Crash near null in [@ nsLayoutUtils::MaybeCreateDisplayPortInFirstScrollFrameEncountered]

NEW
Unassigned

Status

()

Core
Layout
P3
normal
23 days ago
17 days ago

People

(Reporter: RyanVM, Unassigned)

Tracking

(Blocks: 1 bug, {assertion, crash, testcase})

Trunk
assertion, crash, testcase
Points:
---

Firefox Tracking Flags

(firefox-esr52 unaffected, firefox56 wontfix, firefox57 wontfix, firefox58 fix-optional)

Details

(crash signature)

Attachments

(1 attachment)

(Reporter)

Description

23 days ago
Created attachment 8922024 [details]
index.html

As originally discussed in bug 1234701 comment 5 and onward. Crashes opt builds and hits the below asserts in debug builds:

ASSERTION: frame tree not empty, but caller reported complete status: 'aSubtreeRoot->GetPrevInFlow()', file z:/build/build/src/layout/base/nsLayoutUtils.cpp, line 7881
ASSERTION: frame tree not empty, but caller reported complete status: 'aSubtreeRoot->GetPrevInFlow()', file z:/build/build/src/layout/base/nsLayoutUtils.cpp, line 7881
ASSERTION: Placeholder relationship should have been torn down already; this might mean we have a stray placeholder in the tree.: '!placeholder || nsLayoutUtils::IsProperAncestorFrame(aDestructRoot, placeholder)', file z:/build/build/src/layout/generic/nsFrame.cpp, line 757
ASSERTION: Null out-of-flow for placeholder?: 'outOfFlow', file z:\build\build\src\layout\generic\nsPlaceholderFrame.h, line 182
(Reporter)

Updated

23 days ago
Has Regression Range: --- → yes
You need to log in before you can comment on or make changes to this bug.