Closed Bug 1344579 Opened 8 years ago Closed 2 years ago

Crash in mozilla::AssertDisplayItemData (MOZ_RELEASE_ASSERT(sAliveDisplayItemDatas && sAliveDisplayItemDatas->Contains(aData)))

Categories

(Core :: Web Painting, defect, P2)

49 Branch
x86
Windows 7
defect

Tracking

()

RESOLVED WORKSFORME
Tracking Status
firefox51 --- affected
firefox52 --- wontfix
firefox-esr52 --- affected
firefox53 --- affected
firefox54 --- affected

People

(Reporter: philipp, Unassigned)

References

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is report bp-aad579ec-4e75-40d5-be1d-f03a72170304. ============================================================= Crashing Thread (0) Frame Module Signature Source 0 xul.dll mozilla::AssertDisplayItemData layout/base/FrameLayerBuilder.cpp:1665 1 xul.dll mozilla::FramePropertyTable::GetInternal(nsIFrame const*, mozilla::FramePropertyDescriptorUntyped const*, bool*) layout/base/FramePropertyTable.cpp:82 2 xul.dll mozilla::FrameLayerBuilder::GetDisplayItemData(nsIFrame*, unsigned int) layout/base/FrameLayerBuilder.cpp:1675 3 xul.dll mozilla::ContainerState::InvalidateForLayerChange(nsDisplayItem*, mozilla::layers::PaintedLayer*) layout/base/FrameLayerBuilder.cpp:4294 4 xul.dll mozilla::ContainerState::FinishPaintedLayerData<<lambda_06d8744642606e58f54073deab60db42> >(mozilla::PaintedLayerData&, <lambda_06d8744642606e58f54073deab60db42>) layout/base/FrameLayerBuilder.cpp:3046 5 xul.dll mozilla::PaintedLayerDataNode::PopPaintedLayerData() layout/base/FrameLayerBuilder.cpp:2752 6 xul.dll mozilla::PaintedLayerDataNode::PopAllPaintedLayerData() layout/base/FrameLayerBuilder.cpp:2762 7 xul.dll mozilla::PaintedLayerDataNode::Finish(bool) layout/base/FrameLayerBuilder.cpp:2716 8 @0x11dfb23f 9 @0x1a this cross platform crash signature is regressing in frequency since firefox 49. overall it's rather low volume though with around 50 daily reports from all channels... Correlations for Firefox Beta (94.12% in signature vs 00.05% overall) moz_crash_reason = MOZ_RELEASE_ASSERT(sAliveDisplayItemDatas && sAliveDisplayItemDatas->Contains(aData)) (100.0% in signature vs 34.07% overall) ipc_message_name = null (27.45% in signature vs 95.65% overall) app_init_dlls = null
Component: Layout → Layout: Web Painting
Too late for firefox 52, mass-wontfix.
Crash Signature: [@ mozilla::AssertDisplayItemData] → [@ mozilla::AssertDisplayItemData] [@ mozilla::FrameLayerBuilder::DisplayItemData::AssertDisplayItemData ]
Summary: Crash in mozilla::AssertDisplayItemData → Crash in mozilla::AssertDisplayItemData (MOZ_RELEASE_ASSERT(sAliveDisplayItemDatas && sAliveDisplayItemDatas->Contains(aData)))
Crash Signature: [@ mozilla::AssertDisplayItemData] [@ mozilla::FrameLayerBuilder::DisplayItemData::AssertDisplayItemData ] → [@ mozilla::AssertDisplayItemData] [@ mozilla::FrameLayerBuilder::DisplayItemData::AssertDisplayItemData ] [@ mozilla::DisplayItemData::AssertDisplayItemData ]
P2, this is an important crash, but we've audited the code multiple times without finding anything, and we have no reproducible testcases.
Priority: -- → P2
QA Whiteboard: qa-not-actionable
Severity: critical → S2

This code no longer exists so we can't crash here anymore.

Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.