Closed Bug 1471179 Opened 6 years ago Closed 6 years ago

Crash in mozilla::ComputedStyle::DoGetStyleBackground<T>

Categories

(Core :: Web Painting, defect, P1)

61 Branch
defect

Tracking

()

RESOLVED WORKSFORME
Tracking Status
firefox-esr52 --- unaffected
firefox-esr60 --- unaffected
firefox61 --- wontfix
firefox62 --- wontfix
firefox63 --- affected

People

(Reporter: philipp, Assigned: mattwoodrow)

References

(Blocks 1 open bug)

Details

(5 keywords)

Crash Data

This bug was filed from the Socorro interface and is
report bp-fa8f0ec2-b291-4941-86b3-9fe2b0180623.
=============================================================

Top 10 frames of crashing thread:

0 xul.dll mozilla::ComputedStyle::DoGetStyleBackground<1> layout/style/nsStyleStructList.h:44
1 xul.dll nsCSSRendering::FindBackgroundStyleFrame layout/painting/nsCSSRendering.cpp:1348
2 xul.dll nsDisplayBackgroundImage::ShouldCreateOwnLayer layout/painting/nsDisplayList.cpp:4003
3 xul.dll nsDisplayBackgroundImage::GetLayerState layout/painting/nsDisplayList.cpp:4055
4 xul.dll mozilla::ContainerState::ProcessDisplayItems layout/painting/FrameLayerBuilder.cpp:4387
5 xul.dll mozilla::FrameLayerBuilder::BuildContainerLayerFor layout/painting/FrameLayerBuilder.cpp:5981
6 xul.dll nsDisplayOwnLayer::BuildLayer layout/painting/nsDisplayList.cpp:7038
7 xul.dll nsDisplayFixedPosition::BuildLayer layout/painting/nsDisplayList.cpp:7391
8 xul.dll mozilla::ContainerState::ProcessDisplayItems layout/painting/FrameLayerBuilder.cpp:4636
9 xul.dll mozilla::FrameLayerBuilder::BuildContainerLayerFor layout/painting/FrameLayerBuilder.cpp:5981

=============================================================

this crash signature was showing up in a low volume during the 61.0b cycle across platforms.
Group: core-security → layout-core-security
Matt -- Can you take a look at this?  Is this related to the RDL changes for Fx 61?  If you're the wrong owner for this, please needinfo me back.  Thanks!
Assignee: nobody → matt.woodrow
Flags: needinfo?(matt.woodrow)
Priority: -- → P1
Keywords: sec-high
Looks like it is! Can't figure out why it's crashing yet, will try debug the minidumps this week.
Component: CSS Parsing and Computation → Layout: Web Painting
Flags: needinfo?(matt.woodrow)
No signs of this on 63 yet, but we also don't seem to see this signature until a given release goes to GA. I'm setting Fx63 to affected for now so we can check back later in the cycle to see there's any hits. Otherwise, can close as WFM.
Still no crash on 63 2 weeks after the release, the few crashes we have are all exclusively still on 62, WFM.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WORKSFORME
Group: layout-core-security
You need to log in before you can comment on or make changes to this bug.