Crash in [@ selectors::matching::matches_generic_nth_child]
Categories
(Core :: CSS Parsing and Computation, defect)
Tracking
()
People
(Reporter: liamdanielthomas, Unassigned)
Details
Crash Data
From what I can tell it's being caused by nth-child(N of selector) style selectors. If I comment out that CSS it loads fine.
Crash report: https://crash-stats.mozilla.org/report/index/9e1178da-97d4-40e8-b6f6-961890230602
MOZ_CRASH Reason: called `Option::unwrap()` on a `None` value
Top 10 frames of crashing thread:
0 XUL MOZ_Crash mfbt/Assertions.h:261
0 XUL RustMozCrash mozglue/static/rust/wrappers.cpp:18
1 XUL mozglue_static::panic_hook mozglue/static/rust/lib.rs:91
2 XUL core::ops::function::Fn::call library/core/src/ops/function.rs:79
3 XUL <alloc::boxed::Box<F, A> as core::ops::function::Fn<Args>>::call library/alloc/src/boxed.rs:2002
3 XUL std::panicking::rust_panic_with_hook library/std/src/panicking.rs:692
4 XUL std::panicking::begin_panic_handler::{{closure}} library/std/src/panicking.rs:577
5 XUL std::sys_common::backtrace::__rust_end_short_backtrace library/std/src/sys_common/backtrace.rs:137
6 XUL rust_begin_unwind library/std/src/panicking.rs:575
7 XUL core::panicking::panic_fmt library/core/src/panicking.rs:64
|
Reporter | |
Comment 1•3 years ago
|
||
This bug seems to be related to Firefox 113 only. Firefox 112 doesn't seem to have this problem.
|
||
Comment 2•3 years ago
|
||
The Bugbug bot thinks this bug should belong to the 'Core::CSS Parsing and Computation' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.
|
||
Comment 3•3 years ago
|
||
What selector in particular? If you have a URL or something that crashes it'd be great to be able to look at it. If it has a pseudo-element, it is bug 1834717. Could you check if it's fixed in beta or in https://nightly.mozilla.org? Thanks.
|
|
||
Comment 4•3 years ago
|
||
The bug has a crash signature, thus the bug will be considered confirmed.
|
|
||
Comment 5•2 years ago
|
||
Redirect a needinfo that is pending on an inactive user to the triage owner.
:emilio, since the bug doesn't have a severity set, could you please set the severity or close the bug?
For more information, please visit BugBot documentation.
|
|
||
Comment 6•2 years ago
|
||
Probably fixed elsewhere.
Description
•