Open
Bug 1665819
Opened 4 years ago
Updated 2 years ago
Assertion failure: FirstContinuationOrPartOfIBSplit(parent) == aParent || (parent->Style()->IsInheritingAnonBox() && parent->GetContent() == aParent->GetContent()), at /builds/worker/checkouts/gecko/layout/base/RestyleManager.cpp:2110
Categories
(Core :: CSS Parsing and Computation, defect)
Core
CSS Parsing and Computation
Tracking
()
People
(Reporter: jkratzer, Unassigned)
References
(Blocks 2 open bugs)
Details
(Keywords: assertion, testcase, Whiteboard: [bugmon:confirmed][print2020][old-ui?])
Attachments
(1 file)
3.13 KB,
application/zip
|
Details |
Testcase found while fuzzing mozilla-central rev 084477976b2d (built with --enable-debug).
Assertion failure: FirstContinuationOrPartOfIBSplit(parent) == aParent || (parent->Style()->IsInheritingAnonBox() && parent->GetContent() == aParent->GetContent()), at /builds/worker/checkouts/gecko/layout/base/RestyleManager.cpp:2110
#0 0x7fcecaa751b6 in mozilla::ServoRestyleState::ProcessMaybeNestedWrapperRestyle(nsIFrame*, unsigned long) /builds/worker/checkouts/gecko/layout/base/RestyleManager.cpp:2108:3
#1 0x7fcecaa7675d in ProcessWrapperRestyles /builds/worker/checkouts/gecko/layout/base/RestyleManager.cpp:2072:10
#2 0x7fcecaa7675d in mozilla::RestyleManager::ProcessPostTraversal(mozilla::dom::Element*, mozilla::ServoRestyleState&, mozilla::ServoPostTraversalFlags) /builds/worker/checkouts/gecko/layout/base/RestyleManager.cpp:2826:26
#3 0x7fcecaa76648 in mozilla::RestyleManager::ProcessPostTraversal(mozilla::dom::Element*, mozilla::ServoRestyleState&, mozilla::ServoPostTraversalFlags) /builds/worker/checkouts/gecko/layout/base/RestyleManager.cpp:2803:32
#4 0x7fcecaa76648 in mozilla::RestyleManager::ProcessPostTraversal(mozilla::dom::Element*, mozilla::ServoRestyleState&, mozilla::ServoPostTraversalFlags) /builds/worker/checkouts/gecko/layout/base/RestyleManager.cpp:2803:32
#5 0x7fcecaa780d9 in mozilla::RestyleManager::DoProcessPendingRestyles(mozilla::ServoTraversalFlags) /builds/worker/checkouts/gecko/layout/base/RestyleManager.cpp:3009:28
#6 0x7fcecaa52800 in ProcessPendingRestyles /builds/worker/checkouts/gecko/layout/base/RestyleManager.cpp:3116:3
#7 0x7fcecaa52800 in mozilla::PresShell::DoFlushPendingNotifications(mozilla::ChangesToFlush) /builds/worker/checkouts/gecko/layout/base/PresShell.cpp:4196:39
#8 0x7fcecaa1e793 in nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:2106:22
#9 0x7fcecaa25bb1 in TickDriver /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:372:13
#10 0x7fcecaa25bb1 in mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:351:7
#11 0x7fcecaa25a9c in mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:366:5
#12 0x7fcecaa2b2a8 in RunRefreshDrivers /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:818:5
#13 0x7fcecaa2b2a8 in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:736:16
#14 0x7fcecaa2aba1 in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyParentProcessVsync() /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:638:7
#15 0x7fcecaa23e1d in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::ParentProcessVsyncNotifier::Run() /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:537:20
#16 0x7fcec626222f in mozilla::RunnableTask::Run() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:242:16
#17 0x7fcec62602aa in mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:512:26
#18 0x7fcec625f404 in mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:371:15
#19 0x7fcec625f5b7 in mozilla::TaskController::ProcessPendingMTTask(bool) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:168:36
#20 0x7fcec6266f66 in operator() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:83:37
#21 0x7fcec6266f66 in mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_4>::Run() /builds/worker/workspace/obj-build/dist/include/nsThreadUtils.h:577:5
#22 0x7fcec627a36f in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1234:14
#23 0x7fcec627fd1a in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:513:10
#24 0x7fcec6b784f6 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:87:21
#25 0x7fcec6aeb113 in MessageLoop::RunInternal() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:334:10
#26 0x7fcec6aeb02d in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:327:3
#27 0x7fcec6aeb02d in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:309:3
#28 0x7fceca7846d8 in nsBaseAppShell::Run() /builds/worker/checkouts/gecko/widget/nsBaseAppShell.cpp:137:27
#29 0x7fcecbf5ffa3 in XRE_RunAppShell() /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:913:20
#30 0x7fcec6b792b9 in mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:237:9
#31 0x7fcec6aeb113 in MessageLoop::RunInternal() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:334:10
#32 0x7fcec6aeb02d in RunHandler /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:327:3
#33 0x7fcec6aeb02d in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:309:3
#34 0x7fcecbf5fb88 in XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:744:34
#35 0x55c97d175957 in content_process_main /builds/worker/checkouts/gecko/browser/app/../../ipc/contentproc/plugin-container.cpp:56:28
#36 0x55c97d175957 in main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:303:18
#37 0x7fceda9320b2 in __libc_start_main /build/glibc-YYA7BZ/glibc-2.31/csu/../csu/libc-start.c:308:16
#38 0x55c97d153709 in _start (/home/worker/builds/m-c-20200910040355-fuzzing-debug/firefox-bin+0x17709)
Flags: in-testsuite?
Updated•4 years ago
|
Blocks: 1631440
Whiteboard: [bugmon:confirm] → [bugmon:confirm][print2020][old-ui?]
Reporter | ||
Comment 1•4 years ago
|
||
Bugmon Analysis:
Unable to reproduce bug using the following builds:
mozilla-central 20200917142508-084477976b2d
None
Removing bugmon keyword as no further action possible.
Please review the bug and re-add the keyword for further analysis.
Keywords: bugmon
Whiteboard: [bugmon:confirm][print2020][old-ui?] → [bugmon:confirmed][print2020][old-ui?]
Updated•4 years ago
|
Comment 2•3 years ago
|
||
A Pernosco session is available here: https://pernos.co/debug/Zf1gL8ehPHSNG00qPWoUjw/index.html
Updated•3 years ago
|
Updated•2 years ago
|
Severity: normal → S3
You need to log in
before you can comment on or make changes to this bug.
Description
•