1854901 - Crash in [@ mozilla::MergeState::ProcessItemFromNewList]

Status: NEW

(Core :: Web Painting, defect)

Description

[Gabriele Svelto [:gsvelto]]

Crash report: https://crash-stats.mozilla.org/report/index/93c04758-3c08-44a7-827d-fa6e40230923

MOZ_CRASH Reason: MOZ_DIAGNOSTIC_ASSERT(aNewItem->HasModifiedFrame() == HasModifiedFrame(aNewItem))

Top 10 frames of crashing thread:

0  xul.dll  mozilla::MergeState::ProcessItemFromNewList  layout/painting/RetainedDisplayListBuilder.cpp:458
0  xul.dll  mozilla::RetainedDisplayListBuilder::MergeDisplayLists  layout/painting/RetainedDisplayListBuilder.cpp:825
1  xul.dll  mozilla::MergeState::MergeChildLists  layout/painting/RetainedDisplayListBuilder.cpp:509
1  xul.dll  mozilla::MergeState::ProcessItemFromNewList  layout/painting/RetainedDisplayListBuilder.cpp:481
1  xul.dll  mozilla::RetainedDisplayListBuilder::MergeDisplayLists  layout/painting/RetainedDisplayListBuilder.cpp:825
2  xul.dll  mozilla::MergeState::MergeChildLists  layout/painting/RetainedDisplayListBuilder.cpp:509
2  xul.dll  mozilla::MergeState::ProcessItemFromNewList  layout/painting/RetainedDisplayListBuilder.cpp:481
2  xul.dll  mozilla::RetainedDisplayListBuilder::MergeDisplayLists  layout/painting/RetainedDisplayListBuilder.cpp:825
3  xul.dll  mozilla::RetainedDisplayListBuilder::AttemptPartialUpdate  layout/painting/RetainedDisplayListBuilder.cpp:1674
3  xul.dll  nsLayoutUtils::PaintFrame  layout/base/nsLayoutUtils.cpp:3322

We have a few different crashes on nightly, from different users so there might be something going on. Some of the affected machines are very new so it's hard to ascribe this to bad hardware.