Closed Bug 1554279 Opened 5 years ago Closed 5 years ago

Crash in [@ InvalidArrayIndex_CRASH | nsGridContainerFrame::LineRange::ToLength]

Categories

(Core :: Layout: Grid, defect)

Unspecified
Windows 7
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME
Tracking Status
firefox67.0.1 --- unaffected
firefox68 --- unaffected
firefox69 --- affected

People

(Reporter: marcia, Unassigned)

References

Details

(Keywords: crash, regression)

Crash Data

This bug is for crash report bp-6719b7e3-baea-44ab-8b4d-34c8e0190523.

Seen while looking at crash stats - this signature started in 20190523044159 and seems a bit different than the earlier filed Bug 1553824: https://bit.ly/2JEn86m

Regression range: https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=5f95b3f2ea44723ba6a8c41a4b27c88032df709f&tochange=d551d37b9ad0dd1c8ad2e87c74344f623fc4b694

Comments - Crashing while editing grid-column values; display: grid; grid-template-columns: subgrid; grid-column: 2 / 5; grid-row: 2 / 4;

Top 10 frames of crashing thread:

0 xul.dll InvalidArrayIndex_CRASH xpcom/ds/nsTArray.cpp:27
1 xul.dll int nsGridContainerFrame::LineRange::ToLength layout/generic/nsGridContainerFrame.cpp:5826
2 xul.dll class mozilla::LogicalSize nsGridContainerFrame::GridReflowInput::PercentageBasisFor layout/generic/nsGridContainerFrame.cpp:5887
3 xul.dll static int MinContentContribution layout/generic/nsGridContainerFrame.cpp:4644
4 xul.dll bool nsGridContainerFrame::Tracks::ResolveIntrinsicSizeStep1 layout/generic/nsGridContainerFrame.cpp
5 xul.dll void nsGridContainerFrame::Tracks::ResolveIntrinsicSize layout/generic/nsGridContainerFrame.cpp:5268
6 xul.dll void nsGridContainerFrame::Tracks::CalculateSizes layout/generic/nsGridContainerFrame.cpp:4756
7 xul.dll void nsGridContainerFrame::GridReflowInput::CalculateTrackSizesForAxis layout/generic/nsGridContainerFrame.cpp:3081
8 xul.dll void nsGridContainerFrame::GridReflowInput::CalculateTrackSizes layout/generic/nsGridContainerFrame.cpp:3125
9 xul.dll void nsGridContainerFrame::Reflow layout/generic/nsGridContainerFrame.cpp:7070

QA Whiteboard: [qa-regression-triage]

This crash hasn't been seen since 20190524095337. If it doesn't reappear we can likely close this bug out.

Per triage team, closing this one out as WFM.

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → WORKSFORME
See Also: → 1608851
You need to log in before you can comment on or make changes to this bug.