Closed Bug 1361041 Opened 3 years ago Closed 3 years ago

Crash in nsIFrame::SetStyleContextWithoutNotification


(Core :: CSS Parsing and Computation, defect, critical)

55 Branch
Windows 8
Not set



Tracking Status
firefox-esr52 --- unaffected
firefox53 --- unaffected
firefox54 --- unaffected
firefox55 + fixed


(Reporter: marcia, Assigned: emilio)



(Keywords: crash, regression)

Crash Data


(1 file)

This bug was filed from the Socorro interface and is 
report bp-a951f694-a2b5-4a3b-a565-2e3880170424.

Seen while looking at nightly crash stats - crashes started using 20170426030329: Crashes also present on ESR52

Possible regression range based on Build ID:
Any ideas, Emilio? You have a number of patches in that regression range. (This signature has persisted past when bug 1359995 landed.)
Flags: needinfo?(emilio+bugs)
So at a glance it seems it could come from bug 1357142.

The call that's causing the crash seems to be [1], that is, we're trying to recreate frames for the root element, which should always have a frame created at the initialization of the PresShell.

So the function I removed in that bug had something like the following:

  if (!mDidInitialize) {
    // Nothing to do here.  In fact, if we proceed and aContent is the
    // root we will crash.
    return NS_OK;

Which PostRecreateFramesFor doesn't guard against (because I thought it was not needed, per tryserver results).

Sounds a lot like we do need that check, though I'd like to see a testcase where it happens :(

Will post a patch soon.

Blocks: 1357142
Flags: needinfo?(emilio+bugs)
[Tracking Requested - why for this release]: new crash
The commit message needs a s/Recreate/Reconstruct/, but that should do it.

Thanks for the heads-up Andrew and Marcia :)
err, collision
Keywords: regression
Comment on attachment 8863401 [details]
Bug 1361041: Avoid posting ReconstructFrame hints to an uninitialized PresShell.

Attachment #8863401 - Flags: review?(bzbarsky) → review+
Assignee: nobody → emilio+bugs
Pushed by
Avoid posting ReconstructFrame hints to an uninitialized PresShell. r=bz
Tracking 55+ for this crash.
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla55
You need to log in before you can comment on or make changes to this bug.