skip to content

Pressing backspace in empty CodeMirror/Monaco editor crashes tab #1118

@not-my-profile

Description

@not-my-profile

With Vanadium 148.0.7778.96 go to https://codemirror.net/ or https://microsoft.github.io/monaco-editor/ and in the example editor delete all the text, then press Backspace one more time: the tab crashes with an Aw, Snap! error. In CodeMirror it only happens after all the text is deleted, in Monaco it already happens when pressing Backspace in an empty line. Interestingly it doesn't happen in the Ace editor.

adb logcat shows this for codemirror.net:

05-07 20:21:30.073  5684  5706 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
05-07 20:21:30.073  5684  5706 F DEBUG   : Build fingerprint: 'google/lynx/lynx:16/BP4A.260205.001/2026042101:user/release-keys'
05-07 20:21:30.073  5684  5706 F DEBUG   : Kernel Release: '6.1.167-android14-11-gcb55adf25648'
05-07 20:21:30.073  5684  5706 F DEBUG   : Revision: 'MP1.0'
05-07 20:21:30.073  5684  5706 F DEBUG   : ABI: 'arm64'
05-07 20:21:30.073  5684  5706 F DEBUG   : Timestamp: 2026-05-07 20:21:29.705385955+0200
05-07 20:21:30.073  5684  5706 F DEBUG   : Process uptime: 22s
05-07 20:21:30.073  5684  5706 F DEBUG   : Executable: <unknown>
05-07 20:21:30.073  5684  5706 F DEBUG   : Cmdline: app.vanadium.browser:sandboxed_process0:org.chromium.content.app.SandboxedProcessService0:16
05-07 20:21:30.073  5684  5706 F DEBUG   : pid: 5684, tid: 5706, name: CrRendererMain  >>> app.vanadium.browser:sandboxed_process0:org.chromium.content.app.SandboxedProcessService0:16 <<<
05-07 20:21:30.073  5684  5706 F DEBUG   : uid: 90016
05-07 20:21:30.073  5684  5706 F DEBUG   : tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
05-07 20:21:30.073  5684  5706 F DEBUG   : esr: 0000000092000006 (Data Abort Exception 0x24)
05-07 20:21:30.073  5684  5706 F DEBUG   : signal 5 (SIGTRAP), code 1 (TRAP_BRKPT), fault addr --------
05-07 20:21:30.073  5684  5706 F DEBUG   :     x0  0000000000000000  x1  0000000000000000  x2  0000000000000000  x3  0000000000000001
05-07 20:21:30.073  5684  5706 F DEBUG   :     x4  00000000000001a3  x5  0000d7a7a138c2a0  x6  0000000000000000  x7  0000002400000011
05-07 20:21:30.073  5684  5706 F DEBUG   :     x8  00000000ebc84b3b  x9  ffffffffffffffff  x10 0000000000000000  x11 0000000000000056
05-07 20:21:30.073  5684  5706 F DEBUG   :     x12 0000000000000000  x13 000000007fffffff  x14 0000000000000000  x15 0000000000000000
05-07 20:21:30.073  5684  5706 F DEBUG   :     x16 0000d7a79e753070  x17 0000d7a7979d144c  x18 0000d7a7a04cc000  x19 0000d7a000ab5400
05-07 20:21:30.069  5684  5684 W CrRendererMain: type=1400 audit(0.0:30718): avc:  denied  { read } for  name="u:object_r:userdebug_or_eng_prop:s0" dev="tmpfs" ino=422 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:userdebug_or_eng_prop:s0 tclass=file permissive=0
05-07 20:21:30.073  5684  5706 F DEBUG   :     x20 0000d79c02039a98  x21 0000d7a79e907000  x22 0000d7a001e57198  x23 0000000000000000
05-07 20:21:30.073  5684  5706 F DEBUG   :     x24 0000000000000000  x25 0000d7a001e57180  x26 0000000000000000  x27 0000d7a79eb2e8bc
05-07 20:21:30.073  5684  5706 F DEBUG   :     x28 0000d7a7a1702040  x29 0000d7a7a138c510
05-07 20:21:30.073  5684  5706 F DEBUG   :     lr  0000d7a7997672e8  sp  0000d7a7a138c3f0  pc  0000d7a799767738  pst 0000000000001000
05-07 20:21:30.073  5684  5706 F DEBUG   :     esr 0000000092000006
05-07 20:21:30.073  5684  5706 F DEBUG   : 23 total frames
05-07 20:21:30.073  5684  5706 F DEBUG   : backtrace:
05-07 20:21:30.073  5684  5706 F DEBUG   :       #00 pc 0000000008919738  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #01 pc 000000000baa7d08  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #02 pc 000000000858b50c  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #03 pc 000000000baa46cc  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #04 pc 0000000008ab722c  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #05 pc 000000000715af3c  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #06 pc 0000000005c22588  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #07 pc 00000000081f7360  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #08 pc 000000000825e488  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #09 pc 000000000cd98f28  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.069  5684  5684 W CrRendererMain: type=1400 audit(0.0:30719): avc:  denied  { read } for  name="u:object_r:userdebug_or_eng_prop:s0" dev="tmpfs" ino=422 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:userdebug_or_eng_prop:s0 tclass=file permissive=0
05-07 20:21:30.073  5684  5706 F DEBUG   :       #10 pc 00000000054c7d60  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #11 pc 00000000054c908c  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #12 pc 00000000081794ec  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #13 pc 00000000081791e0  /data/app/~~n3n29ERckdtFdHZL2mEIsg==/app.vanadium.trichromelibrary_777809634-P3ICCeKuMkBPIK-bK_3fsw==/base.apk!libmonochrome_64.so (offset 0x930000) (BuildId: a2acd3592afb7909e11224a36756a19701f16f37)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #14 pc 0000000000314900  /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+144) (BuildId: 18171138f568afd8f62ab03b00113051)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #15 pc 00000000021f81a8  /data/app/~~9CzZvI5l9ldPybgUME6TnA==/app.vanadium.browser-2oUxDg7bR3XLGUolrtQoJg==/oat/arm64/base.odex (yi1.run+2184)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #16 pc 00000000000a95e0  /system/framework/arm64/boot.oat (java.lang.Thread.run+64) (BuildId: f5088c09acd28c35dcd2785db5ec8235e300c145)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #17 pc 00000000002fd594  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 18171138f568afd8f62ab03b00113051)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #18 pc 0000000000270dcc  /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+220) (BuildId: 18171138f568afd8f62ab03b00113051)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #19 pc 000000000048e578  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1176) (BuildId: 18171138f568afd8f62ab03b00113051)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #20 pc 000000000048e0c8  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallbackWithUffdGc(void*)+8) (BuildId: 18171138f568afd8f62ab03b00113051)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #21 pc 000000000008e4fc  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*) (.__uniq.67847048707805468364044055584648682506)+236) (BuildId: 128cd47fc269d57bdc0575a8492bba62)
05-07 20:21:30.073  5684  5706 F DEBUG   :       #22 pc 000000000007f0a0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 128cd47fc269d57bdc0575a8492bba62)

Reported to CodeMirror as #1701.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No fields configured for Bug.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions