If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

Assertion failure: aClipState->IsValid()

NEW
Unassigned
(NeedInfo from)

Status

()

Core
Layout: Web Painting
3 months ago
2 days ago

People

(Reporter: truber, Unassigned, NeedInfo)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Trunk
assertion, testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite ?

Firefox Tracking Flags

(firefox-esr52 unaffected, firefox55 wontfix, firefox56 wontfix, firefox57 affected, firefox58 affected)

Details

Attachments

(2 attachments)

(Reporter)

Description

3 months ago
Created attachment 8878590 [details]
testcase.html

The attached testcase fails the below assertion in mozilla-central rev fe809f57bf22.

Assertion failure: aClipState->IsValid(), at /home/worker/workspace/build/src/layout/painting/nsCSSRendering.cpp:2195
#01: nsCSSRendering::PaintStyleImageLayerWithSC at layout/painting/nsCSSRendering.cpp:2682
#02: PaintMaskSurface at layout/svg/nsSVGIntegrationUtils.cpp:478
#03: nsSVGIntegrationUtils::PaintMaskAndClipPath at layout/svg/nsSVGIntegrationUtils.cpp:557
#04: nsDisplayMask::PaintAsLayer at layout/painting/nsDisplayList.cpp:8553
#05: mozilla::FrameLayerBuilder::PaintItems at layout/painting/FrameLayerBuilder.cpp:3704
#06: mozilla::FrameLayerBuilder::DrawPaintedLayer at layout/painting/FrameLayerBuilder.cpp:6247
#07: mozilla::layers::ClientPaintedLayer::PaintThebes at mfbt/RefPtr.h:40
#08: mozilla::layers::ClientPaintedLayer::RenderLayerWithReadback at gfx/src/nsRegion.h:75
#09: mozilla::layers::ClientContainerLayer::RenderLayer at gfx/layers/client/ClientContainerLayer.h:57
#10: mozilla::layers::ClientContainerLayer::RenderLayer at gfx/layers/client/ClientContainerLayer.h:57
#11: mozilla::layers::ClientLayerManager::EndTransactionInternal at gfx/layers/client/ClientLayerManager.cpp:375
#12: mozilla::layers::ClientLayerManager::EndTransaction at gfx/layers/client/ClientLayerManager.cpp:434
#13: nsDisplayList::PaintRoot at layout/painting/nsDisplayList.cpp:2293
#14: nsLayoutUtils::PaintFrame at mfbt/RefPtr.h:129
#15: mozilla::PresShell::Paint at layout/base/PresShell.cpp:6444
INFO: Last good revision: c992c7e903ce1409aa3ad34a97ee2920ca0e45a9
INFO: First bad revision: abcf45c9ad660b35e892cd3736c28d11528bdc64
INFO: Pushlog:
https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=c992c7e903ce1409aa3ad34a97ee2920ca0e45a9&tochange=abcf45c9ad660b35e892cd3736c28d11528bdc64
Blocks: 1188074
Has Regression Range: --- → yes
status-firefox55: --- → wontfix
status-firefox56: --- → wontfix
status-firefox57: --- → affected
status-firefox58: --- → affected
status-firefox-esr52: --- → unaffected
Flags: in-testsuite?
This is unrelated to bug 1188074. That bug just happens to make the given syntax valid. This assertion can be triggered with a slightly modified version of the testcase which uses valid syntax for earlier version.
No longer blocks: 1188074
Created attachment 8911039 [details]
modified testcase for earlier version
With the modified testcase, the updated regression range is: https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=9113f64dea5785aa0f75c4ddab2d2b00c4cf28b0&tochange=3ea48d34848247c964df18c4d9582f4dff6a71dd
Blocks: 1351440
Flags: needinfo?(cku)
I will check it next week
You need to log in before you can comment on or make changes to this bug.