1323680 - stylo: several tests crash under DebugVerifyStyleTree

Status: RESOLVED WORKSFORME

(Core :: CSS Parsing and Computation, defect, P2)

Description

[Cameron McCormack (:heycam)]

Thread 1 "firefox" received signal SIGSEGV, Segmentation fault.
RefPtr<nsStyleContext>::get (this=0x0) at /z/stylo/hg-incubator/obj/dist/include/mozilla/RefPtr.h:283
283	    return const_cast<T*>(mRawPtr);
(gdb) bt
#0  RefPtr<nsStyleContext>::get (this=0x0) at /z/stylo/hg-incubator/obj/dist/include/mozilla/RefPtr.h:283
#1  0x00007fffe4601005 in RefPtr<nsStyleContext>::operator nsStyleContext*() const & (this=0x0) at /z/stylo/hg-incubator/obj/dist/include/mozilla/RefPtr.h:299
#2  0x00007fffe45f9a05 in nsStyleContext::GetParent (this=0x0) at /z/stylo/hg-incubator/obj/dist/include/nsStyleContext.h:164
#3  0x00007fffe6f2a8d9 in mozilla::VerifySameTree (aContext1=0x0, aContext2=0x7fffb11f5c08) at /z/stylo/hg-incubator/layout/base/RestyleManagerBase.cpp:263
#4  0x00007fffe6f2a51b in mozilla::VerifyContextParent (aFrame=0x7fffb11f5e58, aContext=0x7fffb265f1c0, aParentContext=0x7fffb11f5c08) at /z/stylo/hg-incubator/layout/base/RestyleManagerBase.cpp:307
#5  0x00007fffe6f2264d in mozilla::VerifyStyleTree (aFrame=0x7fffb11f5e58) at /z/stylo/hg-incubator/layout/base/RestyleManagerBase.cpp:341
#6  0x00007fffe6f162d0 in mozilla::RestyleManagerBase::DebugVerifyStyleTree (aFrame=0x7fffb11f5e58) at /z/stylo/hg-incubator/layout/base/RestyleManagerBase.cpp:382
#7  0x00007fffe6f0e2a2 in mozilla::RestyleManagerBase::ProcessRestyledFrames (this=0x7fffb61b3480, aChangeList=...) at /z/stylo/hg-incubator/layout/base/RestyleManagerBase.cpp:1357
#8  0x00007fffe6f26f85 in mozilla::ServoRestyleManager::ProcessPendingRestyles (this=0x7fffb61b3480) at /z/stylo/hg-incubator/layout/base/ServoRestyleManager.cpp:326
#9  0x00007fffe6f2ed3d in mozilla::RestyleManagerHandle::Ptr::ProcessPendingRestyles (this=0x7fffffffb230) at /z/stylo/hg-incubator/obj/dist/include/mozilla/RestyleManagerHandleInlines.h:75
#10 0x00007fffe6ef92aa in mozilla::PresShell::FlushPendingNotifications (this=0x7fffb3544800, aFlush=...) at /z/stylo/hg-incubator/layout/base/PresShell.cpp:4115
#11 0x00007fffe6ec2e64 in nsRefreshDriver::Tick (this=0x7fffb353e800, aNowEpoch=1481793637251544, aNowTime=...) at /z/stylo/hg-incubator/layout/base/nsRefreshDriver.cpp:1842
#12 0x00007fffe6eca278 in mozilla::RefreshDriverTimer::TickDriver (driver=0x7fffb353e800, jsnow=1481793637251544, now=...) at /z/stylo/hg-incubator/layout/base/nsRefreshDriver.cpp:326
#13 0x00007fffe6eca073 in mozilla::RefreshDriverTimer::TickRefreshDrivers (this=0x7fffb9eec280, aJsNow=1481793637251544, aNow=..., aDrivers=...) at /z/stylo/hg-incubator/layout/base/nsRefreshDriver.cpp:295
#14 0x00007fffe6ec9efa in mozilla::RefreshDriverTimer::Tick (this=0x7fffb9eec280, jsnow=1481793637251544, now=...) at /z/stylo/hg-incubator/layout/base/nsRefreshDriver.cpp:316
#15 0x00007fffe6ecc3fd in mozilla::VsyncRefreshDriverTimer::RunRefreshDrivers (this=0x7fffb9eec280, aTimeStamp=...) at /z/stylo/hg-incubator/layout/base/nsRefreshDriver.cpp:669
#16 0x00007fffe6ecb8cc in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver (this=0x7fffb9df7a00, aVsyncTimestamp=...) at /z/stylo/hg-incubator/layout/base/nsRefreshDriver.cpp:589
#17 0x00007fffe6ecc07e in mozilla::detail::RunnableMethodArguments<mozilla::TimeStamp>::applyImpl<mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver, void (mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::*)(mozilla::TimeStamp), StoreCopyPassByConstLRef<mozilla::TimeStamp>, 0ul> (o=0x7fffb9df7a00, m=
    (void (mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::*)(mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver * const, mozilla::TimeStamp)) 0x7fffe6ecb760 <mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(mozilla::TimeStamp)>, args=...) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:791
#18 0x00007fffe6ecbfb9 in mozilla::detail::RunnableMethodArguments<mozilla::TimeStamp>::apply<mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver, void (mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::*)(mozilla::TimeStamp)> (this=0x7fffdc622550, o=0x7fffb9df7a00, m=
    (void (mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::*)(mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver * const, mozilla::TimeStamp)) 0x7fffe6ecb760 <mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(mozilla::TimeStamp)>) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:797
#19 0x00007fffe6ecbe02 in mozilla::detail::RunnableMethodImpl<void (mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::*)(mozilla::TimeStamp), true, false, mozilla::TimeStamp>::Run (this=0x7fffdc622510)
    at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:826
#20 0x00007fffe2ad0ca8 in nsThread::ProcessNextEvent (this=0x7fffdfe3d300, aMayWait=false, aResult=0x7fffffffbd4e) at /z/stylo/hg-incubator/xpcom/threads/nsThread.cpp:1213
#21 0x00007fffe2b505fc in NS_ProcessNextEvent (aThread=0x7fffdfe3d300, aMayWait=false) at /z/stylo/hg-incubator/xpcom/glue/nsThreadUtils.cpp:381
#22 0x00007fffe33cb0e9 in mozilla::ipc::MessagePump::Run (this=0x7fffdfe98a80, aDelegate=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/glue/MessagePump.cpp:96
#23 0x00007fffe33296c5 in MessageLoop::RunInternal (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:232
#24 0x00007fffe3329645 in MessageLoop::RunHandler (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:225
#25 0x00007fffe332961d in MessageLoop::Run (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:205
#26 0x00007fffe6ad4003 in nsBaseAppShell::Run (this=0x7fffd34e7970) at /z/stylo/hg-incubator/widget/nsBaseAppShell.cpp:156
#27 0x00007fffe7cab192 in nsAppStartup::Run (this=0x7fffd34ef880) at /z/stylo/hg-incubator/toolkit/components/startup/nsAppStartup.cpp:283
#28 0x00007fffe7da48ac in XREMain::XRE_mainRun (this=0x7fffffffc728) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4485
#29 0x00007fffe7da5396 in XREMain::XRE_main (this=0x7fffffffc728, argc=4, argv=0x7fffffffdc08, aAppData=0x7fffffffc9e8) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4618
#30 0x00007fffe7da5b6f in XRE_main (argc=4, argv=0x7fffffffdc08, aAppData=0x7fffffffc9e8, aFlags=0) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4709
#31 0x000000000040633f in do_main (argc=4, argv=0x7fffffffdc08, envp=0x7fffffffdc30, xreDirectory=0x7ffff6b5eb40) at /z/stylo/hg-incubator/browser/app/nsBrowserApp.cpp:328
#32 0x0000000000405a62 in main (argc=4, argv=0x7fffffffdc08, envp=0x7fffffffdc30) at /z/stylo/hg-incubator/browser/app/nsBrowserApp.cpp:461

Comment 1

[Bobby Holley (:bholley)]

layout/base/crashtests/382204-1.html
layout/generic/crashtests/413712-1.xhtml

(the latter was crashing due to bug 1323649, and is now crashing here)