1127260 - crash in nsRect::UnionRect(nsRect const&, nsRect const&)

Status: RESOLVED WONTFIX

(Core :: General, defect)

Description

[Daniela Domnici]

This bug was filed from the Socorro interface and is 
report bp-36121f00-42d6-4779-9e31-f955a2150129.
=============================================================
We had this crash when running our central-remote testruns

Reports:  http://mozmill-daily.blargon7.com/#/remote/report/6b1e6b9bf618fb20da2bf872749e0c5ez

Comment 1

[Mats Palmgren (inactive)]

The crash line in nsTextFrame::ReflowText():
   8450 aMetrics.SetOverflowAreasToDesiredBounds();
 > 8451 aMetrics.VisualOverflow().UnionRect(aMetrics.VisualOverflow(), boundingBox);

all the nsRects there are known to be allocated.  I don't see any way that that line
could crash.  Also the crash data says:
Crash Reason:	EXC_BREAKPOINT / 0x00000002
Crash Address:	0x1021e53f1

Note that the address is an odd number.  None of the fields in an nsRect are
at an odd address ever.  The crash reason also looks a bit unusual to me.

I don't think the layout code is at fault here.  This crash looks more like
some thread or signal issue.  Perhaps some other process or OSX sent us
signal 2 for some reason.  The default action is to terminate:
https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man3/signal.3.html

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.