1376081 - stylo: panic in style::properties::animated_properties::build_identity_transform_list

Status: VERIFIED DUPLICATE of bug 1375812

(Core :: Layout, defect)

Description

[Johannes Pfrang [:johnp]]

This bug was filed from the Socorro interface and is 
report bp-dc45c290-07ae-4a58-8b00-e16db0170623.
=============================================================
Frame 	Module 	Signature 	Source
0 	firefox 	mozalloc_abort 	memory/mozalloc/mozalloc_abort.cpp:33
1 	firefox 	abort 	memory/mozalloc/mozalloc_abort.cpp:80
2 	libxul.so 	std::panicking::rust_panic 	/checkout/src/libpanic_abort/lib.rs:61
3 	libxul.so 	std::panicking::rust_panic_with_hook 	/checkout/src/libstd/panicking.rs:565
4 	libxul.so 	std::panicking::begin_panic<&str> 	/checkout/src/libstd/panicking.rs:511
5 	libxul.so 	style::properties::animated_properties::build_identity_transform_list 	obj-firefox/toolkit/library/x86_64-unknown-linux-gnu/release/build/style-077f5b469d68e8b7/out/properties.rs:109084
6 	libxul.so 	style::properties::animated_properties::{{impl}}::add_weighted 	obj-firefox/toolkit/library/x86_64-unknown-linux-gnu/release/build/style-077f5b469d68e8b7/out/properties.rs:110136
7 	libxul.so 	geckoservo::glue::Servo_AnimationValues_IsInterpolable 	obj-firefox/toolkit/library/x86_64-unknown-linux-gnu/release/build/style-077f5b469d68e8b7/out/properties.rs:108211
8 	libxul.so 	libxul.so@0x1da4fea 	
9 	libxul.so 	nsTransitionManager::ConsiderInitiatingTransition<const ServoComputedValues*> 	layout/style/nsTransitionManager.cpp:894
10 	libxul.so 	nsTransitionManager::DoUpdateTransitions<const ServoComputedValues*> 	layout/style/nsTransitionManager.cpp:698
11 	libxul.so 	nsTransitionManager::UpdateTransitions 	layout/style/nsTransitionManager.cpp:641
12 	libxul.so 	Gecko_UpdateAnimations 	layout/style/ServoBindings.cpp:609
13 	libxul.so 	core::ptr::drop_in_place<style::context::ThreadLocalStyleContext<style::gecko::wrapper::GeckoElement>> 	servo/components/style/gecko/wrapper.rs:994
14 	libxul.so 	geckoservo::glue::traverse_subtree 	/checkout/src/libcore/ptr.rs:66
15 	libxul.so 	geckoservo::glue::Servo_TraverseSubtree 	servo/ports/geckolib/glue.rs:290
16 	libxul.so 	mozilla::ServoStyleSet::PrepareAndTraverseSubtree 	layout/style/ServoStyleSet.cpp:446
17 	libxul.so 	mozilla::ServoStyleSet::StyleDocument 	layout/style/ServoStyleSet.cpp:991
18 	libxul.so 	mozilla::ServoRestyleManager::DoProcessPendingRestyles 	layout/base/ServoRestyleManager.cpp:605
19 	libxul.so 	libxul.so@0x1e08e4a 	
20 	libxul.so 	mozilla::PresShell::DoFlushPendingNotifications 	layout/base/nsIPresShell.h:569
21 	libxul.so 	nsDocument::FlushPendingNotifications(mozilla::FlushType) 	
22 	libxul.so 	mozilla::dom::Element::GetPrimaryFrame(mozilla::FlushType) 	
23 	libxul.so 	mozilla::dom::Element::GetBoundingClientRect() 	
24 	libxul.so 	mozilla::dom::ElementBinding::getBoundingClientRect(JSContext*, JS::Handle<JSObject*>, mozilla::dom::Element*, JSJitMethodCallArgs const&) 	
25 	libxul.so 	mozilla::dom::GenericBindingMethod(JSContext*, unsigned int, JS::Value*) 	
26 		@0x27d7b1c68f47 	
27 		@0x7ff352bbca3f 	
28 		@0x27d7b1c67920 	
29 		@0x7ff345e7a24f 	
30 		@0x27d7b1c67920 	
31 		@0x7ff345e77fb7 	
32 		@0x27d7b1e5c7c9 	
33 		@0x7ff355a275bf 	
34 		@0x27d7b1cc7e1f 	
35 		@0x7ff34b8c443f 	
36 		@0x27d7b15678a9 	
37 	libxul.so 	js::jit::EnterBaselineMethod(JSContext*, js::RunState&) 	
38 	libxul.so 	Interpret(JSContext*, js::RunState&) 	
39 	libxul.so 	js::RunScript(JSContext*, js::RunState&) 	
40 	libxul.so 	js::CallFromStack(JSContext*, JS::CallArgs const&) 	
41 	libxul.so 	js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICCall_Fallback*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>) 	
42 		@0x27d7b1572df6 	
43 		@0x7ff35e58423f 	
44 		@0x27d7b15678a9 	
45 	libxul.so 	js::jit::EnterBaselineMethod(JSContext*, js::RunState&) 	
46 	libxul.so 	js::RunScript(JSContext*, js::RunState&) 	
47 	libxul.so 	js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>) 	
48 	libxul.so 	JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) 	
49 	libxul.so 	mozilla::CycleCollectedJSContext::Get()


Tab crash with layout.css.servo.enabled=true in nightly, no STR.

Comment 1

[Johannes Pfrang [:johnp]]

STR for fresh profile:

1. Play a YouTube Video and switch forth and back between normal and full-screen until content crashes
=> bp-f5248f91-e8e3-4438-83a0-b1b2d0170627

Comment 2

[Brian Birtles (:birtles)]

Dupe of bug 1375812?

Comment 3

[Boris Chiou [:boris]]

(In reply to Brian Birtles (:birtles) from comment #2)
> Dupe of bug 1375812?

yes. Looks like this is the same bug.

Comment 4

[Boris Chiou [:boris]]

(In reply to Boris Chiou [:boris] (away July 3rd ~ July 7th) from comment #3)
> (In reply to Brian Birtles (:birtles) from comment #2)
> > Dupe of bug 1375812?
> 
> yes. Looks like this is the same bug.

Will try to reproduce this before landing bug 1375812 and check again after landing bug 1375812.

Comment 5

[Boris Chiou [:boris]]

(In reply to Johannes Pfrang [:johnp] from comment #1)
> STR for fresh profile:
> 
> 1. Play a YouTube Video and switch forth and back between normal and
> full-screen until content crashes

The full-screen means the full-screen of firefox, instead of that of video, right?

> => bp-f5248f91-e8e3-4438-83a0-b1b2d0170627

I tried to reproduce this according to these steps, but didn't see the crash (on my local mac build). Will try again tomorrow.

Comment 6

[Boris Chiou [:boris]]

(In reply to Boris Chiou [:boris] (away July 3rd ~ July 7th) from comment #5)
> (In reply to Johannes Pfrang [:johnp] from comment #1)
> > STR for fresh profile:
> > 
> > 1. Play a YouTube Video and switch forth and back between normal and
> > full-screen until content crashes
> 
> The full-screen means the full-screen of firefox, instead of that of video,
> right?
> 
> > => bp-f5248f91-e8e3-4438-83a0-b1b2d0170627
> 
> I tried to reproduce this according to these steps, but didn't see the crash
> (on my local mac build). Will try again tomorrow.

Just verified this. This is a duplicate of bug 1375812.

Comment 7

[Darkspirit]

(In reply to Boris Chiou [:boris] (away July 3rd ~ July 7th) from comment #6)
> Just verified this. This is a duplicate of bug 1375812.

Just the same problem or did you verify that this was fixed by bug 1375812?
I would like to mark this as Verified:Duplicate for a better overview in stylo-site-issues (because of bug 1375983 comment 5).

Comment 8

[Darkspirit]

Verified in comment 6.