1548940 - Assertion failure: metadata->HasScrollClip(), at src/layout/painting/FrameLayerBuilder.cpp:5756

Status: NEW

(Core :: Web Painting, defect, P3)

Description

[Tyson Smith [:tsmith]]

Attachment: testcase.html

Assertion failure: metadata->HasScrollClip(), at src/layout/painting/FrameLayerBuilder.cpp:5756

eip = 0xc35eb87f   esp = 0xc91f8e90   ebp = 0xc91f94c8   ebx = 0xc85dede0
esi = 0x0000167c   edi = 0xc91f8ee8   eax = 0xc5fe7a4d   ecx = 0xc967217c
edx = 0x0000008c   efl = 0x00210282
OS|Android|0.0.0 Linux 4.4.124+ #1 SMP PREEMPT Sun Nov 4 14:31:25 UTC 2018 i686
CPU|x86|GenuineIntel family 6 model 6 stepping 3|4
GPU|||
Crash|SIGSEGV|0x0|14
14|0|libxul.so|mozilla::ContainerState::SetupScrollingMetadata(mozilla::NewLayerEntry*)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|0|0x8
14|1|libxul.so|mozilla::ContainerState::PostprocessRetainedLayers(mozilla::gfx::IntRegionTyped<mozilla::gfx::UnknownUnits>*)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|5793|0xf
14|2|libxul.so|mozilla::ContainerState::Finish(unsigned int*, mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> const&, nsDisplayList*)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|5885|0x9
14|3|libxul.so|mozilla::FrameLayerBuilder::BuildContainerLayerFor(nsDisplayListBuilder*, mozilla::layers::LayerManager*, nsIFrame*, nsDisplayItem*, nsDisplayList*, mozilla::ContainerLayerParameters const&, mozilla::gfx::Matrix4x4Typed<mozilla::gfx::UnknownUnits, mozilla::gfx::UnknownUnits, float> const*, unsigned int)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|6266|0x15
14|4|libxul.so|nsDisplayOwnLayer::BuildLayer(nsDisplayListBuilder*, mozilla::layers::LayerManager*, mozilla::ContainerLayerParameters const&)|hg:hg.mozilla.org/mozilla-central:layout/painting/nsDisplayList.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|6499|0x1f
14|5|libxul.so|nsDisplayFixedPosition::BuildLayer(nsDisplayListBuilder*, mozilla::layers::LayerManager*, mozilla::ContainerLayerParameters const&)|hg:hg.mozilla.org/mozilla-central:layout/painting/nsDisplayList.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|6945|0x8
14|6|libxul.so|mozilla::ContainerState::ProcessDisplayItems(nsDisplayList*)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|4783|0x24
14|7|libxul.so|mozilla::FrameLayerBuilder::BuildContainerLayerFor(nsDisplayListBuilder*, mozilla::layers::LayerManager*, nsIFrame*, nsDisplayItem*, nsDisplayList*, mozilla::ContainerLayerParameters const&, mozilla::gfx::Matrix4x4Typed<mozilla::gfx::UnknownUnits, mozilla::gfx::UnknownUnits, float> const*, unsigned int)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|6259|0xd
14|8|libxul.so|nsDisplayOwnLayer::BuildLayer(nsDisplayListBuilder*, mozilla::layers::LayerManager*, mozilla::ContainerLayerParameters const&)|hg:hg.mozilla.org/mozilla-central:layout/painting/nsDisplayList.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|6499|0x1f
14|9|libxul.so|nsDisplayAsyncZoom::BuildLayer(nsDisplayListBuilder*, mozilla::layers::LayerManager*, mozilla::ContainerLayerParameters const&)|hg:hg.mozilla.org/mozilla-central:layout/painting/nsDisplayList.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|7503|0x24
14|10|libxul.so|mozilla::ContainerState::ProcessDisplayItems(nsDisplayList*)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|4783|0x24
14|11|libxul.so|mozilla::FrameLayerBuilder::BuildContainerLayerFor(nsDisplayListBuilder*, mozilla::layers::LayerManager*, nsIFrame*, nsDisplayItem*, nsDisplayList*, mozilla::ContainerLayerParameters const&, mozilla::gfx::Matrix4x4Typed<mozilla::gfx::UnknownUnits, mozilla::gfx::UnknownUnits, float> const*, unsigned int)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|6259|0xd
14|12|libxul.so|nsDisplayOwnLayer::BuildLayer(nsDisplayListBuilder*, mozilla::layers::LayerManager*, mozilla::ContainerLayerParameters const&)|hg:hg.mozilla.org/mozilla-central:layout/painting/nsDisplayList.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|6499|0x1f
14|13|libxul.so|nsDisplayResolution::BuildLayer(nsDisplayListBuilder*, mozilla::layers::LayerManager*, mozilla::ContainerLayerParameters const&)|hg:hg.mozilla.org/mozilla-central:layout/painting/nsDisplayList.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|6887|0x24
14|14|libxul.so|mozilla::ContainerState::ProcessDisplayItems(nsDisplayList*)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|4783|0x24
14|15|libxul.so|mozilla::FrameLayerBuilder::BuildContainerLayerFor(nsDisplayListBuilder*, mozilla::layers::LayerManager*, nsIFrame*, nsDisplayItem*, nsDisplayList*, mozilla::ContainerLayerParameters const&, mozilla::gfx::Matrix4x4Typed<mozilla::gfx::UnknownUnits, mozilla::gfx::UnknownUnits, float> const*, unsigned int)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|6259|0xd
14|16|libxul.so|nsDisplayList::BuildLayers(nsDisplayListBuilder*, mozilla::layers::LayerManager*, unsigned int, bool)|hg:hg.mozilla.org/mozilla-central:layout/painting/nsDisplayList.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|2640|0x47
14|17|libxul.so|nsDisplayList::PaintRoot(nsDisplayListBuilder*, gfxContext*, unsigned int)|hg:hg.mozilla.org/mozilla-central:layout/painting/nsDisplayList.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|2856|0x28
14|18|libxul.so|nsLayoutUtils::PaintFrame(gfxContext*, nsIFrame*, nsRegion const&, unsigned int, nsDisplayListBuilderMode, nsLayoutUtils::PaintFrameFlags)|hg:hg.mozilla.org/mozilla-central:layout/base/nsLayoutUtils.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|3994|0x8
14|19|libxul.so|mozilla::PresShell::Paint(nsView*, nsRegion const&, mozilla::PaintFlags)|hg:hg.mozilla.org/mozilla-central:layout/base/PresShell.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|6074|0x1e
14|20|libxul.so|nsViewManager::ProcessPendingUpdatesPaint(nsIWidget*)|hg:hg.mozilla.org/mozilla-central:view/nsViewManager.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|462|0x2c
14|21|libxul.so|nsViewManager::ProcessPendingUpdatesForView(nsView*, bool)|hg:hg.mozilla.org/mozilla-central:view/nsViewManager.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|397|0xc
14|22|libxul.so|nsViewManager::ProcessPendingUpdates()|hg:hg.mozilla.org/mozilla-central:view/nsViewManager.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|1020|0x17
14|23|libxul.so|nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|2067|0x10
14|24|libxul.so|mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&)|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|348|0x33
14|25|libxul.so|mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|342|0x4c
14|26|libxul.so|mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|708|0x41
14|27|libxul.so|mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::ParentProcessVsyncNotifier::Run()|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|508|0x3d
14|28|libxul.so|nsThread::ProcessNextEvent(bool, bool*)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|1180|0x16
14|29|libxul.so|NS_ProcessNextEvent(nsIThread*, bool)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|486|0x11
14|30|libxul.so|mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessagePump.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|88|0xd
14|31|libxul.so|MessageLoop::RunInternal()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|315|0x16
14|32|libxul.so|MessageLoop::Run()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|290|0xb
14|33|libxul.so|nsBaseAppShell::Run()|hg:hg.mozilla.org/mozilla-central:widget/nsBaseAppShell.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|137|0xe
14|34|libxul.so|nsAppStartup::Run()|hg:hg.mozilla.org/mozilla-central:toolkit/components/startup/nsAppStartup.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|276|0x18
14|35|libxul.so|XREMain::XRE_mainRun()|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsAppRunner.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|4548|0x10
14|36|libxul.so|XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&)|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsAppRunner.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|4686|0x8
14|37|libxul.so|XRE_main(int, char**, mozilla::BootstrapConfig const&)|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsAppRunner.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|4767|0xf
14|38|libxul.so|GeckoStart|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsAndroidStartup.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|47|0xd
14|39|libxul.so|mozilla::BootstrapImpl::GeckoStart(_JNIEnv*, char**, int, mozilla::StaticXREAppData const&)|hg:hg.mozilla.org/mozilla-central:toolkit/xre/Bootstrap.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|77|0x11
14|40|libmozglue.so|Java_org_mozilla_gecko_mozglue_GeckoLoader_nativeRun|hg:hg.mozilla.org/mozilla-central:mozglue/android/APKOpen.cpp:c68ff92fe54c75338c3a937bc6c4e615d9b1d45a|372|0x2a
14|41|libart.so||||0x634318