1466594 - Assertion failure: !IsFramePartOfIBSplit(aParentFrame) || !GetIBSplitSibling(aParentFrame) || !GetIBSplitSibling(aParentFrame)->PrincipalChildList().FirstChild() (aParentFrame has a ib-split sibling with kids?), at src/layout/base/nsCSSFrameConstructor.cp

Status: NEW

(Core :: Layout, defect, P3)

Description

[Tyson Smith [:tsmith]]

Attachment: testcase.html

Reduced with m-c:
BuildID=20180604095036
SourceStamp=fa5724780fe76d6ccbbd08d978342a1db6a43d49

Assertion failure: !IsFramePartOfIBSplit(aParentFrame) || !GetIBSplitSibling(aParentFrame) || !GetIBSplitSibling(aParentFrame)->PrincipalChildList().FirstChild() (aParentFrame has a ib-split sibling with kids?), at src/layout/base/nsCSSFrameConstructor.cpp:6250

#0 nsCSSFrameConstructor::AppendFramesToParent(nsFrameConstructorState&, nsContainerFrame*, nsFrameItems&, nsIFrame*, bool) src/layout/base/nsCSSFrameConstructor.cpp:6256:3
#1 nsCSSFrameConstructor::ContentAppended(nsIContent*, nsCSSFrameConstructor::InsertionKind) src/layout/base/nsCSSFrameConstructor.cpp:7293:5
#2 mozilla::RestyleManager::ProcessRestyledFrames(nsStyleChangeList&) src/layout/base/RestyleManager.cpp:1402:27
#3 mozilla::RestyleManager::DoProcessPendingRestyles(mozilla::ServoTraversalFlags) src/layout/base/RestyleManager.cpp:2994:9
#4 mozilla::PresShell::DoFlushPendingNotifications(mozilla::ChangesToFlush) src/layout/base/PresShell.cpp:4285:41
#5 nsIDocument::FlushPendingNotifications(mozilla::ChangesToFlush) src/dom/base/nsDocument.cpp:7504:12
#6 nsIDocument::FlushPendingNotifications(mozilla::FlushType) src/dom/base/nsDocument.cpp:7443:3
#7 nsDocLoader::DocLoaderIsEmpty(bool) src/uriloader/base/nsDocLoader.cpp:694:14
#8 nsDocLoader::OnStopRequest(nsIRequest*, nsISupports*, nsresult) src/uriloader/base/nsDocLoader.cpp:627:5
#9 non-virtual thunk to nsDocLoader::OnStopRequest(nsIRequest*, nsISupports*, nsresult) src/uriloader/base/nsDocLoader.cpp
#10 mozilla::net::nsLoadGroup::RemoveRequest(nsIRequest*, nsISupports*, nsresult) src/netwerk/base/nsLoadGroup.cpp:629:28
#11 nsIDocument::DoUnblockOnload() src/dom/base/nsDocument.cpp:8343:18
#12 nsDocument::UnblockOnload(bool) src/dom/base/nsDocument.cpp:8265:9
#13 nsIDocument::DispatchContentLoadedEvents() src/dom/base/nsDocument.cpp:5223:3
#14 mozilla::detail::RunnableMethodImpl<nsIDocument*, void (nsIDocument::*)(), true, (mozilla::RunnableKind)0>::Run() src/obj-firefox/dist/include/nsThreadUtils.h:1216:13
#15 mozilla::SchedulerGroup::Runnable::Run() src/xpcom/threads/SchedulerGroup.cpp:337:32
#16 nsThread::ProcessNextEvent(bool, bool*) src/xpcom/threads/nsThread.cpp:1088:14
#17 NS_ProcessNextEvent(nsIThread*, bool) src/xpcom/threads/nsThreadUtils.cpp:519:10
#18 mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:97:21
#19 MessageLoop::RunInternal() src/ipc/chromium/src/base/message_loop.cc:325:10
#20 MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:298:3
#21 nsBaseAppShell::Run() src/widget/nsBaseAppShell.cpp:157:27
#22 XRE_RunAppShell() src/toolkit/xre/nsEmbedFunctions.cpp:893:22
#23 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:269:9
#24 MessageLoop::RunInternal() src/ipc/chromium/src/base/message_loop.cc:325:10
#25 MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:298:3
#26 XRE_InitChildProcess(int, char**, XREChildData const*) src/toolkit/xre/nsEmbedFunctions.cpp:719:34
#27 content_process_main(mozilla::Bootstrap*, int, char**) src/browser/app/../../ipc/contentproc/plugin-container.cpp:50:30
#28 main src/browser/app/nsBrowserApp.cpp:282:18
#29 __libc_start_main /build/glibc-Cl5G7W/glibc-2.23/csu/../csu/libc-start.c:291
#30 _start (firefox+0x423544)

Comment 1

[Tyson Smith [:tsmith]]

This is a long standing issue, please let me know if a Pernosco session would help get it resolved.

Comment 2

[Tyson Smith [:tsmith]]

A Pernosco session is available here: https://pernos.co/debug/jf4dEbvAoZSN7d8WU11Okg/index.html

Comment 5

[Tyson Smith [:tsmith]]

Attachment: testcase.html

Comment 6

[Tyson Smith [:tsmith]]

The DOM fuzzers are still reporting this a few times a day.

Comment 7

[Daniel Holbert [:dholbert] (PTO until 2/24)]

Possibly a duplicate of slightly-older bug 1461017.

Comment 9

[Tyson Smith [:tsmith]]

This has been detected by live site testing.