1323702 - stylo: layout/mathml/crashtests/477740-1.xhtml fatally asserts with "IsGecko()" under nsXULElement::Clone

Status: RESOLVED FIXED

(Core :: CSS Parsing and Computation, defect)

Description

[Cameron McCormack (:heycam)]

#0  0x00007fffe479c5ac in mozilla::DeclarationBlock::AsGecko (this=0x7fffb5ef3ac0) at /z/stylo/hg-incubator/obj/dist/include/mozilla/DeclarationBlockInlines.h:15
#1  0x00007fffe69325e8 in nsXULElement::Clone (this=0x7fffb6a49840, aNodeInfo=0x7fffbfefe880, aResult=0x7fffffff5468) at /z/stylo/hg-incubator/dom/xul/nsXULElement.cpp:385
#2  0x00007fffe495c434 in nsNodeUtils::CloneAndAdopt (aNode=0x7fffb6a49840, aClone=true, aDeep=false, aNewNodeInfoManager=0x0, aReparentScope=..., aNodesWithProperties=..., aParent=0x0, aResult=0x7fffffff55e8)
    at /z/stylo/hg-incubator/dom/base/nsNodeUtils.cpp:476
#3  0x00007fffe48fd221 in nsNodeUtils::Clone (aNode=0x7fffb6a49840, aDeep=false, aNewNodeInfoManager=0x0, aNodesWithProperties=..., aResult=0x7fffffff55e8) at /z/stylo/hg-incubator/dom/base/nsNodeUtils.h:192
#4  0x00007fffe494508e in nsNodeUtils::CloneNodeImpl (aNode=0x7fffb6a49840, aDeep=false, aResult=0x7fffffff5650) at /z/stylo/hg-incubator/dom/base/nsNodeUtils.cpp:412
#5  0x00007fffe4944fd2 in nsINode::CloneNode (this=0x7fffb6a49840, aDeep=false, aError=...) at /z/stylo/hg-incubator/dom/base/nsINode.cpp:2938
#6  0x00007fffe498323a in nsRange::CloneParentsBetween (aAncestor=0x7fffb177f000, aNode=0x7fffce1438c0, aClosestAncestor=0x7fffffff5930, aFarthestAncestor=0x7fffffff5928) at /z/stylo/hg-incubator/dom/base/nsRange.cpp:2249
#7  0x00007fffe49820a0 in nsRange::CutContents (this=0x7fffc14d0880, aFragment=0x7fffffff5c28) at /z/stylo/hg-incubator/dom/base/nsRange.cpp:2084
#8  0x00007fffe4983599 in nsRange::ExtractContents (this=0x7fffc14d0880, rv=...) at /z/stylo/hg-incubator/dom/base/nsRange.cpp:2161
#9  0x00007fffe4ec50ab in mozilla::dom::RangeBinding::extractContents (cx=0x7fffdbbb7000, obj=..., self=0x7fffc14d0880, args=...) at /z/stylo/hg-incubator/obj/dom/bindings/RangeBinding.cpp:892
#10 0x00007fffe58aa6f2 in mozilla::dom::GenericBindingMethod (cx=0x7fffdbbb7000, argc=0, vp=0x7fffd363e110) at /z/stylo/hg-incubator/dom/bindings/BindingUtils.cpp:2886
#11 0x00007fffe96a761d in js::CallJSNative (cx=0x7fffdbbb7000, native=0x7fffe58aa490 <mozilla::dom::GenericBindingMethod(JSContext*, unsigned int, JS::Value*)>, args=...) at /z/stylo/hg-incubator/js/src/jscntxtinlines.h:239
#12 0x00007fffe968b470 in js::InternalCallOrConstruct (cx=0x7fffdbbb7000, args=..., construct=js::NO_CONSTRUCT) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:457
#13 0x00007fffe968b86f in InternalCall (cx=0x7fffdbbb7000, args=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:502
#14 0x00007fffe968b66d in js::CallFromStack (cx=0x7fffdbbb7000, args=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:508
#15 0x00007fffe967fe76 in Interpret (cx=0x7fffdbbb7000, state=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:2919
#16 0x00007fffe96752d0 in js::RunScript (cx=0x7fffdbbb7000, state=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:403
#17 0x00007fffe968b568 in js::InternalCallOrConstruct (cx=0x7fffdbbb7000, args=..., construct=js::NO_CONSTRUCT) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:475
#18 0x00007fffe968b86f in InternalCall (cx=0x7fffdbbb7000, args=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:502
#19 0x00007fffe968b8e6 in js::Call (cx=0x7fffdbbb7000, fval=..., thisv=..., args=..., rval=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:521
#20 0x00007fffe937d1b0 in JS::Call (cx=0x7fffdbbb7000, thisv=..., fval=..., args=..., rval=...) at /z/stylo/hg-incubator/js/src/jsapi.cpp:2830
#21 0x00007fffe554405f in mozilla::dom::EventHandlerNonNull::Call (this=0x7fffb7283b00, cx=0x7fffdbbb7000, aThisVal=..., event=..., aRetVal=..., aRv=...) at /z/stylo/hg-incubator/obj/dom/bindings/EventHandlerBinding.cpp:259
#22 0x00007fffe5b85760 in mozilla::dom::EventHandlerNonNull::Call<nsISupports*> (this=0x7fffb7283b00, thisVal=@0x7fffb5ef3268: 0x7fffb9153000, event=..., aRetVal=..., aRv=..., 
    aExecutionReason=0x7fffeacd9ce3 "EventHandlerNonNull", aExceptionHandling=mozilla::dom::CallbackObject::eReportExceptions, aCompartment=0x0) at /z/stylo/hg-incubator/obj/dist/include/mozilla/dom/EventHandlerBinding.h:361
#23 0x00007fffe5b761c1 in mozilla::JSEventHandler::HandleEvent (this=0x7fffb5ef3250, aEvent=0x7fffb58780a0) at /z/stylo/hg-incubator/dom/events/JSEventHandler.cpp:214
#24 0x00007fffe5b60891 in mozilla::EventListenerManager::HandleEventSubType (this=0x7fffb5bf8f20, aListener=0x7fffb5bf8f50, aDOMEvent=0x7fffb58780a0, aCurrentTarget=0x7fffb9153000)
    at /z/stylo/hg-incubator/dom/events/EventListenerManager.cpp:1133
#25 0x00007fffe5b60fbe in mozilla::EventListenerManager::HandleEventInternal (this=0x7fffb5bf8f20, aPresContext=0x7fffb808a000, aEvent=0x7fffffffa6a0, aDOMEvent=0x7fffffffa370, aCurrentTarget=0x7fffb9153000, 
    aEventStatus=0x7fffffffa378) at /z/stylo/hg-incubator/dom/events/EventListenerManager.cpp:1286
#26 0x00007fffe5b8af7d in mozilla::EventListenerManager::HandleEvent (this=0x7fffb5bf8f20, aPresContext=0x7fffb808a000, aEvent=0x7fffffffa6a0, aDOMEvent=0x7fffffffa370, aCurrentTarget=0x7fffb9153000, aEventStatus=0x7fffffffa378)
    at /z/stylo/hg-incubator/obj/dist/include/mozilla/EventListenerManager.h:374
#27 0x00007fffe5b7dd38 in mozilla::EventTargetChainItem::HandleEvent (this=0x7fffbff5c008, aVisitor=..., aCd=...) at /z/stylo/hg-incubator/dom/events/EventDispatcher.cpp:314
#28 0x00007fffe5b5880a in mozilla::EventTargetChainItem::HandleEventTargetChain (aChain=..., aVisitor=..., aCallback=0x0, aCd=...) at /z/stylo/hg-incubator/dom/events/EventDispatcher.cpp:463
#29 0x00007fffe5b59ddf in mozilla::EventDispatcher::Dispatch (aTarget=0x7fffb4c11820, aPresContext=0x7fffb808a000, aEvent=0x7fffffffa6a0, aDOMEvent=0x0, aEventStatus=0x7fffffffa700, aCallback=0x0, aTargets=0x0)
    at /z/stylo/hg-incubator/dom/events/EventDispatcher.cpp:820
#30 0x00007fffe6f7eef5 in nsDocumentViewer::LoadComplete (this=0x7fffb119cc50, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/layout/base/nsDocumentViewer.cpp:1024
#31 0x00007fffe772771d in nsDocShell::EndPageLoad (this=0x7fffb1536000, aProgress=0x7fffb1536028, aChannel=0x7fffb5dd3360, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/docshell/base/nsDocShell.cpp:7571
#32 0x00007fffe77259d3 in nsDocShell::OnStateChange (this=0x7fffb1536000, aProgress=0x7fffb1536028, aRequest=0x7fffb5dd3360, aStateFlags=131088, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/docshell/base/nsDocShell.cpp:7375
#33 0x00007fffe3f27cce in nsDocLoader::DoFireOnStateChange (this=0x7fffb1536000, aProgress=0x7fffb1536028, aRequest=0x7fffb5dd3360, aStateFlags=@0x7fffffffb324: 131088, aStatus=nsresult::NS_OK)
    at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:1255
#34 0x00007fffe3f277a9 in nsDocLoader::doStopDocumentLoad (this=0x7fffb1536000, request=0x7fffb5dd3360, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:840
#35 0x00007fffe3f2626f in nsDocLoader::DocLoaderIsEmpty (this=0x7fffb1536000, aFlushLayout=true) at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:730
#36 0x00007fffe3f271ac in nsDocLoader::OnStopRequest (this=0x7fffb1536000, aRequest=0x7fffb39a0480, aCtxt=0x0, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:612
#37 0x00007fffe2c4798f in mozilla::net::nsLoadGroup::RemoveRequest (this=0x7fffb369ff10, request=0x7fffb39a0480, ctxt=0x0, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/netwerk/base/nsLoadGroup.cpp:633
#38 0x00007fffe48a9dd0 in nsDocument::DoUnblockOnload (this=0x7fffb177f000) at /z/stylo/hg-incubator/dom/base/nsDocument.cpp:8622
#39 0x00007fffe48a9b8d in nsDocument::UnblockOnload (this=0x7fffb177f000, aFireSync=true) at /z/stylo/hg-incubator/dom/base/nsDocument.cpp:8550
#40 0x00007fffe489ab73 in nsDocument::DispatchContentLoadedEvents (this=0x7fffb177f000) at /z/stylo/hg-incubator/dom/base/nsDocument.cpp:5058
#41 0x00007fffe4928d1a in mozilla::detail::RunnableMethodArguments<>::applyImpl<nsDocument, void (nsDocument::*)()>(nsDocument*, void (nsDocument::*)(), mozilla::Tuple<>&, mozilla::IndexSequence<>) (o=0x7fffb177f000, 
    m=(void (nsDocument::*)(nsDocument * const)) 0x7fffe489a380 <nsDocument::DispatchContentLoadedEvents()>, args=...) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:791
#42 0x00007fffe4928c99 in mozilla::detail::RunnableMethodArguments<>::apply<nsDocument, void (nsDocument::*)()>(nsDocument*, void (nsDocument::*)()) (this=0x7fffb8550460, o=0x7fffb177f000, 
    m=(void (nsDocument::*)(nsDocument * const)) 0x7fffe489a380 <nsDocument::DispatchContentLoadedEvents()>) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:797
#43 0x00007fffe4928b22 in mozilla::detail::RunnableMethodImpl<void (nsDocument::*)(), true, false>::Run (this=0x7fffb8550420) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:826
#44 0x00007fffe2ad0ca8 in nsThread::ProcessNextEvent (this=0x7fffdfe3d300, aMayWait=false, aResult=0x7fffffffbd4e) at /z/stylo/hg-incubator/xpcom/threads/nsThread.cpp:1213
#45 0x00007fffe2b505fc in NS_ProcessNextEvent (aThread=0x7fffdfe3d300, aMayWait=false) at /z/stylo/hg-incubator/xpcom/glue/nsThreadUtils.cpp:381
#46 0x00007fffe33cb0e9 in mozilla::ipc::MessagePump::Run (this=0x7fffdfe98a80, aDelegate=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/glue/MessagePump.cpp:96
#47 0x00007fffe33296c5 in MessageLoop::RunInternal (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:232
#48 0x00007fffe3329645 in MessageLoop::RunHandler (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:225
#49 0x00007fffe332961d in MessageLoop::Run (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:205
#50 0x00007fffe6ad4003 in nsBaseAppShell::Run (this=0x7fffd36e7970) at /z/stylo/hg-incubator/widget/nsBaseAppShell.cpp:156
#51 0x00007fffe7cab192 in nsAppStartup::Run (this=0x7fffd36ef880) at /z/stylo/hg-incubator/toolkit/components/startup/nsAppStartup.cpp:283
#52 0x00007fffe7da48ac in XREMain::XRE_mainRun (this=0x7fffffffc728) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4485
#53 0x00007fffe7da5396 in XREMain::XRE_main (this=0x7fffffffc728, argc=4, argv=0x7fffffffdc08, aAppData=0x7fffffffc9e8) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4618
#54 0x00007fffe7da5b6f in XRE_main (argc=4, argv=0x7fffffffdc08, aAppData=0x7fffffffc9e8, aFlags=0) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4709
#55 0x000000000040633f in do_main (argc=4, argv=0x7fffffffdc08, envp=0x7fffffffdc30, xreDirectory=0x7ffff6b5eb40) at /z/stylo/hg-incubator/browser/app/nsBrowserApp.cpp:328
#56 0x0000000000405a62 in main (argc=4, argv=0x7fffffffdc08, envp=0x7fffffffdc30) at /z/stylo/hg-incubator/browser/app/nsBrowserApp.cpp:461

Comment 1

[Cameron McCormack (:heycam)]

https://treeherder.mozilla.org/#/jobs?repo=try&revision=75af3d2a9d6834080c3e370d5744a266d5ffd13a

Comment 2

[Cameron McCormack (:heycam)]

Attachment: Bug 1323702 - Support cloning XUL element style="" attributes in Servo-styled documents.

Review commit: https://reviewboard.mozilla.org/r/103236/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/103236/

Comment 3

[Bobby Holley (:bholley)]

Comment on attachment 8824907 [details]
Bug 1323702 - Support cloning XUL element style="" attributes in Servo-styled documents.

https://reviewboard.mozilla.org/r/103236/#review103984

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/185c510b7d16
Support cloning XUL element style="" attributes in Servo-styled documents. r=bholley

Comment 5

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/185c510b7d16