1473014 - Crash in static void std::alloc::rust_oom

Status: RESOLVED DUPLICATE of bug 1448868

(Core :: CSS Parsing and Computation, defect)

Description

[Marcia Knous [:marcia]]

This bug was filed from the Socorro interface and is
report bp-84b9b036-f933-4df2-b8cc-9b4170180703.
=============================================================

Seen while looking at nightly crash data. Crashes started using 20180701100415: https://bit.ly/2KIS1nc. 18 crashes/14 installations so far. All have crash reason EXCEPTION_ACCESS_VIOLATION_READ. Windows 10 and Win 7 are affected.

Possible regression range based on Build ID: https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=748e5da7e713fe3d5ce3dd275c7763a7b5e4a91e&tochange=3cfc350101967376909ad3c729f9779ae0ab7a94

Top 10 frames of crashing thread:

0 xul.dll static void std::alloc::rust_oom src/libstd/alloc.rs:137
1 xul.dll static struct style::media_queries::media_list::MediaList style::media_queries::media_list::MediaList::parse servo/components/style/media_queries/media_list.rs:59
2 xul.dll void geckoservo::glue::Servo_MediaList_SetText servo/ports/geckolib/glue.rs:3787
3 xul.dll mozilla::dom::MediaList::SetTextInternal layout/style/MediaList.cpp:115
4 xul.dll mozilla::dom::MediaList::MediaList layout/style/MediaList.cpp:83
5 xul.dll mozilla::dom::MediaList::Create layout/style/MediaList.cpp:95
6 xul.dll mozilla::dom::MediaQueryList::MediaQueryList layout/style/MediaQueryList.cpp:30
7 xul.dll nsIDocument::MatchMedia dom/base/nsDocument.cpp:6371
8 xul.dll nsGlobalWindowInner::MatchMedia dom/base/nsGlobalWindowInner.cpp:3548
9 xul.dll static bool mozilla::dom::Window_Binding::matchMedia dom/bindings/WindowBinding.cpp:3027

=============================================================

Comment 1

[Cameron McCormack (:heycam)]

I guess this is another signature of bug 1448868?

Comment 2

[Emilio Cobos Álvarez [:emilio]]

Yeah, probably from the rust 1.28 update in automation.

Comment 3

[get_logan]

This crash occurs when trying to scroll down on http://www.makeitmagic.ru/ with webrender enabled.

Does not occur if webrender is disabled.

bp-5e440243-dd5c-4987-97df-1a6340180723

Comment 4

[get_logan]

2018-07-23T17:22:55: INFO : Narrowed inbound regression window from [34322841, 2a228292] (4 builds) to [38cfaf35, 2a228292] (2 builds) (~1 steps left)
2018-07-23T17:22:55: DEBUG : Starting merge handling...
2018-07-23T17:22:55: DEBUG : Using url: https://hg.mozilla.org/integration/mozilla-inbound/json-pushes?changeset=2a2282923b5abdf8b95bad5a59e694ac8e744883&full=1
2018-07-23T17:22:56: DEBUG : Found commit message:
Bug 1450015. Enable blob invalidation by default. r=gankro


2018-07-23T17:22:56: DEBUG : Did not find a branch, checking all integration branches
2018-07-23T17:22:56: INFO : The bisection is done.
2018-07-23T17:22:56: INFO : Stopped

Comment 5

[get_logan]

Bug 1450015 is a regression that induces:

Bug 1468020 (instant tab crash on http://myphoneandme.vodafone.com.tr/ with webrender enabled)
Bug 1473014 (crash occurs when trying to scroll down on http://www.makeitmagic.ru/ with webrender enabled)