1663695 - Assertion failure: !currBaseStyle || *currBaseStyle == animation.baseStyle() (Should be the same base style), at /builds/worker/checkouts/gecko/gfx/layers/AnimationHelper.cpp:355

Status: NEW

(Core :: Graphics: Layers, defect)

Description

[Jason Kratzer [:jkratzer]]

Attachment: testcase.html

Testcase found while fuzzing mozilla-central rev fb9c01b719fa (built with --enable-debug).

Assertion failure: !currBaseStyle || *currBaseStyle == animation.baseStyle() (Should be the same base style), at /builds/worker/checkouts/gecko/gfx/layers/AnimationHelper.cpp:355

    #0 0x7f562b9a38ca in mozilla::layers::AnimationHelper::ExtractAnimations(mozilla::layers::LayersId const&, nsTArray<mozilla::layers::Animation> const&) /builds/worker/checkouts/gecko/gfx/layers/AnimationHelper.cpp:354:7
    #1 0x7f562b9a555e in mozilla::layers::AnimationInfo::SetCompositorAnimations(mozilla::layers::LayersId const&, mozilla::layers::CompositorAnimations const&) /builds/worker/checkouts/gecko/gfx/layers/AnimationInfo.cpp:88:18
    #2 0x7f562b9d998b in mozilla::layers::Layer::SetCompositorAnimations(mozilla::layers::LayersId const&, mozilla::layers::CompositorAnimations const&) /builds/worker/checkouts/gecko/gfx/layers/Layers.cpp:237:18
    #3 0x7f562bc9b565 in mozilla::layers::LayerTransactionParent::SetLayerAttributes(mozilla::layers::OpSetLayerAttributes const&) /builds/worker/checkouts/gecko/gfx/layers/ipc/LayerTransactionParent.cpp:527:10
    #4 0x7f562bc99638 in mozilla::layers::LayerTransactionParent::RecvUpdate(mozilla::layers::TransactionInfo const&) /builds/worker/checkouts/gecko/gfx/layers/ipc/LayerTransactionParent.cpp:432:10
    #5 0x7f562afd7e8a in mozilla::layers::PLayerTransactionParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PLayerTransactionParent.cpp:124:66
    #6 0x7f562adc80ae in mozilla::layers::PCompositorManagerParent::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PCompositorManagerParent.cpp:197:32
    #7 0x7f562ac8a0ae in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:2150:25
    #8 0x7f562ac8686f in mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:2074:9
    #9 0x7f562ac87c76 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1922:3
    #10 0x7f562ac8889b in mozilla::ipc::MessageChannel::MessageTask::Run() /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1953:13
    #11 0x7f562a391f1f in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1234:14
    #12 0x7f562a3978ca in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:513:10
    #13 0x7f562ac90af6 in mozilla::ipc::MessagePumpForNonMainThreads::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:332:5
    #14 0x7f562ac025c3 in MessageLoop::RunInternal() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:334:10
    #15 0x7f562ac024dd in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:327:3
    #16 0x7f562ac024dd in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:309:3
    #17 0x7f562a38e391 in nsThread::ThreadFunc(void*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:442:10
    #18 0x7f564029babb in _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5
    #19 0x7f5640815608 in start_thread /build/glibc-YYA7BZ/glibc-2.31/nptl/pthread_create.c:477:8
    #20 0x7f56403de102 in clone /build/glibc-YYA7BZ/glibc-2.31/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Comment 1

[Jason Kratzer [:jkratzer]]

Bugmon Analysis:
Verified bug as reproducible on mozilla-central 20200908215255-dc90a7a18c07.
The bug appears to have been introduced in the following build range:
> Start: c17aeb197b4b77cca7ac857a499263e621f64632 (20200122184056)
> End: 90d0f2ebd310a25954914c023e5053051f74c6c0 (20200122184412)
> Pushlog: https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=c17aeb197b4b77cca7ac857a499263e621f64632&tochange=90d0f2ebd310a25954914c023e5053051f74c6c0

Comment 2

[Jason Kratzer [:jkratzer]]

Bugmon Analysis:
Verified bug as reproducible on mozilla-central 20200908215255-dc90a7a18c07.
The bug appears to have been introduced in the following build range:
> Start: c17aeb197b4b77cca7ac857a499263e621f64632 (20200122184056)
> End: 90d0f2ebd310a25954914c023e5053051f74c6c0 (20200122184412)
> Pushlog: https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=c17aeb197b4b77cca7ac857a499263e621f64632&tochange=90d0f2ebd310a25954914c023e5053051f74c6c0

Comment 3

[Bugmon [:jkratzer for issues]]

Bugmon was unable reproduce this issue.
Removing bugmon keyword as no further action possible. Please review the bug and re-add the keyword for further analysis.

Comment 4

[Jason Kratzer [:jkratzer]]

A change to the Taskcluster build definitions over the weekend caused Bugmon to fail when reproducing issues. This issue has been corrected. Re-enabling bugmon.

Comment 5

[Bugmon [:jkratzer for issues]]

Unable to reproduce bug 1663695 using build mozilla-central 20220723091444-f69015bf0e0a. Without a baseline, bugmon is unable to analyze this bug.
Removing bugmon keyword as no further action possible. Please review the bug and re-add the keyword for further analysis.