1701390 - Crash in [@ nsDisplayWrapList::nsDisplayWrapList]

Status: RESOLVED FIXED

(Core :: Web Painting, defect)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

All crashes on Linux at the moment. They are from assertions added in bug 1700812.

Be aware of the fact bug 1523500 got backed out which touched much code in the vicinity.

Crash report: https://crash-stats.mozilla.org/report/index/3e54a5ab-8b10-4758-8d34-79e6b0210327

MOZ_CRASH Reason: MOZ_DIAGNOSTIC_ASSERT(false) (item should have finite clip with respect to aASR)

Top 10 frames of crashing thread:

0 libxul.so nsDisplayWrapList::nsDisplayWrapList layout/painting/nsDisplayList.cpp:5395
1 libxul.so nsDisplayOpacity::nsDisplayOpacity layout/painting/nsDisplayList.cpp:5649
2 libxul.so nsIFrame::BuildDisplayListForStackingContext layout/generic/nsIFrame.cpp:3583
3 libxul.so nsIFrame::BuildDisplayListForChild layout/generic/nsIFrame.cpp:4206
4 libxul.so nsBlockFrame::BuildDisplayList layout/generic/nsBlockFrame.cpp:7062
5 libxul.so nsIFrame::BuildDisplayListForChild layout/generic/nsIFrame.cpp:4030
6 libxul.so mozilla::ScrollFrameHelper::BuildDisplayList layout/generic/nsGfxScrollFrame.cpp:3951
7 libxul.so nsIFrame::BuildDisplayListForChild layout/generic/nsIFrame.cpp:4257
8 libxul.so nsBlockFrame::BuildDisplayList layout/generic/nsBlockFrame.cpp:7062
9 libxul.so nsIFrame::BuildDisplayListForChild layout/generic/nsIFrame.cpp:4030

Comment 1

[Timothy Nikkel (:tnikkel)]

(In reply to Sebastian Hengst [:aryx] (needinfo on intermittent or backout) from comment #0)

Be aware of the fact bug 1523500 got backed out which touched much code in the vicinity.

Bug 1523500 is innocent, these crashes are all bug 1700812.

Comment 2

[Timothy Nikkel (:tnikkel)]

Attachment: Bug 1701390. Revert all of the asserts change in bug 1700812 back to debug asserts. r?miko,mstange,mattwoodrow

Comment 3

[Timothy Nikkel (:tnikkel)]

We've got enough data from this and we have a reproducible bug to investigate (bug 1701361) so we can back this out.

Comment 4

[Tom S. (please needinfo tschuster)]

I also got this crash on https://kaiyo.com/.

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/b3322ad4836f
Revert all of the asserts change in bug 1700812 back to debug asserts. r=mstange

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/mozilla-central/rev/a1de64fd7866
Revert all of the asserts change in bug 1700812 back to debug asserts. r=mstange

Comment 7

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/a1de64fd7866

Comment 8

[Dorel Luca [:dluca]]

https://hg.mozilla.org/mozilla-central/rev/b3322ad4836f