1411119 - stylo: Assertion failure: !preTransformOverflows (GetVisualOverflowRect() won't return the pre-effects rect!), at /builds/worker/workspace/build/src/layout/svg/nsSVGIntegrationUtils.cpp:104

Status: RESOLVED WORKSFORME

(Core :: SVG, defect, P3)

Description

[Jason Kratzer [:jkratzer]]

Attachment: trigger.html

Testcase found while fuzzing mozilla-central rev 0bd9b61304e2.

Comment 1

[Jason Kratzer [:jkratzer]]

Attachment: log_minidump.txt

Comment 2

[Jason Kratzer [:jkratzer]]

Attachment: log_stderr.txt

Comment 3

[Ryan VanderMeulen [:RyanVM]]

Only reproduces with Stylo enabled.

INFO: Last good revision: 159610c3ad3417d5956b82a732186f987cbb682d
INFO: First bad revision: 5b33032b3e09db08e4c0ea44817f57f00b72d84d
INFO: Pushlog:
https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=159610c3ad3417d5956b82a732186f987cbb682d&tochange=5b33032b3e09db08e4c0ea44817f57f00b72d84d

Comment 4

[Xidorn Quan [:xidorn] UTC+10]

It is unrelated to bug 1366544. That bug just happens to implement the syntax used here.

A modified testcase using unprefixed radial-gradient may track back further.

Comment 5

[Xidorn Quan [:xidorn] UTC+10]

Attachment: simplified and modified testcase

Comment 6

[Xidorn Quan [:xidorn] UTC+10]

Could you try locating the regression range again with the modified testcase?

Comment 7

[Xidorn Quan [:xidorn] UTC+10]

That may end up all the way back to style enabling, I guess :/

Comment 8

[Ryan VanderMeulen [:RyanVM]]

(In reply to Xidorn Quan [:xidorn] UTC+10 (less responsive Nov 5 ~ Dec 16) from comment #6)
> Could you try locating the regression range again with the modified testcase?

This testcase asserts with or without Stylo and goes back further than mozregression can bisect.

Comment 9

[Firefox Bug Husbandry Bot]

https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Move_fix-optionals

Comment 10

[Tyson Smith [:tsmith]]

This issue is no longer reported by the fuzzers and the attached testcase is no longer reproducing the issue.