1323706 - stylo: layout/style/crashtests/601437-1.html fatally asserts with "value" under mozilla::dom::binding_detail::DoGetOrCreateDOMReflector<nsMediaList, ...>

Status: RESOLVED FIXED

(Core :: CSS Parsing and Computation, defect)

Description

[Cameron McCormack (:heycam)]

#0  0x00007fffe512cd22 in mozilla::dom::binding_detail::DoGetOrCreateDOMReflector<nsMediaList, (mozilla::dom::binding_detail::GetOrCreateReflectorWrapBehavior)0> (cx=0x7fffdbbb7000, value=0x0, givenProto=..., rval=...)
    at /z/stylo/hg-incubator/obj/dist/include/mozilla/dom/BindingUtils.h:899
#1  0x00007fffe512ccad in mozilla::dom::GetOrCreateDOMReflector<nsMediaList> (cx=0x7fffdbbb7000, value=0x0, rval=..., givenProto=...) at /z/stylo/hg-incubator/obj/dist/include/mozilla/dom/BindingUtils.h:986
#2  0x00007fffe510ab0d in mozilla::dom::StyleSheetBinding::get_media (cx=0x7fffdbbb7000, obj=..., self=0x7fffb5d8d460, args=...) at /z/stylo/hg-incubator/obj/dom/bindings/StyleSheetBinding.cpp:186
#3  0x00007fffe58a9cd2 in mozilla::dom::GenericBindingGetter (cx=0x7fffdbbb7000, argc=0, vp=0x7fffffff58d8) at /z/stylo/hg-incubator/dom/bindings/BindingUtils.cpp:2820
#4  0x00007fffe96a761d in js::CallJSNative (cx=0x7fffdbbb7000, native=0x7fffe58a9a70 <mozilla::dom::GenericBindingGetter(JSContext*, unsigned int, JS::Value*)>, args=...) at /z/stylo/hg-incubator/js/src/jscntxtinlines.h:239
#5  0x00007fffe968b470 in js::InternalCallOrConstruct (cx=0x7fffdbbb7000, args=..., construct=js::NO_CONSTRUCT) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:457
#6  0x00007fffe968b86f in InternalCall (cx=0x7fffdbbb7000, args=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:502
#7  0x00007fffe968b8e6 in js::Call (cx=0x7fffdbbb7000, fval=..., thisv=..., args=..., rval=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:521
#8  0x00007fffe968c335 in js::CallGetter (cx=0x7fffdbbb7000, thisv=..., getter=..., rval=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:635
#9  0x00007fffe96f8fc7 in CallGetter (cx=0x7fffdbbb7000, obj=..., receiver=..., shape=..., vp=...) at /z/stylo/hg-incubator/js/src/vm/NativeObject.cpp:1809
#10 0x00007fffe96e85fd in GetExistingProperty<(js::AllowGC)1> (cx=0x7fffdbbb7000, receiver=..., obj=..., shape=..., vp=...) at /z/stylo/hg-incubator/js/src/vm/NativeObject.cpp:1857
#11 0x00007fffe96e8945 in NativeGetPropertyInline<(js::AllowGC)1> (cx=0x7fffdbbb7000, obj=..., receiver=..., id=..., nameLookup=NotNameLookup, vp=...) at /z/stylo/hg-incubator/js/src/vm/NativeObject.cpp:2084
#12 0x00007fffe96e876a in js::NativeGetProperty (cx=0x7fffdbbb7000, obj=..., receiver=..., id=..., vp=...) at /z/stylo/hg-incubator/js/src/vm/NativeObject.cpp:2118
#13 0x00007fffe8dc0d3f in js::GetProperty (cx=0x7fffdbbb7000, obj=..., receiver=..., id=..., vp=...) at /z/stylo/hg-incubator/js/src/vm/NativeObject.h:1523
#14 0x00007fffe8dc0c45 in js::GetProperty (cx=0x7fffdbbb7000, obj=..., receiver=..., name=0x7fffbebc81c0, vp=...) at /z/stylo/hg-incubator/js/src/jsobj.h:844
#15 0x00007fffe968eaa2 in js::GetProperty (cx=0x7fffdbbb7000, v=..., name=..., vp=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:4273
#16 0x00007fffe969b199 in GetPropertyOperation (cx=0x7fffdbbb7000, fp=0x7fffd363e020, script=..., pc=0x7fffbe939ae1 "5", lval=..., vp=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:192
#17 0x00007fffe967d71b in Interpret (cx=0x7fffdbbb7000, state=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:2636
#18 0x00007fffe96752d0 in js::RunScript (cx=0x7fffdbbb7000, state=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:403
#19 0x00007fffe968b568 in js::InternalCallOrConstruct (cx=0x7fffdbbb7000, args=..., construct=js::NO_CONSTRUCT) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:475
#20 0x00007fffe968b86f in InternalCall (cx=0x7fffdbbb7000, args=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:502
#21 0x00007fffe968b8e6 in js::Call (cx=0x7fffdbbb7000, fval=..., thisv=..., args=..., rval=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:521
#22 0x00007fffe937d1b0 in JS::Call (cx=0x7fffdbbb7000, thisv=..., fval=..., args=..., rval=...) at /z/stylo/hg-incubator/js/src/jsapi.cpp:2830
#23 0x00007fffe554405f in mozilla::dom::EventHandlerNonNull::Call (this=0x7fffd37bbe80, cx=0x7fffdbbb7000, aThisVal=..., event=..., aRetVal=..., aRv=...) at /z/stylo/hg-incubator/obj/dom/bindings/EventHandlerBinding.cpp:259
#24 0x00007fffe5b85760 in mozilla::dom::EventHandlerNonNull::Call<nsISupports*> (this=0x7fffd37bbe80, thisVal=@0x7fffcf47db38: 0x7fffcc2ac000, event=..., aRetVal=..., aRv=..., 
    aExecutionReason=0x7fffeacd9ce3 "EventHandlerNonNull", aExceptionHandling=mozilla::dom::CallbackObject::eReportExceptions, aCompartment=0x0) at /z/stylo/hg-incubator/obj/dist/include/mozilla/dom/EventHandlerBinding.h:361
#25 0x00007fffe5b761c1 in mozilla::JSEventHandler::HandleEvent (this=0x7fffcf47db20, aEvent=0x7fffbd9888c0) at /z/stylo/hg-incubator/dom/events/JSEventHandler.cpp:214
#26 0x00007fffe5b60891 in mozilla::EventListenerManager::HandleEventSubType (this=0x7fffd3ad8230, aListener=0x7fffd3ad8260, aDOMEvent=0x7fffbd9888c0, aCurrentTarget=0x7fffcc2ac000)
    at /z/stylo/hg-incubator/dom/events/EventListenerManager.cpp:1133
#27 0x00007fffe5b60fbe in mozilla::EventListenerManager::HandleEventInternal (this=0x7fffd3ad8230, aPresContext=0x7fffb66ca000, aEvent=0x7fffffffa6a0, aDOMEvent=0x7fffffffa370, aCurrentTarget=0x7fffcc2ac000, 
    aEventStatus=0x7fffffffa378) at /z/stylo/hg-incubator/dom/events/EventListenerManager.cpp:1286
#28 0x00007fffe5b8af7d in mozilla::EventListenerManager::HandleEvent (this=0x7fffd3ad8230, aPresContext=0x7fffb66ca000, aEvent=0x7fffffffa6a0, aDOMEvent=0x7fffffffa370, aCurrentTarget=0x7fffcc2ac000, aEventStatus=0x7fffffffa378)
    at /z/stylo/hg-incubator/obj/dist/include/mozilla/EventListenerManager.h:374
#29 0x00007fffe5b7dd38 in mozilla::EventTargetChainItem::HandleEvent (this=0x7fffbff5e008, aVisitor=..., aCd=...) at /z/stylo/hg-incubator/dom/events/EventDispatcher.cpp:314
#30 0x00007fffe5b5880a in mozilla::EventTargetChainItem::HandleEventTargetChain (aChain=..., aVisitor=..., aCallback=0x0, aCd=...) at /z/stylo/hg-incubator/dom/events/EventDispatcher.cpp:463
#31 0x00007fffe5b59ddf in mozilla::EventDispatcher::Dispatch (aTarget=0x7fffb353d020, aPresContext=0x7fffb66ca000, aEvent=0x7fffffffa6a0, aDOMEvent=0x0, aEventStatus=0x7fffffffa700, aCallback=0x0, aTargets=0x0)
    at /z/stylo/hg-incubator/dom/events/EventDispatcher.cpp:820
#32 0x00007fffe6f7eef5 in nsDocumentViewer::LoadComplete (this=0x7fffb6181eb0, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/layout/base/nsDocumentViewer.cpp:1024
#33 0x00007fffe772771d in nsDocShell::EndPageLoad (this=0x7fffb142e800, aProgress=0x7fffb142e828, aChannel=0x7fffb7204af0, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/docshell/base/nsDocShell.cpp:7571
#34 0x00007fffe77259d3 in nsDocShell::OnStateChange (this=0x7fffb142e800, aProgress=0x7fffb142e828, aRequest=0x7fffb7204af0, aStateFlags=131088, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/docshell/base/nsDocShell.cpp:7375
#35 0x00007fffe3f27cce in nsDocLoader::DoFireOnStateChange (this=0x7fffb142e800, aProgress=0x7fffb142e828, aRequest=0x7fffb7204af0, aStateFlags=@0x7fffffffb324: 131088, aStatus=nsresult::NS_OK)
    at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:1255
#36 0x00007fffe3f277a9 in nsDocLoader::doStopDocumentLoad (this=0x7fffb142e800, request=0x7fffb7204af0, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:840
#37 0x00007fffe3f2626f in nsDocLoader::DocLoaderIsEmpty (this=0x7fffb142e800, aFlushLayout=true) at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:730
#38 0x00007fffe3f271ac in nsDocLoader::OnStopRequest (this=0x7fffb142e800, aRequest=0x7fffbe6f4040, aCtxt=0x0, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:612
#39 0x00007fffe2c4798f in mozilla::net::nsLoadGroup::RemoveRequest (this=0x7fffb1675230, request=0x7fffbe6f4040, ctxt=0x0, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/netwerk/base/nsLoadGroup.cpp:633
#40 0x00007fffe48a9dd0 in nsDocument::DoUnblockOnload (this=0x7fffcd834000) at /z/stylo/hg-incubator/dom/base/nsDocument.cpp:8622
#41 0x00007fffe48a9b8d in nsDocument::UnblockOnload (this=0x7fffcd834000, aFireSync=true) at /z/stylo/hg-incubator/dom/base/nsDocument.cpp:8550
#42 0x00007fffe489ab73 in nsDocument::DispatchContentLoadedEvents (this=0x7fffcd834000) at /z/stylo/hg-incubator/dom/base/nsDocument.cpp:5058
#43 0x00007fffe4928d1a in mozilla::detail::RunnableMethodArguments<>::applyImpl<nsDocument, void (nsDocument::*)()>(nsDocument*, void (nsDocument::*)(), mozilla::Tuple<>&, mozilla::IndexSequence<>) (o=0x7fffcd834000, 
    m=(void (nsDocument::*)(nsDocument * const)) 0x7fffe489a380 <nsDocument::DispatchContentLoadedEvents()>, args=...) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:791
#44 0x00007fffe4928c99 in mozilla::detail::RunnableMethodArguments<>::apply<nsDocument, void (nsDocument::*)()>(nsDocument*, void (nsDocument::*)()) (this=0x7fffb62800a0, o=0x7fffcd834000, 
    m=(void (nsDocument::*)(nsDocument * const)) 0x7fffe489a380 <nsDocument::DispatchContentLoadedEvents()>) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:797
#45 0x00007fffe4928b22 in mozilla::detail::RunnableMethodImpl<void (nsDocument::*)(), true, false>::Run (this=0x7fffb6280060) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:826
#46 0x00007fffe2ad0ca8 in nsThread::ProcessNextEvent (this=0x7fffdfe3d300, aMayWait=false, aResult=0x7fffffffbd4e) at /z/stylo/hg-incubator/xpcom/threads/nsThread.cpp:1213
#47 0x00007fffe2b505fc in NS_ProcessNextEvent (aThread=0x7fffdfe3d300, aMayWait=false) at /z/stylo/hg-incubator/xpcom/glue/nsThreadUtils.cpp:381
#48 0x00007fffe33cb0e9 in mozilla::ipc::MessagePump::Run (this=0x7fffdfe98a80, aDelegate=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/glue/MessagePump.cpp:96
#49 0x00007fffe33296c5 in MessageLoop::RunInternal (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:232
#50 0x00007fffe3329645 in MessageLoop::RunHandler (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:225
#51 0x00007fffe332961d in MessageLoop::Run (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:205
#52 0x00007fffe6ad4003 in nsBaseAppShell::Run (this=0x7fffd36e7970) at /z/stylo/hg-incubator/widget/nsBaseAppShell.cpp:156
#53 0x00007fffe7cab192 in nsAppStartup::Run (this=0x7fffd36ef880) at /z/stylo/hg-incubator/toolkit/components/startup/nsAppStartup.cpp:283
#54 0x00007fffe7da48ac in XREMain::XRE_mainRun (this=0x7fffffffc728) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4485
#55 0x00007fffe7da5396 in XREMain::XRE_main (this=0x7fffffffc728, argc=4, argv=0x7fffffffdc08, aAppData=0x7fffffffc9e8) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4618
#56 0x00007fffe7da5b6f in XRE_main (argc=4, argv=0x7fffffffdc08, aAppData=0x7fffffffc9e8, aFlags=0) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4709
#57 0x000000000040633f in do_main (argc=4, argv=0x7fffffffdc08, envp=0x7fffffffdc30, xreDirectory=0x7ffff6b5eb40) at /z/stylo/hg-incubator/browser/app/nsBrowserApp.cpp:328
#58 0x0000000000405a62 in main (argc=4, argv=0x7fffffffdc08, envp=0x7fffffffdc30) at /z/stylo/hg-incubator/browser/app/nsBrowserApp.cpp:461

Comment 1

[Cameron McCormack (:heycam)]

Attachment: Bug 1323706 - stylo: Re-enable one test now that StyleSheet.media works.

We no longer crash, though we still have a couple of assertions.

Review commit: https://reviewboard.mozilla.org/r/103256/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/103256/

Comment 2

[Xidorn Quan [:xidorn] UTC+10]

Comment on attachment 8824919 [details]
Bug 1323706 - stylo: Re-enable one test now that StyleSheet.media works.

https://reviewboard.mozilla.org/r/103256/#review103796

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/ddbb54e48d54
stylo: Re-enable one test now that StyleSheet.media works. r=xidorn

Comment 4

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://hg.mozilla.org/mozilla-central/rev/ddbb54e48d54