Closed
Bug 1641583
Opened 5 years ago
Closed 4 years ago
Assertion failure: mChildOpacityState != ChildOpacityState::Applied, at /builds/worker/checkouts/gecko/layout/painting/nsDisplayList.cpp:5733
Categories
(Core :: Web Painting, defect)
Core
Web Painting
Tracking
()
RESOLVED
WORKSFORME
| Tracking | Status | |
|---|---|---|
| firefox78 | --- | affected |
People
(Reporter: jkratzer, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: assertion, testcase, Whiteboard: [bugmon:confirmed])
Attachments
(1 file, 1 obsolete file)
|
440 bytes,
text/html
|
Details |
Testcase found while fuzzing mozilla-central rev cfa4bd8e6f78 (built with --enable-debug).
Assertion failure: mChildOpacityState != ChildOpacityState::Applied, at /builds/worker/checkouts/gecko/layout/painting/nsDisplayList.cpp:5733
rax = 0x00007f6eee71ad6f rdx = 0x0000000000000000
rcx = 0x0000563e6c34ba58 rbx = 0x0000000000000000
rsi = 0x00007f6eff5518b0 rdi = 0x00007f6eff550680
rbp = 0x00007ffc199e1260 rsp = 0x00007ffc199e11d0
r8 = 0x00007f6eff5518b0 r9 = 0x00007f6f006b7780
r10 = 0x0000000000000002 r11 = 0x0000000000000000
r12 = 0x0000563e6cc187f0 r13 = 0x00007ffc199e1ab0
r14 = 0x00007ffc199e12d0 r15 = 0x00007ffc199e13a0
rip = 0x00007f6ee928e708
OS|Linux|0.0.0 Linux 5.3.0-51-generic #44~18.04.2-Ubuntu SMP Thu Apr 23 14:27:18 UTC 2020 x86_64
CPU|amd64|family 6 model 94 stepping 3|8
GPU|||
Crash|SIGSEGV|0x0|0
0|0|libxul.so|nsDisplayOpacity::BuildLayer(nsDisplayListBuilder*, mozilla::layers::LayerManager*, mozilla::ContainerLayerParameters const&)|hg:hg.mozilla.org/mozilla-central:layout/painting/nsDisplayList.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|5733|0x29
0|1|libxul.so|mozilla::PaintedLayerData::CreateInactiveLayerData(mozilla::ContainerState*, nsPaintedDisplayItem*, mozilla::DisplayItemData*)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|3793|0x10
0|2|libxul.so|mozilla::PaintedLayerData::Accumulate(mozilla::ContainerState*, nsPaintedDisplayItem*, mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> const&, nsRect const&, mozilla::DisplayItemClip const&, mozilla::LayerState, nsDisplayList*, mozilla::DisplayItemEntryType, nsTArray<unsigned long>&, RefPtr<mozilla::TransformClipNode> const&)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|3844|0xe
0|3|libxul.so|mozilla::ContainerState::ProcessDisplayItems(nsDisplayList*)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|5091|0x4c
0|4|libxul.so|mozilla::FrameLayerBuilder::BuildContainerLayerFor(nsDisplayListBuilder*, mozilla::layers::LayerManager*, nsIFrame*, nsDisplayItem*, nsDisplayList*, mozilla::ContainerLayerParameters const&, mozilla::gfx::Matrix4x4Typed<mozilla::gfx::UnknownUnits, mozilla::gfx::UnknownUnits, float> const*, unsigned int)|hg:hg.mozilla.org/mozilla-central:layout/painting/FrameLayerBuilder.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|6302|0xf
0|5|libxul.so|nsDisplayList::BuildLayers(nsDisplayListBuilder*, mozilla::layers::LayerManager*, unsigned int, bool)|hg:hg.mozilla.org/mozilla-central:layout/painting/nsDisplayList.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|2248|0x2d
0|6|libxul.so|nsDisplayList::PaintRoot(nsDisplayListBuilder*, gfxContext*, unsigned int)|hg:hg.mozilla.org/mozilla-central:layout/painting/nsDisplayList.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|2463|0x1c
0|7|libxul.so|nsLayoutUtils::PaintFrame(gfxContext*, nsIFrame*, nsRegion const&, unsigned int, nsDisplayListBuilderMode, nsLayoutUtils::PaintFrameFlags)|hg:hg.mozilla.org/mozilla-central:layout/base/nsLayoutUtils.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|4141|0x1b
0|8|libxul.so|mozilla::PresShell::Paint(nsView*, nsRegion const&, mozilla::PaintFlags)|hg:hg.mozilla.org/mozilla-central:layout/base/PresShell.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|6264|0x1d
0|9|libxul.so|nsViewManager::ProcessPendingUpdatesPaint(nsIWidget*)|hg:hg.mozilla.org/mozilla-central:view/nsViewManager.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|460|0x13
0|10|libxul.so|nsViewManager::ProcessPendingUpdatesForView(nsView*, bool)|hg:hg.mozilla.org/mozilla-central:view/nsViewManager.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|395|0x13
0|11|libxul.so|nsViewManager::ProcessPendingUpdates()|hg:hg.mozilla.org/mozilla-central:view/nsViewManager.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|1018|0x11
0|12|libxul.so|nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|2203|0xd
0|13|libxul.so|mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&)|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|373|0xb
0|14|libxul.so|mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|367|0x12
0|15|libxul.so|mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|745|0x17
0|16|libxul.so|mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsync(mozilla::VsyncEvent const&)|hg:hg.mozilla.org/mozilla-central:layout/base/nsRefreshDriver.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|644|0xf
0|17|libxul.so|mozilla::layout::VsyncChild::RecvNotify(mozilla::VsyncEvent const&)|hg:hg.mozilla.org/mozilla-central:layout/ipc/VsyncChild.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|55|0x13
0|18|libxul.so|mozilla::layout::PVsyncChild::OnMessageReceived(IPC::Message const&)|s3:gecko-generated-sources:27495909b8eb16a2f6224f9af7a0c052f58ac4a1f37ddd12d240b8b6a62795d131a51db23214bbde8ed61a33c6a97d727ae972f588d3f35141a1a66f3aadceeb/ipc/ipdl/PVsyncChild.cpp:|187|0x8
0|19|libxul.so|mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&)|s3:gecko-generated-sources:75695bbbf1ec93aad4718f03c359901f1be9ae34cba79945a5c42f3e8a2da054cc4ed1a56d373be9953080b82b366a6cd792a7b5323cd7f0d62bfa3c3b040098/ipc/ipdl/PBackgroundChild.cpp:|6083|0x24
0|20|libxul.so|mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|2190|0x1c
0|21|libxul.so|mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|2114|0x12
0|22|libxul.so|mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|1962|0xb
0|23|libxul.so|mozilla::ipc::MessageChannel::MessageTask::Run()|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|1993|0x12
0|24|libxul.so|nsThread::ProcessNextEvent(bool, bool*)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|1211|0x11
0|25|libxul.so|NS_ProcessNextEvent(nsIThread*, bool)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|501|0xc
0|26|libxul.so|mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessagePump.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|87|0x7
0|27|libxul.so|MessageLoop::RunInternal()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|315|0x17
0|28|libxul.so|MessageLoop::Run()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|290|0x8
0|29|libxul.so|nsBaseAppShell::Run()|hg:hg.mozilla.org/mozilla-central:widget/nsBaseAppShell.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|137|0xd
0|30|libxul.so|XRE_RunAppShell()|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsEmbedFunctions.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|913|0xe
0|31|libxul.so|mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessagePump.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|237|0x5
0|32|libxul.so|MessageLoop::RunInternal()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|315|0x17
0|33|libxul.so|MessageLoop::Run()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|290|0x8
0|34|libxul.so|XRE_InitChildProcess(int, char**, XREChildData const*)|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsEmbedFunctions.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|744|0x5
0|35|firefox-bin|content_process_main(mozilla::Bootstrap*, int, char**)|hg:hg.mozilla.org/mozilla-central:ipc/contentproc/plugin-container.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|56|0x11
0|36|firefox-bin|main|hg:hg.mozilla.org/mozilla-central:browser/app/nsBrowserApp.cpp:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|303|0x20
0|37|libc.so.6||||0x21b97
0|38|firefox-bin|<name omitted>|hg:hg.mozilla.org/mozilla-central:mfbt/UniquePtr.h:cfa4bd8e6f789fcca1de2272f0d5b11c0ded913f|253|0x17
Flags: in-testsuite?
|
Reporter | |
Comment 1•5 years ago
|
||
Bugmon Analysis:
Unable to reproduce bug using the following builds:
> mozilla-central 20200528032513-cfa4bd8e6f78
> mozilla-central 20200528032513-cfa4bd8e6f78
Removing bugmon keyword as no further action possible.
Please review the bug and re-add the keyword for further analysis.
|
|
Reporter | |
Comment 2•5 years ago
|
||
Attachment #9152412 -
Attachment is obsolete: true
|
|
Reporter | |
Updated•5 years ago
|
Whiteboard: [bugmon:confirmed] → [bugmon:confirm]
|
|
Reporter | |
Comment 3•5 years ago
|
||
Bugmon Analysis:
Unable to reproduce bug using the following builds:
> mozilla-central 20200528032513-cfa4bd8e6f78
> mozilla-central 20200528032513-cfa4bd8e6f78
Removing bugmon keyword as no further action possible.
Please review the bug and re-add the keyword for further analysis.
|
||
Comment 4•4 years ago
|
||
Couldn't reproduce with the latest Nightly on Mac/Win/Linux.
Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → WORKSFORME
|
|
Reporter | |
Updated•4 years ago
|
Flags: needinfo?(jkratzer)
|
|
Reporter | |
Comment 5•4 years ago
|
||
Testcase appears to have been remediated by the following changeset:
[2021-03-31 16:34:58] Reduced build range to:
[2021-03-31 16:34:58] > Start: 195dfba58e2215d8f57f414d1b306e5240cb1b75 (20201018094558)
[2021-03-31 16:34:58] > End: 1929ad3775f905dc8cc7bd567ef79211b3991fe0 (20201018092152)
[2021-03-31 16:34:58] > https://hg.mozilla.org/mozilla-unified/pushloghtml?fromchange=195dfba58e2215d8f57f414d1b306e5240cb1b75&tochange=1929ad3775f905dc8cc7bd567ef79211b3991fe0
Flags: needinfo?(jkratzer)
You need to log in
before you can comment on or make changes to this bug.
Description
•