1608775 - Crash in [@ style::rule_tree::{{impl}}::drop]

Status: RESOLVED DUPLICATE of bug 1607553

(Core :: CSS Parsing and Computation, defect)

Description

[Gabriele Svelto [:gsvelto]]

This bug is for crash report bp-3e679ee1-3dbf-4e19-bc23-e83780200113.

Top 10 frames of crashing thread:

0 xul.dll RustMozCrash mozglue/static/rust/wrappers.cpp:16
1 xul.dll mozglue_static::panic_hook mozglue/static/rust/lib.rs:89
2 xul.dll core::ops::function::Fn::call<fn src/libcore/ops/function.rs:227
3 xul.dll std::panicking::rust_panic_with_hook src/libstd/panicking.rs:477
4 xul.dll std::panicking::begin_panic<str*> src/libstd/panicking.rs:407
5 xul.dll style::rule_tree::{{impl}}::drop servo/components/style/rule_tree/mod.rs:1723
6 xul.dll servo_arc::Arc<style::gecko_properties::ComputedValues>::drop_slow<style::gecko_properties::ComputedValues> servo/components/servo_arc/lib.rs:357
7 xul.dll style::style_resolver::StyleResolverForElement<style::gecko::wrapper::GeckoElement>::resolve_style<style::gecko::wrapper::GeckoElement> servo/components/style/style_resolver.rs:264
8 xul.dll style::traversal::compute_style<style::gecko::wrapper::GeckoElement> servo/components/style/traversal.rs:608
9 xul.dll rayon_core::job::{{impl}}::execute<closure-0> third_party/rust/rayon-core/src/job.rs:167

The crash is caused by this assertion:

https://hg.mozilla.org/mozilla-central/annotate/fb64636dad2ce36de6b609c09dc1ea990308e943/servo/components/style/rule_tree/mod.rs#l1723

Note that there's more crashes under this signatures with a different stack. This stack is only present in 74 and seems to have started with buildid 20200108094158.

Comment 1

[Emilio Cobos Álvarez [:emilio]]

Yeah, I updated that assertion on nightly to try to catch a semi-consistent repro for this, see bug 1607553.