1020688 - B2G Assertion: /layout/style/nsCSSRuleProcessor.cpp:3620 MOZ_ASSERT(mElements.Contains(cur));

Status: RESOLVED WONTFIX

(Core :: Layout, defect)

Description

[Gregor Wagner [:gwagner]]

STR: current trunk on nexus 4 with debug build.
Open FTU app and enable data.
2/2 reproducible 

Program received signal SIGSEGV, Segmentation fault.
0xb57efaf4 in AncestorFilter::AssertHasAllAncestors (this=0xbe870240, aElement=<optimized out>)
    at ../../../layout/style/nsCSSRuleProcessor.cpp:3620
3620	    MOZ_ASSERT(mElements.Contains(cur));
(gdb) bt
#0  0xb57efaf4 in AncestorFilter::AssertHasAllAncestors (this=0xbe870240, aElement=<optimized out>)
    at ../../../layout/style/nsCSSRuleProcessor.cpp:3620
#1  0xb57f2552 in RuleHash::EnumerateAllRules (this=0xb2fda9c0, aElement=0xb1de0a90, aData=0xbe86fcd4, aNodeContext=...)
    at ../../../layout/style/nsCSSRuleProcessor.cpp:770
#2  0xb57f34d4 in nsCSSRuleProcessor::RulesMatching (this=<optimized out>, aData=0xbe86fcd4)
    at ../../../layout/style/nsCSSRuleProcessor.cpp:2480
#3  0xb5859e1c in EnumRulesMatching<ElementRuleProcessorData> (aProcessor=<optimized out>, aData=<optimized out>)
    at ../../../layout/style/nsStyleSet.cpp:671
#4  0xb585c8bc in nsStyleSet::FileRules (this=0xb1d1e200, 
    aCollectorFunc=0xb5859e15 <EnumRulesMatching<ElementRuleProcessorData>(nsIStyleRuleProcessor*, void*)>, aData=0xbe86fcd4, 
    aElement=0xb1de0a90, aRuleWalker=0xbe86fcc8) at ../../../layout/style/nsStyleSet.cpp:977
#5  0xb585d21e in nsStyleSet::ResolveStyleFor (this=0xb1d1e200, aElement=0xb1de0a90, aParentContext=0xb1709718, aTreeMatchContext=...)
    at ../../../layout/style/nsStyleSet.cpp:1207
#6  0xb58910ce in mozilla::ElementRestyler::RestyleSelf (this=0xbe86fe44, aSelf=0xb0a46950, aRestyleHint=eRestyle_Subtree)
    at ../../../layout/base/RestyleManager.cpp:2463
#7  0xb58914f4 in mozilla::ElementRestyler::Restyle (this=0xbe86fe44, aRestyleHint=eRestyle_Subtree)
    at ../../../layout/base/RestyleManager.cpp:2307
#8  0xb5891c18 in mozilla::ElementRestyler::RestyleContentChildren (this=0xbe86ff8c, aParent=<optimized out>, 
    aChildRestyleHint=eRestyle_Subtree) at ../../../layout/base/RestyleManager.cpp:2845
#9  0xb5891ce0 in mozilla::ElementRestyler::RestyleChildren (this=0xbe86ff8c, aChildRestyleHint=eRestyle_Subtree)
    at ../../../layout/base/RestyleManager.cpp:2578
#10 0xb5891510 in mozilla::ElementRestyler::Restyle (this=0xbe86ff8c, aRestyleHint=eRestyle_Subtree)
    at ../../../layout/base/RestyleManager.cpp:2311
#11 0xb5891be4 in mozilla::ElementRestyler::RestyleContentChildren (this=0xbe870098, aParent=<optimized out>, aChildRestyleHint=0)
    at ../../../layout/base/RestyleManager.cpp:2834
#12 0xb5891ce0 in mozilla::ElementRestyler::RestyleChildren (this=0xbe870098, aChildRestyleHint=0)
    at ../../../layout/base/RestyleManager.cpp:2578
#13 0xb5891510 in mozilla::ElementRestyler::Restyle (this=0xbe870098, aRestyleHint=eRestyle_Self)
    at ../../../layout/base/RestyleManager.cpp:2311
#14 0xb589165a in mozilla::RestyleManager::ComputeStyleChangeFor (this=0xb3017d60, aFrame=<optimized out>, aChangeList=0xbe87029c, 
    aMinChange=0, aRestyleTracker=..., aRestyleDescendants=false) at ../../../layout/base/RestyleManager.cpp:2960
#15 0xb5891a7e in mozilla::RestyleManager::RestyleElement (this=0xb3017d60, aElement=0xb1a72660, aPrimaryFrame=0xb0a46208, aMinHint=0, 
    aRestyleTracker=..., aRestyleDescendants=false) at ../../../layout/base/RestyleManager.cpp:867
#16 0xb5891e30 in mozilla::RestyleTracker::ProcessOneRestyle (this=0xb3017d88, aElement=0xb1a72660, aRestyleHint=eRestyle_Self, aChangeHint=0)
---Type <return> to continue, or q <return> to quit---
    at ../../../layout/base/RestyleTracker.cpp:123
#17 0xb589249a in mozilla::RestyleTracker::DoProcessRestyles (this=0xb3017d88) at ../../../layout/base/RestyleTracker.cpp:206
#18 0xb58918e6 in ProcessRestyles (this=0xb3017d88) at ../../../layout/base/RestyleTracker.h:273
#19 mozilla::RestyleManager::ProcessPendingRestyles (this=0xb3017d60) at ../../../layout/base/RestyleManager.cpp:1443
#20 0xb587b2be in PresShell::FlushPendingNotifications (this=0xb2f72680, aFlush=...) at ../../../layout/base/nsPresShell.cpp:4152
#21 0xb58819ba in nsRefreshDriver::Tick (this=0xb3017f00, aNowEpoch=<optimized out>, aNowTime=...)
    at ../../../layout/base/nsRefreshDriver.cpp:1185
#22 0xb5882248 in mozilla::RefreshDriverTimer::Tick (this=0xb29af900) at ../../../layout/base/nsRefreshDriver.cpp:162
#23 0xb4a9b320 in nsTimerImpl::Fire (this=0xb29acf10) at ../../../xpcom/threads/nsTimerImpl.cpp:609
#24 0xb4a9b4a8 in nsTimerEvent::Run (this=0xb2345650) at ../../../xpcom/threads/nsTimerImpl.cpp:702
#25 0xb4a9889a in ProcessNextEvent (aResult=0xbe870db7, aMayWait=false, this=0xb3b47880) at ../../../xpcom/threads/nsThread.cpp:766
#26 nsThread::ProcessNextEvent (this=0xb3b47880, aMayWait=<optimized out>, aResult=0xbe870db7) at ../../../xpcom/threads/nsThread.cpp:685
#27 0xb4a4f794 in NS_ProcessNextEvent (thread=0xb3b47880, mayWait=<optimized out>) at ../../../xpcom/glue/nsThreadUtils.cpp:263
#28 0xb4c54dcc in mozilla::ipc::MessagePump::Run (this=0xb3b01b80, aDelegate=0xbe870f10) at ../../../ipc/glue/MessagePump.cpp:95
#29 0xb4c41bea in MessageLoop::RunInternal (this=0xbe870f10) at ../../../ipc/chromium/src/base/message_loop.cc:229
#30 0xb4c41c02 in RunHandler (this=0xbe870f10) at ../../../ipc/chromium/src/base/message_loop.cc:222
#31 MessageLoop::Run (this=0xbe870f10) at ../../../ipc/chromium/src/base/message_loop.cc:196
#32 0xb527a9fe in nsBaseAppShell::Run (this=0xb3bb9880) at ../../../widget/xpwidgets/nsBaseAppShell.cpp:164
#33 0xb5b551fa in XRE_RunAppShell () at ../../../toolkit/xre/nsEmbedFunctions.cpp:692
#34 0xb4c54ee2 in mozilla::ipc::MessagePumpForChildProcess::Run (this=0xb3b01b80, aDelegate=0xbe870f10)
    at ../../../ipc/glue/MessagePump.cpp:253
#35 0xb4c41bea in MessageLoop::RunInternal (this=0xbe870f10) at ../../../ipc/chromium/src/base/message_loop.cc:229
#36 0xb4c41c02 in RunHandler (this=0xbe870f10) at ../../../ipc/chromium/src/base/message_loop.cc:222
#37 MessageLoop::Run (this=0xbe870f10) at ../../../ipc/chromium/src/base/message_loop.cc:196
#38 0xb5b55166 in XRE_InitChildProcess (aArgc=5, aArgv=<optimized out>, aProcess=<optimized out>)
    at ../../../toolkit/xre/nsEmbedFunctions.cpp:529
#39 0x00008862 in main (argc=6, argv=0xbe871a04) at ../../../ipc/app/MozillaRuntimeMain.cpp:149
(gdb) p mElements
$1 = {<nsTArray_Impl<mozilla::dom::Element*, nsTArrayInfallibleAllocator>> = {<nsTArray_base<nsTArrayInfallibleAllocator, nsTArray_CopyWithMemutils>> = {
      mHdr = 0xb0a48970}, <nsTArray_TypedBase<mozilla::dom::Element*, nsTArray_Impl<mozilla::dom::Element*, nsTArrayInfallibleAllocator> >> = {<nsTArray_SafeElementAtHelper<mozilla::dom::Element*, nsTArray_Impl<mozilla::dom::Element*, nsTArrayInfallibleAllocator> >> = {<No data fields>}, <No data fields>}, static NoIndex = <optimized out>}, <No data fields>}
(gdb) p cur
$2 = (nsINode *) 0xb1b53150
(gdb) p *cur
$3 = {<mozilla::dom::EventTarget> = {<nsIDOMEventTarget> = {<nsISupports> = {
        _vptr.nsISupports = 0xb6c41cd8}, <No data fields>}, <nsWrapperCache> = {_vptr.nsWrapperCache = 0xb6c42134, 
      mWrapper = {<js::HeapBase<JSObject*>> = {<No data fields>}, ptr = 0xb2a40d60}, mFlags = 2113799}, <No data fields>}, mNodeInfo = {
    mRawPtr = 0xb1b53100}, mParent = 0xb1dcb7c0, mBoolFlags = 100794398, mNextSibling = 0xb1b53290, mPreviousSibling = 0xb1b530b0, 
  mFirstChild = 0xb1b531a0, {mPrimaryFrame = 0xb0a46140, mSubtreeRoot = 0xb0a46140}, mSlots = 0xb1701880}

Comment 1

[Boris Zbarsky [:bzbarsky]]

Is this the same as bug 1017798?

Same web components question as there...

Comment 2

[Sylvestre Ledru [:Sylvestre]]

Mass closing as we are no longer working on b2g/firefox os.

Comment 3

[Sylvestre Ledru [:Sylvestre]]

Mass closing as we are no longer working on b2g/firefox os.