1772876 - Firefox Wayland backend crashes when opening overflow menu submenu that overflows window

Status: RESOLVED FIXED

(Core :: Widget: Gtk, defect)

Description

[jules.bertholet]

Attachment: firefox crash.mp4

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:101.0) Gecko/20100101 Firefox/101.0

Steps to reproduce:

Environment: Fedora 36, GNOME Shell under Wayland, latest Firefox RPM from Fedora repos

Reproduction steps (see attached mp4 screencast):

1. Open a virgin Firefox profile
2. Move the Pocket button from the toolbar to the overflow menu
3. Resize the Firefox window so that it has a very small height, so that opening the Pocket menu from within the overflow menu would overflow the Firefox window
4. Open the overflow menu, and then click on the Pocket menu

The crash does not occur when Firefox is launched with GDK_BACKEND=x11, or when widget.wayland.use-move-to-rect is set to false in about:config.

Actual results:

Firefox crashes with

Gdk:ERROR:../gdk/wayland/gdkwindow-wayland.c:2231:rect_anchor_to_anchor: code should not be reached
Bail out! Gdk:ERROR:../gdk/wayland/gdkwindow-wayland.c:2231:rect_anchor_to_anchor: code should not be reached
Redirecting call to abort() to mozalloc_abort

(attached video ends at the moment the crash occurs).

Expected results:

Pocket menu opens

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::Widget: Gtk' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Martin Stránský [:stransky] (ni? me)]

Will look at it, Thanks!

btw. Can you test latest nightly? how-to is here:
https://fedoraproject.org/wiki/How_to_debug_Firefox_problems?rd=Bug_info_Firefox#Testing_Mozilla_binaries
Thanks.

Comment 3

[jules.bertholet]

I can reproduce this with the stable build from the Mozilla website, but not with Beta or Nightly. I suppose the issue must have been fixed then?

Comment 4

[Martin Stránský [:stransky] (ni? me)]

Yes, should be fixed on 102.

Comment 5

[Martin Stránský [:stransky] (ni? me)]

Should be fixed by Bug 1771104.