1640028 - use-after-poison in [@ nsFlexContainerFrame::ReflowChildren]

Reporter

Description

•

4 years ago

Attached file testcase.html — Details

Reduced with m-c 20200515-5a0a960a8d55

==31301==ERROR: AddressSanitizer: use-after-poison on address 0x6250002c6ef8 at pc 0x7f99868656ca bp 0x7ffee8ef3670 sp 0x7ffee8ef3668
READ of size 8 at 0x6250002c6ef8 thread T0 (Web Content)
    #0 0x7f99868656c9 in nsFlexContainerFrame::ReflowChildren(mozilla::ReflowInput const&, int, int, mozilla::LogicalSize const&, mozilla::LogicalMargin const&, int, int&, nsTArray<nsFlexContainerFrame::FlexLine>&, nsTArray<nsIFrame*>&, nsFlexContainerFrame::FlexboxAxisTracker const&, bool) src/layout/generic/nsFlexContainerFrame.cpp:5090:25
    #1 0x7f99868631f1 in nsFlexContainerFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/nsFlexContainerFrame.cpp:4448:7
    #2 0x7f99868436b3 in nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, mozilla::WritingMode const&, mozilla::LogicalPoint const&, nsSize const&, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) src/layout/generic/nsContainerFrame.cpp:927:14
    #3 0x7f9986857fcf in nsFlexContainerFrame::MeasureAscentAndBSizeForFlexItem(nsFlexContainerFrame::FlexItem&, mozilla::ReflowInput&) src/layout/generic/nsFlexContainerFrame.cpp:1829:3
    #4 0x7f99868623f0 in nsFlexContainerFrame::SizeItemInCrossAxis(mozilla::ReflowInput&, nsFlexContainerFrame::FlexItem&) src/layout/generic/nsFlexContainerFrame.cpp:4214:7
    #5 0x7f9986864003 in nsFlexContainerFrame::DoFlexLayout(mozilla::ReflowInput const&, nsReflowStatus&, int&, int&, int&, int, int, nsTArray<nsFlexContainerFrame::FlexLine>&, nsTArray<nsFlexContainerFrame::StrutInfo>&, nsTArray<nsIFrame*>&, nsFlexContainerFrame::FlexboxAxisTracker const&, int, int, bool, ComputedFlexContainerInfo*) src/layout/generic/nsFlexContainerFrame.cpp:4926:9
    #6 0x7f9986862f3f in nsFlexContainerFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/nsFlexContainerFrame.cpp:4350:5
    #7 0x7f99868436b3 in nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, mozilla::WritingMode const&, mozilla::LogicalPoint const&, nsSize const&, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) src/layout/generic/nsContainerFrame.cpp:927:14
    #8 0x7f9986857fcf in nsFlexContainerFrame::MeasureAscentAndBSizeForFlexItem(nsFlexContainerFrame::FlexItem&, mozilla::ReflowInput&) src/layout/generic/nsFlexContainerFrame.cpp:1829:3
    #9 0x7f99868623f0 in nsFlexContainerFrame::SizeItemInCrossAxis(mozilla::ReflowInput&, nsFlexContainerFrame::FlexItem&) src/layout/generic/nsFlexContainerFrame.cpp:4214:7
    #10 0x7f9986864003 in nsFlexContainerFrame::DoFlexLayout(mozilla::ReflowInput const&, nsReflowStatus&, int&, int&, int&, int, int, nsTArray<nsFlexContainerFrame::FlexLine>&, nsTArray<nsFlexContainerFrame::StrutInfo>&, nsTArray<nsIFrame*>&, nsFlexContainerFrame::FlexboxAxisTracker const&, int, int, bool, ComputedFlexContainerInfo*) src/layout/generic/nsFlexContainerFrame.cpp:4926:9
    #11 0x7f9986862f3f in nsFlexContainerFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/nsFlexContainerFrame.cpp:4350:5
    #12 0x7f99868436b3 in nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, mozilla::WritingMode const&, mozilla::LogicalPoint const&, nsSize const&, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) src/layout/generic/nsContainerFrame.cpp:927:14
    #13 0x7f9986857fcf in nsFlexContainerFrame::MeasureAscentAndBSizeForFlexItem(nsFlexContainerFrame::FlexItem&, mozilla::ReflowInput&) src/layout/generic/nsFlexContainerFrame.cpp:1829:3
    #14 0x7f99868623f0 in nsFlexContainerFrame::SizeItemInCrossAxis(mozilla::ReflowInput&, nsFlexContainerFrame::FlexItem&) src/layout/generic/nsFlexContainerFrame.cpp:4214:7
    #15 0x7f9986864003 in nsFlexContainerFrame::DoFlexLayout(mozilla::ReflowInput const&, nsReflowStatus&, int&, int&, int&, int, int, nsTArray<nsFlexContainerFrame::FlexLine>&, nsTArray<nsFlexContainerFrame::StrutInfo>&, nsTArray<nsIFrame*>&, nsFlexContainerFrame::FlexboxAxisTracker const&, int, int, bool, ComputedFlexContainerInfo*) src/layout/generic/nsFlexContainerFrame.cpp:4926:9
    #16 0x7f9986862f3f in nsFlexContainerFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/nsFlexContainerFrame.cpp:4350:5
    #17 0x7f9986825772 in nsBlockReflowContext::ReflowBlock(mozilla::LogicalRect const&, bool, nsCollapsingMargin&, int, bool, nsLineBox*, mozilla::ReflowInput&, nsReflowStatus&, mozilla::BlockReflowInput&) src/layout/generic/nsBlockReflowContext.cpp:293:11
    #18 0x7f998682053f in nsBlockFrame::ReflowBlockFrame(mozilla::BlockReflowInput&, nsLineList_iterator, bool*) src/layout/generic/nsBlockFrame.cpp:3791:11
    #19 0x7f998681dc9e in nsBlockFrame::ReflowLine(mozilla::BlockReflowInput&, nsLineList_iterator, bool*) src/layout/generic/nsBlockFrame.cpp:3144:5
    #20 0x7f9986816e10 in nsBlockFrame::ReflowDirtyLines(mozilla::BlockReflowInput&) src/layout/generic/nsBlockFrame.cpp:2683:7
    #21 0x7f9986812ded in nsBlockFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/nsBlockFrame.cpp:1386:3
    #22 0x7f99868436b3 in nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, mozilla::WritingMode const&, mozilla::LogicalPoint const&, nsSize const&, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) src/layout/generic/nsContainerFrame.cpp:927:14
    #23 0x7f99868479c9 in nsColumnSetFrame::ReflowChildren(mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&, nsColumnSetFrame::ReflowConfig const&, bool) src/layout/generic/nsColumnSetFrame.cpp:702:7
    #24 0x7f99868468f2 in nsColumnSetFrame::ReflowColumns(mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&, nsColumnSetFrame::ReflowConfig&, bool) src/layout/generic/nsColumnSetFrame.cpp:412:37
    #25 0x7f998684b8dd in nsColumnSetFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/nsColumnSetFrame.cpp:1213:37
    #26 0x7f9986825772 in nsBlockReflowContext::ReflowBlock(mozilla::LogicalRect const&, bool, nsCollapsingMargin&, int, bool, nsLineBox*, mozilla::ReflowInput&, nsReflowStatus&, mozilla::BlockReflowInput&) src/layout/generic/nsBlockReflowContext.cpp:293:11
    #27 0x7f998682053f in nsBlockFrame::ReflowBlockFrame(mozilla::BlockReflowInput&, nsLineList_iterator, bool*) src/layout/generic/nsBlockFrame.cpp:3791:11
    #28 0x7f998681dc9e in nsBlockFrame::ReflowLine(mozilla::BlockReflowInput&, nsLineList_iterator, bool*) src/layout/generic/nsBlockFrame.cpp:3144:5
    #29 0x7f9986816e10 in nsBlockFrame::ReflowDirtyLines(mozilla::BlockReflowInput&) src/layout/generic/nsBlockFrame.cpp:2683:7
    #30 0x7f9986812ded in nsBlockFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/nsBlockFrame.cpp:1386:3
    #31 0x7f99868436b3 in nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, mozilla::WritingMode const&, mozilla::LogicalPoint const&, nsSize const&, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) src/layout/generic/nsContainerFrame.cpp:927:14
    #32 0x7f99869474d7 in nsGridContainerFrame::ReflowInFlowChild(nsIFrame*, nsGridContainerFrame::GridItemInfo const*, nsSize, mozilla::Maybe<int> const&, nsGridContainerFrame::Fragmentainer const*, nsGridContainerFrame::GridReflowInput const&, mozilla::LogicalRect const&, mozilla::ReflowOutput&, nsReflowStatus&) src/layout/generic/nsGridContainerFrame.cpp:7273:3
    #33 0x7f9986953926 in nsGridContainerFrame::ReflowChildren(nsGridContainerFrame::GridReflowInput&, mozilla::LogicalRect const&, nsSize const&, mozilla::ReflowOutput&, nsReflowStatus&) src/layout/generic/nsGridContainerFrame.cpp:8361:7
    #34 0x7f9986954b87 in nsGridContainerFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/nsGridContainerFrame.cpp:8581:11
    #35 0x7f99868436b3 in nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, mozilla::WritingMode const&, mozilla::LogicalPoint const&, nsSize const&, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) src/layout/generic/nsContainerFrame.cpp:927:14
    #36 0x7f99868fd1a5 in nsHTMLScrollFrame::ReflowScrolledFrame(mozilla::ScrollReflowInput*, bool, bool, mozilla::ReflowOutput*) src/layout/generic/nsGfxScrollFrame.cpp:645:3
    #37 0x7f99868fe6ae in nsHTMLScrollFrame::ReflowContents(mozilla::ScrollReflowInput*, mozilla::ReflowOutput const&) src/layout/generic/nsGfxScrollFrame.cpp:759:3
    #38 0x7f9986901906 in nsHTMLScrollFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/nsGfxScrollFrame.cpp:1146:3
    #39 0x7f99868436b3 in nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, mozilla::WritingMode const&, mozilla::LogicalPoint const&, nsSize const&, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) src/layout/generic/nsContainerFrame.cpp:927:14
    #40 0x7f99868675dc in nsFlexContainerFrame::ReflowFlexItem(nsFlexContainerFrame::FlexboxAxisTracker const&, mozilla::ReflowInput const&, nsFlexContainerFrame::FlexItem const&, mozilla::LogicalPoint&, mozilla::LogicalSize const&, nsSize const&, bool) src/layout/generic/nsFlexContainerFrame.cpp:5474:3
    #41 0x7f998686514b in nsFlexContainerFrame::ReflowChildren(mozilla::ReflowInput const&, int, int, mozilla::LogicalSize const&, mozilla::LogicalMargin const&, int, int&, nsTArray<nsFlexContainerFrame::FlexLine>&, nsTArray<nsIFrame*>&, nsFlexContainerFrame::FlexboxAxisTracker const&, bool) src/layout/generic/nsFlexContainerFrame.cpp:5148:13
    #42 0x7f99868631f1 in nsFlexContainerFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/nsFlexContainerFrame.cpp:4448:7
    #43 0x7f99868436b3 in nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, mozilla::WritingMode const&, mozilla::LogicalPoint const&, nsSize const&, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) src/layout/generic/nsContainerFrame.cpp:927:14
    #44 0x7f9986857fcf in nsFlexContainerFrame::MeasureAscentAndBSizeForFlexItem(nsFlexContainerFrame::FlexItem&, mozilla::ReflowInput&) src/layout/generic/nsFlexContainerFrame.cpp:1829:3
    #45 0x7f99868623f0 in nsFlexContainerFrame::SizeItemInCrossAxis(mozilla::ReflowInput&, nsFlexContainerFrame::FlexItem&) src/layout/generic/nsFlexContainerFrame.cpp:4214:7
    #46 0x7f9986864003 in nsFlexContainerFrame::DoFlexLayout(mozilla::ReflowInput const&, nsReflowStatus&, int&, int&, int&, int, int, nsTArray<nsFlexContainerFrame::FlexLine>&, nsTArray<nsFlexContainerFrame::StrutInfo>&, nsTArray<nsIFrame*>&, nsFlexContainerFrame::FlexboxAxisTracker const&, int, int, bool, ComputedFlexContainerInfo*) src/layout/generic/nsFlexContainerFrame.cpp:4926:9
    #47 0x7f9986862f3f in nsFlexContainerFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/nsFlexContainerFrame.cpp:4350:5
    #48 0x7f99868436b3 in nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, mozilla::WritingMode const&, mozilla::LogicalPoint const&, nsSize const&, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) src/layout/generic/nsContainerFrame.cpp:927:14
    #49 0x7f9986842a62 in nsCanvasFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/nsCanvasFrame.cpp:750:5
    #50 0x7f99868436b3 in nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, mozilla::WritingMode const&, mozilla::LogicalPoint const&, nsSize const&, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) src/layout/generic/nsContainerFrame.cpp:927:14
    #51 0x7f99868fd1a5 in nsHTMLScrollFrame::ReflowScrolledFrame(mozilla::ScrollReflowInput*, bool, bool, mozilla::ReflowOutput*) src/layout/generic/nsGfxScrollFrame.cpp:645:3
    #52 0x7f99868fe6ae in nsHTMLScrollFrame::ReflowContents(mozilla::ScrollReflowInput*, mozilla::ReflowOutput const&) src/layout/generic/nsGfxScrollFrame.cpp:759:3
    #53 0x7f9986901906 in nsHTMLScrollFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/nsGfxScrollFrame.cpp:1146:3
    #54 0x7f99868090fa in nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, int, int, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) src/layout/generic/nsContainerFrame.cpp:967:14
    #55 0x7f9986808a8e in mozilla::ViewportFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) src/layout/generic/ViewportFrame.cpp:296:7
    #56 0x7f998665ca40 in mozilla::PresShell::DoReflow(nsIFrame*, bool, mozilla::OverflowChangedTracker*) src/layout/base/PresShell.cpp:9335:11
    #57 0x7f99866695e7 in mozilla::PresShell::ProcessReflowCommands(bool) src/layout/base/PresShell.cpp:9508:24
    #58 0x7f9986668bb2 in mozilla::PresShell::DoFlushPendingNotifications(mozilla::ChangesToFlush) src/layout/base/PresShell.cpp:4206:11
    #59 0x7f998241fc74 in mozilla::PresShell::FlushPendingNotifications(mozilla::ChangesToFlush) src/objdir-ff-ubsan/dist/include/mozilla/PresShell.h:1434:5
    #60 0x7f99866136df in nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) src/layout/base/nsRefreshDriver.cpp:2076:20
    #61 0x7f9986620bb8 in mozilla::RefreshDriverTimer::TickDriver(nsRefreshDriver*, mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) src/layout/base/nsRefreshDriver.cpp:373:13
    #62 0x7f9986620a35 in mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&) src/layout/base/nsRefreshDriver.cpp:350:7
    #63 0x7f99866207d0 in mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) src/layout/base/nsRefreshDriver.cpp:367:5
    #64 0x7f9986620468 in mozilla::VsyncRefreshDriverTimer::RunRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) src/layout/base/nsRefreshDriver.cpp:827:5
    #65 0x7f998661f56c in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) src/layout/base/nsRefreshDriver.cpp:745:16
    #66 0x7f998661ea35 in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsync(mozilla::VsyncEvent const&) src/layout/base/nsRefreshDriver.cpp:644:9
    #67 0x7f9986c75098 in mozilla::layout::VsyncChild::RecvNotify(mozilla::VsyncEvent const&) src/layout/ipc/VsyncChild.cpp:55:16
    #68 0x7f998095cb35 in mozilla::layout::PVsyncChild::OnMessageReceived(IPC::Message const&) src/objdir-ff-ubsan/ipc/ipdl/PVsyncChild.cpp:187:54
    #69 0x7f9980540686 in mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&) src/objdir-ff-ubsan/ipc/ipdl/PBackgroundChild.cpp:6083:32
    #70 0x7f997ff78bad in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) src/ipc/glue/MessageChannel.cpp:2186:25
    #71 0x7f997ff75581 in mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&) src/ipc/glue/MessageChannel.cpp:2110:9
    #72 0x7f997ff7693e in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&) src/ipc/glue/MessageChannel.cpp:1958:3
    #73 0x7f997ff773ac in mozilla::ipc::MessageChannel::MessageTask::Run() src/ipc/glue/MessageChannel.cpp:1989:13
    #74 0x7f997ed82a2d in nsThread::ProcessNextEvent(bool, bool*) src/xpcom/threads/nsThread.cpp:1211:14
    #75 0x7f997ed88bcc in NS_ProcessNextEvent(nsIThread*, bool) src/xpcom/threads/nsThreadUtils.cpp:501:10
    #76 0x7f997ff81adb in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:87:21
    #77 0x7f997ff82c59 in mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:270:30
    #78 0x7f997fe04b7f in MessageLoop::RunInternal() src/ipc/chromium/src/base/message_loop.cc:315:10
    #79 0x7f997fe04b38 in MessageLoop::RunHandler() src/ipc/chromium/src/base/message_loop.cc:308:3
    #80 0x7f997fe04ab0 in MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:290:3
    #81 0x7f9986263628 in nsBaseAppShell::Run() src/widget/nsBaseAppShell.cpp:137:27
    #82 0x7f9989f2ba2c in XRE_RunAppShell() src/toolkit/xre/nsEmbedFunctions.cpp:909:20
    #83 0x7f997ff82c31 in mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) src/ipc/glue/MessagePump.cpp:237:9
    #84 0x7f997fe04b7f in MessageLoop::RunInternal() src/ipc/chromium/src/base/message_loop.cc:315:10
    #85 0x7f997fe04b38 in MessageLoop::RunHandler() src/ipc/chromium/src/base/message_loop.cc:308:3
    #86 0x7f997fe04ab0 in MessageLoop::Run() src/ipc/chromium/src/base/message_loop.cc:290:3
    #87 0x7f9989f2b0a6 in XRE_InitChildProcess(int, char**, XREChildData const*) src/toolkit/xre/nsEmbedFunctions.cpp:740:34
    #88 0x7f9989f3b480 in mozilla::BootstrapImpl::XRE_InitChildProcess(int, char**, XREChildData const*) src/toolkit/xre/Bootstrap.cpp:67:12
    #89 0x555b7d00ca8c in content_process_main(mozilla::Bootstrap*, int, char**) src/browser/app/../../ipc/contentproc/plugin-container.cpp:56:28
    #90 0x555b7d00cdb6 in main src/browser/app/nsBrowserApp.cpp:303:18

Flags: in-testsuite?

Ting-Yu Lin [:TYLin] (PDT, UTC-7)

Assignee

Updated

•

4 years ago

Regressed by: 1622935

BMO Automation

Updated

•

4 years ago

Has Regression Range: --- → yes

BugBot [:suhaib / :marco/ :calixte]

Comment 1

•

4 years ago

Set release status flags based on info from the regressing bug 1622935

status-firefox76: --- → unaffected

status-firefox77: --- → unaffected

Ting-Yu Lin [:TYLin] (PDT, UTC-7)

Assignee

Updated

•

4 years ago

Severity: -- → S2

Priority: -- → P1

Mayank Bansal

Updated

•

4 years ago

Crash Signature: [@ nsFlexContainerFrame::ReflowChildren ]

BugBot [:suhaib / :marco/ :calixte]

Updated

•

4 years ago

Keywords: regression

Julien Cristau [:jcristau]

Updated

•

4 years ago

status-firefox-esr68: --- → unaffected

Julien Cristau [:jcristau]

Updated

•

4 years ago

status-firefox78: affected → fix-optional

Ting-Yu Lin [:TYLin] (PDT, UTC-7)

Assignee

Comment 2

•

4 years ago

Attached file Bug 1640028 - Add a crashtest. — Details

Fixed by bug 1640275 and bug 1343948.

Phabricator Automation

Updated

•

4 years ago

Assignee: nobody → aethanyc

Status: NEW → ASSIGNED

Pulsebot

Comment 3

•

4 years ago

Pushed by aethanyc@gmail.com:
https://hg.mozilla.org/integration/autoland/rev/d39b5b23b9e7
Add a crashtest. r=dholbert

Dorel Luca [:dluca]

Comment 4

•

4 years ago

•

Edited

Backed out changeset d39b5b23b9e7 (bug 1640028) for Valgrind and Build Bustage. CLOSED TREE

Log:
https://hg.mozilla.org/integration/autoland/rev/b2e08545da6d006cb47690dd2531d0b219f05e42

Push with failures:
https://treeherder.mozilla.org/#/jobs?repo=autoland&group_state=expanded&revision=d39b5b23b9e7fc06f33ff4511a48fee3e117ea83

Backout:
https://hg.mozilla.org/integration/autoland/rev/b57a601bf74caded488ebd5e6222dd6a7bf15df1

This was relaned, backed out by mistake.

Flags: needinfo?(aethanyc)

Pulsebot

Comment 5

•

4 years ago

Pushed by dluca@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/65c8548cb97d
Add a crashtest. r=dholbert

Ting-Yu Lin [:TYLin] (PDT, UTC-7)

Assignee

Updated

•

4 years ago

Flags: needinfo?(aethanyc)

Atila Butkovits

Comment 6

•

4 years ago

bugherder

https://hg.mozilla.org/mozilla-central/rev/65c8548cb97d

Status: ASSIGNED → RESOLVED

Closed: 4 years ago

status-firefox79: --- → fixed

Resolution: --- → FIXED

Target Milestone: --- → mozilla79

Ryan VanderMeulen [:RyanVM]

Updated

•

4 years ago

status-firefox78: fix-optional → wontfix

Flags: in-testsuite? → in-testsuite+

testcase.html 4 years ago Tyson Smith [:tsmith] 510 bytes, text/html		Details
Bug 1640028 - Add a crashtest. 4 years ago Ting-Yu Lin [:TYLin] (PDT, UTC-7) 47 bytes, text/x-phabricator-request		Details \| Review