Closed Bug 1585383 Opened 5 years ago Closed 5 years ago

Crash in [@ MatrixForTransformFunction]

Categories

(Core :: CSS Parsing and Computation, defect)

Product:
Core
Component:
CSS Parsing and Computation
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1581121
Tracking Flags:
Tracking Status
firefox69 --- affected
firefox70 --- ?
firefox71 --- ?

People

(Reporter: philipp, Unassigned)

References

Details

(Keywords: crash, csectype-wildptr, regression)

Crash Data

This bug is for crash report bp-46ed6747-2d3d-4fb1-ba77-a0a840191001.

Top 10 frames of crashing thread:

0 libxul.so MatrixForTransformFunction /build/firefox-e5kVrV/firefox-69.0.1+build1/layout/style/nsStyleTransformMatrix.cpp:392
1 libxul.so nsStyleTransformMatrix::ReadTransforms /build/firefox-e5kVrV/firefox-69.0.1+build1/layout/style/nsStyleTransformMatrix.cpp:561
2 libxul.so nsDisplayTransform::GetResultingTransformMatrixInternal /build/firefox-e5kVrV/firefox-69.0.1+build1/layout/painting/nsDisplayList.cpp:8238
3 libxul.so nsDisplayTransform::GetResultingTransformMatrix /build/firefox-e5kVrV/firefox-69.0.1+build1/layout/painting/nsDisplayList.cpp:8183
4 libxul.so mozilla::layers::AnimationHelper::ServoAnimationValueToMatrix4x4 /build/firefox-e5kVrV/firefox-69.0.1+build1/gfx/layers/AnimationHelper.cpp:677
5 libxul.so ForEachNode<mozilla::layers::ForwardIterator, mozilla::layers::Layer*, mozilla::layers::SampleAnimations> > /build/firefox-e5kVrV/firefox-69.0.1+build1/gfx/layers/TreeTraversal.h:138
6 libxul.so ForEachNode<mozilla::layers::ForwardIterator, mozilla::layers::Layer*, mozilla::layers::SampleAnimations> > /build/firefox-e5kVrV/firefox-69.0.1+build1/gfx/layers/TreeTraversal.h:142
7 libxul.so ForEachNode<mozilla::layers::ForwardIterator, mozilla::layers::Layer*, mozilla::layers::SampleAnimations> > /build/firefox-e5kVrV/firefox-69.0.1+build1/gfx/layers/TreeTraversal.h:142
8 libxul.so mozilla::layers::AsyncCompositionManager::TransformShadowTree /build/firefox-e5kVrV/firefox-69.0.1+build1/gfx/layers/composite/AsyncCompositionManager.cpp:1414
9 libxul.so mozilla::layers::CompositorBridgeParent::CompositeToTarget /build/firefox-e5kVrV/firefox-69.0.1+build1/gfx/layers/ipc/CompositorBridgeParent.cpp:987

these browser crashes come from 3rd party distro-builds x86 linux builds are jumping up in firefox 69 (also see bug 1581121 for a similar phenomenon). overall the browser crash rate for linux more than doubled in this release, and these crashes may cause the bulk of it.

Yeah, I don't think it's useful to have both bugs open, tbh.

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → DUPLICATE

i wasn't sure if it's the same thing or just similar, but then i can just add the additional signatures in the other bug.

Group: layout-core-security
You need to log in before you can comment on or make changes to this bug.