stylo: Crash in nsFrameManager::RemoveFrame

RESOLVED FIXED in Firefox 56

Status

()

P1
critical
RESOLVED FIXED
2 years ago
2 years ago

People

(Reporter: cpeterson, Assigned: heycam)

Tracking

(Blocks: 1 bug, {crash})

unspecified
mozilla56
Unspecified
macOS
crash
Points:
---

Firefox Tracking Flags

(firefox-esr52 unaffected, firefox54 unaffected, firefox55 unaffected, firefox56 fixed)

Details

(crash signature)

(Reporter)

Description

2 years ago
This bug was filed from the Socorro interface and is 
report bp-46aff620-fec3-401e-b1b5-6880f0170716.
=============================================================
This is pretty much just another place where an use-after-free absolute frame can lead to crash.
This specific crash I got when clicking Publish in mozreview.
Status: NEW → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → FIXED
Er, I don't understand why that closes the bug...
Flags: needinfo?(cam)
Must have misclicked.

Anyway, currently looking into this.
Assignee: nobody → cam
Status: RESOLVED → REOPENED
Flags: needinfo?(cam)
Resolution: FIXED → ---
Status: REOPENED → ASSIGNED
FWIW, the crashes happen only OS X?
I did encounter it on OS X, and am currently trying to reproduce on Linux in rr.
No longer happened since 20170716100325.
Cameron, please re-open if you see this crash again.
Status: ASSIGNED → RESOLVED
Last Resolved: 2 years ago2 years ago
Resolution: --- → FIXED
status-firefox54: --- → unaffected
status-firefox55: --- → unaffected
status-firefox56: --- → fixed
status-firefox-esr52: --- → unaffected
Target Milestone: --- → mozilla56
You need to log in before you can comment on or make changes to this bug.