Closed
Bug 1344579
Opened 8 years ago
Closed 2 years ago
Crash in mozilla::AssertDisplayItemData (MOZ_RELEASE_ASSERT(sAliveDisplayItemDatas && sAliveDisplayItemDatas->Contains(aData)))
Categories
(Core :: Web Painting, defect, P2)
Tracking
()
People
(Reporter: philipp, Unassigned)
References
Details
(Keywords: crash)
Crash Data
This bug was filed from the Socorro interface and is
report bp-aad579ec-4e75-40d5-be1d-f03a72170304.
=============================================================
Crashing Thread (0)
Frame Module Signature Source
0 xul.dll mozilla::AssertDisplayItemData layout/base/FrameLayerBuilder.cpp:1665
1 xul.dll mozilla::FramePropertyTable::GetInternal(nsIFrame const*, mozilla::FramePropertyDescriptorUntyped const*, bool*) layout/base/FramePropertyTable.cpp:82
2 xul.dll mozilla::FrameLayerBuilder::GetDisplayItemData(nsIFrame*, unsigned int) layout/base/FrameLayerBuilder.cpp:1675
3 xul.dll mozilla::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::PaintedLayer*) layout/base/FrameLayerBuilder.cpp:4294
4 xul.dll mozilla::ContainerState::FinishPaintedLayerData<<lambda_06d8744642606e58f54073deab60db42> >(mozilla::PaintedLayerData&, <lambda_06d8744642606e58f54073deab60db42>) layout/base/FrameLayerBuilder.cpp:3046
5 xul.dll mozilla::PaintedLayerDataNode::PopPaintedLayerData() layout/base/FrameLayerBuilder.cpp:2752
6 xul.dll mozilla::PaintedLayerDataNode::PopAllPaintedLayerData() layout/base/FrameLayerBuilder.cpp:2762
7 xul.dll mozilla::PaintedLayerDataNode::Finish(bool) layout/base/FrameLayerBuilder.cpp:2716
8 @0x11dfb23f
9 @0x1a
this cross platform crash signature is regressing in frequency since firefox 49. overall it's rather low volume though with around 50 daily reports from all channels...
Correlations for Firefox Beta
(94.12% in signature vs 00.05% overall) moz_crash_reason = MOZ_RELEASE_ASSERT(sAliveDisplayItemDatas && sAliveDisplayItemDatas->Contains(aData))
(100.0% in signature vs 34.07% overall) ipc_message_name = null
(27.45% in signature vs 95.65% overall) app_init_dlls = null
Updated•8 years ago
|
Component: Layout → Layout: Web Painting
Comment 1•8 years ago
|
||
Too late for firefox 52, mass-wontfix.
Comment 2•8 years ago
|
||
Crash Signature: [@ mozilla::AssertDisplayItemData] → [@ mozilla::AssertDisplayItemData]
[@ mozilla::FrameLayerBuilder::DisplayItemData::AssertDisplayItemData ]
Summary: Crash in mozilla::AssertDisplayItemData → Crash in mozilla::AssertDisplayItemData (MOZ_RELEASE_ASSERT(sAliveDisplayItemDatas && sAliveDisplayItemDatas->Contains(aData)))
Comment 3•8 years ago
|
||
Comment 4•8 years ago
|
||
This is bug 1141089.
Updated•8 years ago
|
Crash Signature: [@ mozilla::AssertDisplayItemData]
[@ mozilla::FrameLayerBuilder::DisplayItemData::AssertDisplayItemData ] → [@ mozilla::AssertDisplayItemData]
[@ mozilla::FrameLayerBuilder::DisplayItemData::AssertDisplayItemData ]
[@ mozilla::DisplayItemData::AssertDisplayItemData ]
Comment 6•7 years ago
|
||
P2, this is an important crash, but we've audited the code multiple times without finding anything, and we have no reproducible testcases.
Priority: -- → P2
Updated•2 years ago
|
Severity: critical → S2
Comment 7•2 years ago
|
||
This code no longer exists so we can't crash here anymore.
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → WORKSFORME
You need to log in
before you can comment on or make changes to this bug.
Description
•