1765192 - Crash in [@ core::str::slice_error_fail | cssparser::tokenizer::next_token]

Status: RESOLVED INCOMPLETE

(Core :: CSS Parsing and Computation, defect)

Description

[Andrew McCreight [:mccr8]]

Crash report: https://crash-stats.mozilla.org/report/index/45ddb284-f700-4b57-bc21-71ccb0220414

Top 10 frames of crashing thread:

0 xul.dll RustMozCrash mozglue/static/rust/wrappers.cpp:17
1 xul.dll mozglue_static::panic_hook mozglue/static/rust/lib.rs:91
2 xul.dll core::ops::function::Fn::call<void  ../9d1b2106e23b1abd32fce1f17267604a5102f57a/library/core/src/ops/function.rs:227
3 xul.dll std::panicking::rust_panic_with_hook ../9d1b2106e23b1abd32fce1f17267604a5102f57a//library/std/src/panicking.rs:610
4 xul.dll std::panicking::begin_panic_handler::closure$0 ../9d1b2106e23b1abd32fce1f17267604a5102f57a//library/std/src/panicking.rs:502
5 xul.dll std::sys_common::backtrace::__rust_end_short_backtrace<std::panicking::begin_panic_handler::closure$0, never$> ../9d1b2106e23b1abd32fce1f17267604a5102f57a//library/std/src/sys_common/backtrace.rs:139
6 xul.dll std::panicking::begin_panic_handler ../9d1b2106e23b1abd32fce1f17267604a5102f57a//library/std/src/panicking.rs:498
7 xul.dll core::panicking::panic_fmt ../9d1b2106e23b1abd32fce1f17267604a5102f57a//library/core/src/panicking.rs:116
8 xul.dll core::str::slice_error_fail ../9d1b2106e23b1abd32fce1f17267604a5102f57a//library/core/src/str/mod.rs:114
9 xul.dll cssparser::tokenizer::next_token x86_64-pc-windows-msvc/release/build/cssparser-ae37bbb948ec2b37/out/tokenizer.rs:284

The crash message is:

byte index 94 is not a char boundary; it is inside '(' (bytes 94..95) of `background:linear-gradient(90deg, rgba(DDD,DDD,D,D),rgba(DDD,DDD,DD,D) DD.DDDDDDDDDDDDD%,rgba(DDD,DDD,D,D) DD.DDDDDDDDDDDDD%,rgba(DDD,DDD,D,D));`

where I replaced various digits I figure aren't relevant with "D", out of caution to hide information. Let me know if the actual specific string is useful.

The crash volume is low, but maybe it would be easy to fix given the error message.

Comment 1

[Emilio Cobos Álvarez [:emilio]]

That smells like bad memory, because that is all ascii.

Comment 2

[Andrew McCreight [:mccr8]]

We can just close this then.