1826033 - Assertion failure: mFrame->Combines3DTransformWithAncestors() || IsTransformSeparator(), at /builds/worker/checkouts/gecko/layout/painting/nsDisplayList.cpp:6987

Status: UNCONFIRMED

(Core :: Web Painting, defect)

Description

[2366719611]

Attachment: the html that causes the crash

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36

Steps to reproduce:

open the attached html file with firefox debug version.

Actual results:

the firefox crashed.
log:
Assertion failure: mFrame->Combines3DTransformWithAncestors() || IsTransformSeparator(), at /builds/worker/checkouts/gecko/layout/painting/nsDisplayList.cpp:6987
#01: ??? mozilla::nsDisplayTransform::DoUpdateBoundsPreserves3D(mozilla::nsDisplayListBuilder*)
#02: ??? mozilla::nsDisplayTransform::ComputeBounds(mozilla::nsDisplayListBuilder*)
#03: ??? mozilla::nsDisplayTransform::UpdateBoundsFor3D(mozilla::nsDisplayListBuilder*)
#04: ??? mozilla::nsDisplayTransform::UpdateBounds(mozilla::nsDisplayListBuilder*)
#05: ??? mozilla::nsDisplayTransform* mozilla::MakeDisplayItemWithIndex<mozilla::nsDisplayTransform, nsIFrame, mozilla::nsDisplayList*, nsRect&, mozilla::nsDisplayTransform::PrerenderDecision&>(mozilla::nsDisplayListBuilder*, nsIFrame*, unsigned short, mozilla::nsDisplayList*&&, nsRect&, mozilla::nsDisplayTransform::PrerenderDecision&)
#06: ??? nsIFrame::BuildDisplayListForStackingContext(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayList*, bool*)
#07: ??? nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
#08: ??? DisplayLine(mozilla::nsDisplayListBuilder*, nsLineList_iterator&, bool, mozilla::nsDisplayListSet const&, nsBlockFrame*, mozilla::css::TextOverflow*, unsigned int, int, int&)
#09: ??? nsBlockFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
#10: ??? nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
#11: ??? nsColumnSetFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
#12: ??? nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
#13: ??? DisplayLine(mozilla::nsDisplayListBuilder*, nsLineList_iterator&, bool, mozilla::nsDisplayListSet const&, nsBlockFrame*, mozilla::css::TextOverflow*, unsigned int, int, int&)
#14: ??? nsBlockFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
#15: ??? nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
#16: ??? DisplayLine(mozilla::nsDisplayListBuilder*, nsLineList_iterator&, bool, mozilla::nsDisplayListSet const&, nsBlockFrame*, mozilla::css::TextOverflow*, unsigned int, int, int&)
#17: ??? nsBlockFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
#18: ??? nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
#19: ??? nsCanvasFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
#20: ??? nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
#21: ??? mozilla::ScrollFrameHelper::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
#22: ??? nsIFrame::BuildDisplayListForChild(mozilla::nsDisplayListBuilder*, nsIFrame*, mozilla::nsDisplayListSet const&, mozilla::EnumSet<nsIFrame::DisplayChildFlag, unsigned int>)
#23: ??? mozilla::ViewportFrame::BuildDisplayList(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayListSet const&)
#24: ??? nsIFrame::BuildDisplayListForStackingContext(mozilla::nsDisplayListBuilder*, mozilla::nsDisplayList*, bool*)
#25: ??? nsLayoutUtils::PaintFrame(gfxContext*, nsIFrame*, nsRegion const&, unsigned int, mozilla::nsDisplayListBuilderMode, nsLayoutUtils::PaintFrameFlags)
#26: ??? mozilla::PresShell::PaintInternal(nsView*, mozilla::PaintInternalFlags)
#27: ??? nsViewManager::ProcessPendingUpdatesPaint(nsIWidget*)
#28: ??? nsViewManager::ProcessPendingUpdatesForView(nsView*, bool)
#29: ??? nsViewManager::ProcessPendingUpdates()
#30: ??? nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick)
#31: ??? mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&)
#32: ??? mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
#33: ??? mozilla::VsyncRefreshDriverTimer::RunRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
#34: ??? mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp)
#35: ??? mozilla::VsyncRefreshDriverTimer::NotifyVsyncOnMainThread(mozilla::VsyncEvent const&)
#36: ??? mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsyncTimerOnMainThread()
#37: ??? mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsync(mozilla::VsyncEvent const&)
#38: ??? mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&)
#39: ??? mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&)
#40: ??? mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&)
#41: ??? mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&)
#42: ??? mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
#43: ??? mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&)
#44: ??? mozilla::ipc::MessageChannel::MessageTask::Run()
#45: ??? mozilla::RunnableTask::Run()
#46: ??? mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
#47: ??? mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
#48: ??? mozilla::TaskController::ProcessPendingMTTask(bool)
#49: ??? mozilla::detail::RunnableFunction<mozilla::TaskController::InitializeInternal()::$_3>::Run()
#50: ??? nsThread::ProcessNextEvent(bool, bool*)
#51: ??? NS_ProcessNextEvent(nsIThread*, bool)
#52: ??? mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
#53: ??? MessageLoop::RunInternal()
#54: ??? MessageLoop::Run()
#55: ??? nsBaseAppShell::Run()
#56: ??? XRE_RunAppShell()
#57: ??? mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
#58: ??? MessageLoop::RunInternal()
#59: ??? MessageLoop::Run()
#60: ??? XRE_InitChildProcess(int, char**, XREChildData const*)
#61: ??? content_process_main(mozilla::Bootstrap*, int, char**)
#62: ??? main
#63: __libc_start_main __libc_start_main
#64: ??? _start
#65: ??? (???:???)

Expected results:

the firefox should not crash.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::Layout' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.