Open Bug 1724241 Opened 3 years ago Updated 1 year ago

AddressSanitizer: stack-overflow [@ StackTrace]

Tracking

()

Status:

NEW

People

(Reporter: jkratzer, Unassigned)

References

(Blocks 2 open bugs)

Details

(Keywords: assertion, testcase, Whiteboard: [bugmon:bisected,confirmed])

Attachments

(1 file)

Testcase 3 years ago Jason Kratzer [:jkratzer] 632 bytes, text/plain		Details

Jason Kratzer [:jkratzer]

Reporter

Description

•

3 years ago

Testcase found while fuzzing mozilla-central rev d66e0aca4012 (built with: --enable-address-sanitizer --enable-fuzzing).

Testcase can be reproduced using the following commands:

$ pip install fuzzfetch grizzly-framework
$ python -m fuzzfetch --build d66e0aca4012  --asan --fuzzing -n firefox
$ python -m grizzly.replay ./firefox/firefox testcase.html

AddressSanitizer: stack-overflow [@ StackTrace]

    =================================================================
    ==1876514==ERROR: AddressSanitizer: stack-overflow on address 0x7ffe9ab33fc0 (pc 0x55b70bf7f0ff bp 0x7ffe9ab347f0 sp 0x7ffe9ab33fc0 T0)
        #0 0x55b70bf7f0ff in StackTrace /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_stacktrace.h:52:45
        #1 0x55b70bf7f0ff in BufferedStackTrace /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_stacktrace.h:103:26
        #2 0x55b70bf7f0ff in free /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cpp:127:3
        #3 0x7fc4e044eee6 in mozilla::FrameProperties::RemoveAll(nsIFrame const*) /layout/base/FrameProperties.h:265:3
        #4 0x7fc4e03fcba6 in RemoveAllProperties /layout/generic/nsIFrame.h:4240:44
        #5 0x7fc4e03fcba6 in mozilla::PresShell::NotifyDestroyingFrame(nsIFrame*) /layout/base/PresShell.cpp:2228:13
        #6 0x7fc4e0722a45 in nsIFrame::DestroyFrom(nsIFrame*, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsIFrame.cpp:879:14
        #7 0x7fc4e05c6998 in nsContainerFrame::DestroyFrom(nsIFrame*, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsContainerFrame.cpp:297:22
        #8 0x7fc4e05f27dc in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6319:20
        #9 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #10 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #11 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #12 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #13 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #14 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #15 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #16 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #17 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #18 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #19 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #20 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #21 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #22 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #23 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #24 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #25 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #26 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #27 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #28 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #29 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #30 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #31 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #32 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #33 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #34 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #35 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #36 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #37 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #38 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #39 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #40 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #41 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #42 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #43 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #44 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #45 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #46 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #47 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #48 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #49 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #50 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #51 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #52 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #53 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #54 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #55 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #56 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #57 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #58 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #59 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #60 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #61 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #62 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #63 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #64 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #65 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #66 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #67 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #68 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #69 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #70 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #71 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #72 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #73 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #74 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #75 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #76 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #77 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #78 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #79 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #80 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #81 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #82 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #83 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #84 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #85 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #86 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #87 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #88 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #89 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #90 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #91 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #92 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #93 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #94 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #95 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #96 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #97 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #98 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #99 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #100 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #101 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #102 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #103 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #104 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #105 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #106 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #107 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #108 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #109 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #110 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #111 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #112 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #113 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #114 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #115 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #116 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #117 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #118 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #119 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #120 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #121 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #122 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #123 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #124 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #125 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #126 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #127 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #128 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #129 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #130 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #131 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #132 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #133 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #134 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #135 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #136 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #137 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #138 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #139 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #140 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #141 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #142 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #143 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #144 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #145 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #146 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #147 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #148 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #149 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #150 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #151 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #152 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #153 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #154 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #155 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #156 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #157 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #158 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #159 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #160 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #161 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #162 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #163 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #164 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #165 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #166 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #167 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #168 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #169 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #170 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #171 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #172 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #173 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #174 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #175 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #176 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #177 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #178 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #179 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #180 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #181 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #182 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #183 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #184 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #185 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #186 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #187 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #188 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #189 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #190 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #191 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #192 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #193 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #194 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #195 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #196 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #197 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #198 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #199 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #200 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #201 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #202 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #203 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #204 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #205 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #206 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #207 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #208 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #209 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #210 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #211 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #212 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #213 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #214 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #215 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #216 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #217 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #218 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #219 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #220 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #221 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #222 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #223 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #224 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #225 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #226 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #227 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #228 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #229 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #230 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #231 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #232 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #233 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #234 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #235 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #236 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #237 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #238 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #239 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #240 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #241 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #242 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #243 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #244 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #245 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #246 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #247 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #248 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #249 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
        #250 0x7fc4e05f2e7d in nsBlockFrame::DoRemoveFrameInternal(nsIFrame*, unsigned int, mozilla::layout::PostFrameDestroyData&) /layout/generic/nsBlockFrame.cpp:6426:14
    
    SUMMARY: AddressSanitizer: stack-overflow /builds/worker/fetches/llvm-project/llvm/projects/compiler-rt/lib/asan/../sanitizer_common/sanitizer_stacktrace.h:52:45 in StackTrace
    ==1876514==ABORTING

Jason Kratzer [:jkratzer]

Reporter

Comment 1

•

3 years ago

Attached file Testcase — Details

Jason Kratzer [:jkratzer]

Reporter

Updated

•

3 years ago

Component: DOM: Core & HTML → Layout

Comment hidden (obsolete)

Jason Kratzer [:jkratzer]

Reporter

Updated

•

3 years ago

Keywords: bugmon

Bugmon [:jkratzer for issues]

Comment 3

•

3 years ago

Bugmon Analysis
Unable to reproduce bug 1724241 using build mozilla-central 20210805092724-d66e0aca4012. Without a baseline, bugmon is unable to analyze this bug.
Removing bugmon keyword as no further action possible. Please review the bug and re-add the keyword for further analysis.

Keywords: bugmon

Bugmon [:jkratzer for issues]

Comment 4

•

3 years ago

Bugmon Analysis
Verified bug as reproducible on mozilla-central 20210806132505-92ef20a8efbe.
The bug appears to have been introduced in the following build range:

Start: 2f08ec7e57c3b7968ce11a729bb563257173b70e (20201118160535)
End: 78ec198ed4f2698265a5f4c8d40cebcd52d34eb7 (20201118142551)
Pushlog: https://hg.mozilla.org/mozilla-unified/pushloghtml?fromchange=2f08ec7e57c3b7968ce11a729bb563257173b70e&tochange=78ec198ed4f2698265a5f4c8d40cebcd52d34eb7

Whiteboard: [bugmon:confirm] → [bugmon:bisected,confirmed]

Hiroyuki Ikezoe (:hiro)

Comment 5

•

3 years ago

A suspicious change in the range is bug Bug 1675376. CCing Emilo. Setting S3 since it's not recent regression.

Severity: -- → S3

Emilio Cobos Álvarez (:emilio)

Comment 6

•

3 years ago

Seems like a really deep frame tree, but not much we can do about it? Also ASAN builds take more stack space IIRC, so probably doesn't happen in non-ASAN builds.

Jason Kratzer [:jkratzer]

Reporter

Updated

•

3 years ago

Depends on: domino

Jason Kratzer [:jkratzer]

Reporter

Updated

•

3 years ago

Blocks: domino

No longer depends on: domino

Andrew McCreight [:mccr8]

Blocks: asan-maintenance

Daniel Holbert [:dholbert]

Updated

•

1 year ago

Bugzilla

AddressSanitizer: stack-overflow [@ StackTrace]

Categories

(Core :: Layout, defect)

Tracking

()

People

(Reporter: jkratzer, Unassigned)

References

(Blocks 2 open bugs)

Details

(Keywords: assertion, testcase, Whiteboard: [bugmon:bisected,confirmed])

Crash Data

Security

(public)

User Story

Attachments

(1 file)

Description

Comment 1

Updated

Comment 2

Updated

Comment 3

Comment 4

Comment 5

Comment 6

Updated

Updated

Updated

Updated

Updated

Updated

Updated

Attachment

General

Description

File Name

Content Type