Closed Bug 1612388 Opened 5 years ago Closed 5 years ago

Crash in [@ free | core::ptr::real_drop_in_place | style::gecko::wrapper::get_animation_rule]

Categories

(Core :: Layout, defect)

Product:
Core
Component:
Layout
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1581121

People

(Reporter: jesup, Unassigned)

Details

(Keywords: crash)

Crash Data

This double-free crash (from Rust) started in FF 69 (it appears). Moderately high volume.

This bug is for crash report bp-45bce37d-720b-4e58-bc14-c283d0200125.

Top 10 frames of crashing thread:

0 firefox free /build/firefox-HR2lU1/firefox-73.0~b8+build1/memory/build/malloc_decls.h:54
1 libxul.so core::ptr::real_drop_in_place /usr/src/rustc-1.39.0/src/libcore/ptr/mod.rs
2 libxul.so style::gecko::wrapper::get_animation_rule /build/firefox-HR2lU1/firefox-73.0~b8+build1/servo/components/style/gecko/wrapper.rs:904
3 libxul.so style::matching::PrivateMatchMethods::replace_rules_internal /build/firefox-HR2lU1/firefox-73.0~b8+build1/servo/components/style/matching.rs:182
4 libxul.so style::traversal::compute_style /build/firefox-HR2lU1/firefox-73.0~b8+build1/servo/components/style/traversal.rs:625
5 libxul.so geckoservo::glue::traverse_subtree /build/firefox-HR2lU1/firefox-73.0~b8+build1/servo/ports/geckolib/glue.rs:262
6 libxul.so Servo_TraverseSubtree /build/firefox-HR2lU1/firefox-73.0~b8+build1/servo/ports/geckolib/glue.rs:312
7 libxul.so StyleDocument /build/firefox-HR2lU1/firefox-73.0~b8+build1/layout/style/ServoStyleSet.cpp:726
8 libxul.so DoProcessPendingRestyles /build/firefox-HR2lU1/firefox-73.0~b8+build1/layout/base/RestyleManager.cpp:3030
9 libxul.so DoFlushPendingNotifications /build/firefox-HR2lU1/firefox-73.0~b8+build1/layout/base/PresShell.cpp:4071

Ubuntu 32bits specific issue, I suppose we are tracking this in bug 1581121.

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.