Closed
Bug 1666798
Opened 5 years ago
Closed 5 years ago
Crash in [@ style::properties::animated_properties::AnimationValue::from_computed_values]
Categories
(Core :: Layout, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 1581121
People
(Reporter: jesup, Unassigned)
Details
(Keywords: crash, csectype-uaf, sec-high)
Crash Data
Frequent UAF crash in style code:
Crash report: https://crash-stats.mozilla.org/report/index/fd882275-ee84-4b49-a533-0d4c20200923
Top 10 frames of crashing thread:
0 libxul.so style::properties::animated_properties::AnimationValue::from_computed_values /build/firefox-05EMzN/firefox-76.0.1+build1/obj-i686-linux-gnu/i686-unknown-linux-gnu/release/build/style-523c03835bdea1c4/out/properties.rs:32522
1 libxul.so _fini
2 firefox _fini
3 firefox <name omitted> /build/firefox-05EMzN/firefox-76.0.1+build1/memory/build/malloc_decls.h:51
4 libxul.so style::gecko::wrapper::get_animation_rule /build/firefox-05EMzN/firefox-76.0.1+build1/servo/components/style/gecko/wrapper.rs:899
5 libxul.so style::matching::PrivateMatchMethods::replace_rules_internal /build/firefox-05EMzN/firefox-76.0.1+build1/servo/components/style/matching.rs:183
6 libxul.so style::traversal::compute_style /build/firefox-05EMzN/firefox-76.0.1+build1/servo/components/style/traversal.rs:625
7 libxul.so geckoservo::glue::traverse_subtree /build/firefox-05EMzN/firefox-76.0.1+build1/servo/ports/geckolib/glue.rs:260
8 libxul.so Servo_TraverseSubtree /build/firefox-05EMzN/firefox-76.0.1+build1/servo/ports/geckolib/glue.rs:310
9 libxul.so StyleDocument /build/firefox-05EMzN/firefox-76.0.1+build1/layout/style/ServoStyleSet.cpp:732
|
Reporter | |
Comment 1•5 years ago
|
||
Looks like this is a bug that was fixed in ~78 or so, so likely should be duped out
|
||
Updated•5 years ago
|
Group: core-security → layout-core-security
|
||
Comment 2•5 years ago
|
||
This was an ubuntu+32-bit specific crash that we could never reproduce in our builds (bug 1581121).
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → DUPLICATE
|
||
Updated•3 years ago
|
Group: layout-core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•