Closed Bug 1451754 Opened 4 years ago Closed 4 years ago

Crash in MergeState::ProcessItemFromNewList


(Core :: Web Painting, defect)

Not set



Tracking Status
firefox-esr52 --- unaffected
firefox59 --- unaffected
firefox60 --- unaffected
firefox61 --- fixed


(Reporter: bkelly, Assigned: mattwoodrow)



(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is
report bp-36d622c6-b586-49b4-a2e9-4a8270180404.

Top 10 frames of crashing thread:

0 xul.dll MergeState::ProcessItemFromNewList layout/painting/RetainedDisplayListBuilder.cpp:277
1 xul.dll RetainedDisplayListBuilder::MergeDisplayLists layout/painting/RetainedDisplayListBuilder.cpp:463
2 xul.dll MergeState::ProcessItemFromNewList layout/painting/RetainedDisplayListBuilder.cpp:264
3 xul.dll RetainedDisplayListBuilder::MergeDisplayLists layout/painting/RetainedDisplayListBuilder.cpp:463
4 xul.dll RetainedDisplayListBuilder::AttemptPartialUpdate layout/painting/RetainedDisplayListBuilder.cpp:1072
5 xul.dll nsLayoutUtils::PaintFrame layout/base/nsLayoutUtils.cpp:3863
6 xul.dll mozilla::PresShell::Paint layout/base/PresShell.cpp:6336
7 xul.dll nsViewManager::ProcessPendingUpdatesPaint view/nsViewManager.cpp:480
8 xul.dll nsViewManager::ProcessPendingUpdatesForView view/nsViewManager.cpp:412
9 xul.dll nsViewManager::ProcessPendingUpdates view/nsViewManager.cpp:1102

Moving conversation from bug 1448841 comment 31:

(In reply to Matt Woodrow (:mattwoodrow) from comment #31)
> (In reply to Ben Kelly [Part-time, not reviewing][:bkelly] from comment #30)
> > What buildid should have the fix here?  I just got the crash in
> > 20180404100127.
> > 
> >
> > 8b11f0180404#tab-details
> That actually looks like a different crash. Any ideas on STR?

I don't really have any STR, unfortunately.  I was doing my normal workflow when I noticed my long running gmail tab crash.  Usually I was working on a different tab, etc.

The tabs I likely had open at the time:

 - gmail
 - fastmail
 - bugzilla
 - irccloud
 - searchfox
 - pocket
 - mastodon

The only addon I have installed is multi-account containers and most of my tabs are divided into containers.

What do you think?
Flags: needinfo?(matt.woodrow)
Looks like a nullptr mItem?
I also hit this crash for the gmail tab but I left my machine alone for a couple of hours. So some background activity should have caused this.

Crash report: bp-c4d1c907-cb0e-4a5b-b74f-6d44b0180405
OS: Windows 10 → All
Hardware: Unspecified → All
I already had this crash 7 times today. It affected the content process that had my gmail tab, my youtube tab and probably a couple others.
[Tracking Requested - why for this release]: This is the number 3 top crash on Windows (13% of all crashes) and the number 2 top crash on Linux (19% of all crashes) for the April 4 Nightlies.

However, this might just be a variant of bug 1451384, which is a top crash in the same method. That has a fix, so we'll see if it goes away.
See Also: → 1451384
Latest build id affected by the crash is 20180405104009, seems to be fixed by bug 1451384.
Assignee: nobody → matt.woodrow
Closed: 4 years ago
Flags: needinfo?(matt.woodrow)
Resolution: --- → FIXED
Target Milestone: --- → mozilla61
You need to log in before you can comment on or make changes to this bug.