Assertion failure: !nifNeedPushedItem || mDidPushItemsBitMayLie (NS_STATE_GRID_DID_PUSH_ITEMS lied), at src/layout/generic/nsGridContainerFrame.cpp:5474

RESOLVED FIXED in Firefox 52

Status

()

Core
Layout
RESOLVED FIXED
a year ago
11 months ago

People

(Reporter: truber, Assigned: bradwerth)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Trunk
mozilla52
assertion, testcase
Points:
---
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(firefox52 fixed)

Details

(Whiteboard: [fixed by bug 1278461])

Attachments

(4 attachments, 1 obsolete attachment)

(Reporter)

Description

a year ago
Created attachment 8793062 [details]
testcase

The attached testcase asserts on mozilla-central revision 62f79d676e0e

Assertion failure: !nifNeedPushedItem || mDidPushItemsBitMayLie (NS_STATE_GRID_DID_PUSH_ITEMS lied), at src/layout/generic/nsGridContainerFrame.cpp:5474

Removing line 5 or 6 results in a similar assertion:

Assertion failure: foundOwnPushedChild || !items.IsEmpty() || mDidPushItemsBitMayLie (NS_STATE_GRID_DID_PUSH_ITEMS lied), at /home/worker/workspace/build/src/layout/generic/nsGridContainerFrame.cpp:5661
(Reporter)

Comment 1

a year ago
Created attachment 8793063 [details]
stacktrace
(Reporter)

Comment 2

a year ago
Created attachment 8793064 [details]
stacktrace2
(Reporter)

Comment 3

a year ago
Created attachment 8793066 [details]
testcase
Attachment #8793062 - Attachment is obsolete: true
Same underlying issue as bug 1278461?
Flags: needinfo?(bwerth)
(Assignee)

Comment 5

a year ago
For the moment, I can't reproduce the crash. I'll pull freshies from central and try again.
(Assignee)

Comment 6

a year ago
Sorry, pulling the 62f79d676e0e revision to test...
(Assignee)

Comment 7

a year ago
truber, I can't replicate this bug with revision 62f79d676e0e or with a more current mozilla-central. Do you have another testcase?
Flags: needinfo?(bwerth) → needinfo?(jschwartzentruber)
(Reporter)

Comment 8

a year ago
Still reproduces for me in m-c f0e6cc636021. Just tried debug and it is intermittent there (I'm using asan-debug usually). Changing the timeout makes it more reliable, I'll update it.
Flags: needinfo?(jschwartzentruber)
(Reporter)

Comment 9

a year ago
Created attachment 8793765 [details]
testcase2
(Assignee)

Updated

a year ago
See Also: → bug 1278461
(Assignee)

Comment 10

a year ago
A pending fix for bug 1278461 also fixes this bug, which has a similar pathology. I rolled attachment 8793765 [details] into the crashtests in the patch on the other bug.
Resolving this as fixed by bug 1278461.
Assignee: nobody → bwerth
Status: NEW → RESOLVED
Last Resolved: a year ago
Flags: in-testsuite+
Resolution: --- → FIXED
Whiteboard: [fixed by bug 1278461]
status-firefox52: affected → fixed
Target Milestone: --- → mozilla52
You need to log in before you can comment on or make changes to this bug.