Open Bug 1855626 Opened 1 year ago Updated 1 year ago

Assertion failure: aISize >= 0 (unexpected negative hangable advance), at /layout/generic/nsTextFrame.cpp:8320

Categories

(Core :: Layout: Text and Fonts, defect)

Product:
Core
Component:
Layout: Text and Fonts
Version:
Firefox 119
Type:
defect

Tracking

()

Status:
UNCONFIRMED

People

(Reporter: 1319794503, Unassigned, NeedInfo)

References

Details

(Keywords: assertion, testcase)

Attachments

(2 files)

2023-09-13-01-22-07-4475446-2023-09-16-23-12-55-9588114.html
5.49 MB, text/html
Details
original testcase
6.45 MB, text/html
Details

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36

Steps to reproduce:

open the html testcase attached below with firefox 119.0a1 debug and asan build version.
I will upload the minimized testcase as soon as possible.

Actual results:

browser crashed.
carsh log:
Assertion failure: aISize >= 0 (unexpected negative hangable advance), at /home/wuyue/browser/mozilla-unified/layout/generic/nsTextFrame.cpp:8320
#01: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x167b2eaf]
#02: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16723b7f]
#03: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1671da6c]
#04: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667f5dc]
#05: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667e5cf]
#06: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667d678]
#07: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1671dc4c]
#08: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667f5dc]
#09: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667e5cf]
#10: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667d678]
#11: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1671dc4c]
#12: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667f5dc]
#13: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667e5cf]
#14: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667d678]
#15: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1671dc4c]
#16: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667f5dc]
#17: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667e5cf]
#18: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667d678]
#19: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1671dc4c]
#20: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667f5dc]
#21: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667e5cf]
#22: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667d678]
#23: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1671dc4c]
#24: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667f5dc]
#25: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667e5cf]
#26: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667d678]
#27: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1671dc4c]
#28: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667f5dc]
#29: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667e5cf]
#30: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1667d678]
#31: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1671dc4c]
#32: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16481f77]
#33: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16480239]
#34: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16476e60]
#35: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1646cbc0]
#36: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1645fef2]
#37: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164559dc]
#38: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1671dc4c]
#39: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16481f77]
#40: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16480239]
#41: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16476e60]
#42: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1646cbc0]
#43: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1645fef2]
#44: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164559dc]
#45: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1671dc4c]
#46: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16481f77]
#47: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16480239]
#48: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16476e60]
#49: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1646cbc0]
#50: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1645fef2]
#51: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164559dc]
#52: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1671dc4c]
#53: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16481f77]
#54: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16480239]
#55: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16476e60]
#56: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1646cbc0]
#57: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1645fef2]
#58: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164559dc]
#59: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164a5417]
#60: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1655be8e]
#61: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1655d421]
#62: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16566068]
#63: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1647c58b]
#64: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164728c1]
#65: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1646cf6f]
#66: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1645fef2]
#67: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164559dc]
#68: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164a5417]
#69: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1655be8e]
#70: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1655d421]
#71: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16566068]
#72: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1671dc4c]
#73: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16481f77]
#74: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16480239]
#75: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16476e60]
#76: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1646cbc0]
#77: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1645fef2]
#78: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164559dc]
#79: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1671dc4c]
#80: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16481f77]
#81: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16480239]
#82: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16476e60]
#83: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1646cbc0]
#84: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1645fef2]
#85: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164559dc]
#86: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1647c58b]
#87: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164728c1]
#88: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1646cf6f]
#89: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1645fef2]
#90: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164559dc]
#91: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1647c58b]
#92: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164728c1]
#93: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1646cf6f]
#94: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1645fef2]
#95: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164559dc]
#96: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164a5417]
#97: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164a3565]
#98: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x164a5417]
#99: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1655be8e]
#100: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1655d421]
#101: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16566068]
#102: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1643ee48]
#103: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1643dff0]
#104: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x161e2812]
#105: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1622858d]
#106: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x161f734d]
#107: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16178065]
#108: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1618c86a]
#109: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1618c5e4]
#110: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1618c24e]
#111: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1618ada5]
#112: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16189963]
#113: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x16188d5d]
#114: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x161888a4]
#115: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x14952993]
#116: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x14df2738]
#117: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xd556e11]
#118: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xd4c36e5]
#119: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xd4c1519]
#120: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xd4c1e83]
#121: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xd4c2a02]
#122: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xbcf144d]
#123: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xbcd8bb0]
#124: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xbcd63db]
#125: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xbcd6a2c]
#126: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xbcdd03a]
#127: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xbd2261f]
#128: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xbd2cfab]
#129: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xd4c9075]
#130: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xd33bbf9]
#131: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xd33b97b]
#132: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x15a13c13]
#133: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1a307ca6]
#134: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xd4c9e9e]
#135: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xd33bbf9]
#136: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0xd33b97b]
#137: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/libxul.so +0x1a3070ba]
#138: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/firefox +0x1b35e2]
#139: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/firefox +0x1b4014]
#140: __libc_start_main[/lib/x86_64-linux-gnu/libc.so.6 +0x24083]
#141: ???[/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/firefox +0xdd9b9]
#142: ??? (???:???)
[Parent 260238, IPDL Background] WARNING: [1.1]: Ignoring message 'PVsync::Msg_Notify' to unknown peer 2BB6CA02F24400EB.40F0CD01061142B3: file /home/wuyue/browser/mozilla-unified/ipc/glue/NodeController.cpp:344
[Parent 260238, IPC I/O Parent] WARNING: [1.1]: Ignoring message 'EVENT_MESSAGE' to unknown peer 2BB6CA02F24400EB.40F0CD01061142B3: file /home/wuyue/browser/mozilla-unified/ipc/glue/NodeController.cpp:344
[Parent 260238, IPC I/O Parent] WARNING: [1.1]: Ignoring message 'EVENT_MESSAGE' to unknown peer 2BB6CA02F24400EB.40F0CD01061142B3: file /home/wuyue/browser/mozilla-unified/ipc/glue/NodeController.cpp:344
[Parent 260238, IPC I/O Parent] WARNING: [1.1]: Ignoring message 'EVENT_MESSAGE' to unknown peer 2BB6CA02F24400EB.40F0CD01061142B3: file /home/wuyue/browser/mozilla-unified/ipc/glue/NodeController.cpp:344

Program /home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/firefox (pid = 260331) received signal 11.

Expected results:

not crash

Component: Untriaged → Layout
Product: Firefox → Core

Not sure if you saw my response on Bug 1853583 comment 3 yet -- but it'd be quite helpful if you could run your backtraces through fix_stacks.py before posting them in a bug comment. Otherwise they're not meaningful, so they just make the initial bug comment much taller to scroll through with no added value.

In any case: thanks for the bug report. The assertion here seems to be this one:
https://searchfox.org/mozilla-central/rev/6b91b922725838e2732aeb478b13e5b33e33ce1b/layout/generic/nsTextFrame.cpp#8323-8324

void nsTextFrame::SetHangableISize(nscoord aISize) {
  MOZ_ASSERT(aISize >= 0, "unexpected negative hangable advance");

which was added recently in bug 1712703. --> Adding dependency.

Unfortunately I can't reproduce yet -- I tried loading the attachment in a debug build on current linux mozilla-central wasn't able to reproduce any fatal assertion. I wonder if there's some inadvertent fine-tuned dependency on some system- or distro-specific thing, like particular fonts. Could you share what linux distro you're using, and to-what-extent you've e.g. installed additional fonts or done anything like that? (I'm wondering how likely it is that we might be able to repro in e.g. a vanilla install of the same distribution you're using.)

(For now at least: when I load the testcase, I see lots of logging about unexpectedly large sizes, so I'm not too surprised that we might get into as situation where we've got a frame that's got a negative size as indicated by the assertion here -- whether due to integer-overflow or due to "sharing space" with infinitely-large siblings, or something else like that. Possibly we should relax the fatal assertion.)

Component: Layout → Layout: Text and Fonts
Depends on: 1712703
Flags: needinfo?(1319794503)
Keywords: assertion, testcase

The callsite here is:
https://searchfox.org/mozilla-central/rev/6b91b922725838e2732aeb478b13e5b33e33ce1b/layout/generic/nsTextFrame.cpp#9472-9476

// Figure out how much whitespace will hang if at end-of-line.
gfxFloat hang =
    std::min(std::max(0.0, textMetrics.mAdvanceWidth - availWidth),
             gfxFloat(trimmableWS.mAdvance));
SetHangableISize(NSToCoordRound(trimmableWS.mAdvance - hang));

It looks like we're ensuring (with std::min) that hang is at least no-greater-than trimmableWS.mAdvance here, so that subtraction shouldn't be trivially able to be negative. But maybe the problem here is really that the trimmableWS.mAdvance - hang expression is just absurdly-large, and NSToCoordRound probably triggers integer overflow when converting from double to int32_t here?

ni=jfkthame to double-check this logic and bulletproof it (or relax the fatal assertion) in the face of that sort of issue. (Or maybe jfkthame has a better theory about what's going on here.)

Flags: needinfo?(jfkthame)
Severity: -- → S3

(maybe just relaxing the fatal assertion is fine; it's probably not worth forcing ourselves to use a positive value here just to avoid negative coordinates. It looks like the consequences are just broken-looking layout, which isn't a real concern with these sorts of sizes / testcases.)

#01: nsTextFrame::SetHangableISize(int) (/home/wuyue/browser/mozilla-unified/layout/generic/nsTextFrame.cpp:8320)
#02: nsTextFrame::ReflowText(nsLineLayout&, int, mozilla::gfx::DrawTarget*, mozilla::ReflowOutput&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsTextFrame.cpp:0)
#03: nsLineLayout::ReflowFrame(nsIFrame*, nsReflowStatus&, mozilla::ReflowOutput*, bool&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsLineLayout.cpp:0)
#04: nsInlineFrame::ReflowInlineFrame(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, nsIFrame*, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:669)
#05: nsInlineFrame::ReflowFrames(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, mozilla::ReflowOutput&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:0)
#06: nsInlineFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:359)
#07: nsLineLayout::ReflowFrame(nsIFrame*, nsReflowStatus&, mozilla::ReflowOutput*, bool&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsLineLayout.cpp:0)
#08: nsInlineFrame::ReflowInlineFrame(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, nsIFrame*, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:669)
#09: nsInlineFrame::ReflowFrames(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, mozilla::ReflowOutput&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:0)
#10: nsInlineFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:359)
#11: nsLineLayout::ReflowFrame(nsIFrame*, nsReflowStatus&, mozilla::ReflowOutput*, bool&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsLineLayout.cpp:0)
#12: nsInlineFrame::ReflowInlineFrame(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, nsIFrame*, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:669)
#13: nsInlineFrame::ReflowFrames(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, mozilla::ReflowOutput&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:0)
#14: nsInlineFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:359)
#15: nsLineLayout::ReflowFrame(nsIFrame*, nsReflowStatus&, mozilla::ReflowOutput*, bool&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsLineLayout.cpp:0)
#16: nsInlineFrame::ReflowInlineFrame(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, nsIFrame*, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:669)
#17: nsInlineFrame::ReflowFrames(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, mozilla::ReflowOutput&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:0)
#18: nsInlineFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:359)
#19: nsLineLayout::ReflowFrame(nsIFrame*, nsReflowStatus&, mozilla::ReflowOutput*, bool&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsLineLayout.cpp:0)
#20: nsInlineFrame::ReflowInlineFrame(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, nsIFrame*, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:669)
#21: nsInlineFrame::ReflowFrames(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, mozilla::ReflowOutput&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:0)
#22: nsInlineFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:359)
#23: nsLineLayout::ReflowFrame(nsIFrame*, nsReflowStatus&, mozilla::ReflowOutput*, bool&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsLineLayout.cpp:0)
#24: nsInlineFrame::ReflowInlineFrame(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, nsIFrame*, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:669)
#25: nsInlineFrame::ReflowFrames(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, mozilla::ReflowOutput&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:0)
#26: nsInlineFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:359)
#27: nsLineLayout::ReflowFrame(nsIFrame*, nsReflowStatus&, mozilla::ReflowOutput*, bool&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsLineLayout.cpp:0)
#28: nsInlineFrame::ReflowInlineFrame(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, nsIFrame*, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:669)
#29: nsInlineFrame::ReflowFrames(nsPresContext*, mozilla::ReflowInput const&, nsInlineFrame::InlineReflowInput&, mozilla::ReflowOutput&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:0)
#30: nsInlineFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsInlineFrame.cpp:359)
#31: nsLineLayout::ReflowFrame(nsIFrame*, nsReflowStatus&, mozilla::ReflowOutput*, bool&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsLineLayout.cpp:0)
#32: nsBlockFrame::ReflowInlineFrame(mozilla::BlockReflowState&, nsLineLayout&, nsLineList_iterator, nsIFrame*, LineReflowStatus*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:0)
#33: nsBlockFrame::DoReflowInlineFrames(mozilla::BlockReflowState&, nsLineLayout&, nsLineList_iterator, nsFlowAreaRect&, int&, nsFloatManager::SavedState*, bool*, LineReflowStatus*, bool) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:4586)
#34: nsBlockFrame::ReflowInlineFrames(mozilla::BlockReflowState&, nsLineList_iterator, bool*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:4460)
#35: nsBlockFrame::ReflowLine(mozilla::BlockReflowState&, nsLineList_iterator, bool*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:3435)
#36: nsBlockFrame::ReflowDirtyLines(mozilla::BlockReflowState&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:0)
#37: nsBlockFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:1511)
#38: nsAbsoluteContainingBlock::ReflowAbsoluteFrame(nsIFrame*, nsPresContext*, mozilla::ReflowInput const&, nsRect const&, nsAbsoluteContainingBlock::AbsPosReflowFlags, nsIFrame*, nsReflowStatus&, mozilla::OverflowAreas*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsAbsoluteContainingBlock.cpp:816)
#39: nsAbsoluteContainingBlock::Reflow(nsContainerFrame*, nsPresContext*, mozilla::ReflowInput const&, nsReflowStatus&, nsRect const&, nsAbsoluteContainingBlock::AbsPosReflowFlags, mozilla::OverflowAreas*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsAbsoluteContainingBlock.cpp:219)
#40: nsBlockFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:1750)
#41: nsLineLayout::ReflowFrame(nsIFrame*, nsReflowStatus&, mozilla::ReflowOutput*, bool&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsLineLayout.cpp:0)
#42: nsBlockFrame::ReflowInlineFrame(mozilla::BlockReflowState&, nsLineLayout&, nsLineList_iterator, nsIFrame*, LineReflowStatus*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:0)
#43: nsBlockFrame::DoReflowInlineFrames(mozilla::BlockReflowState&, nsLineLayout&, nsLineList_iterator, nsFlowAreaRect&, int&, nsFloatManager::SavedState*, bool*, LineReflowStatus*, bool) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:4586)
#44: nsBlockFrame::ReflowInlineFrames(mozilla::BlockReflowState&, nsLineList_iterator, bool*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:4460)
#45: nsBlockFrame::ReflowLine(mozilla::BlockReflowState&, nsLineList_iterator, bool*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:3435)
#46: nsBlockFrame::ReflowDirtyLines(mozilla::BlockReflowState&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:0)
#47: nsBlockFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:1511)
#48: nsLineLayout::ReflowFrame(nsIFrame*, nsReflowStatus&, mozilla::ReflowOutput*, bool&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsLineLayout.cpp:0)
#49: nsBlockFrame::ReflowInlineFrame(mozilla::BlockReflowState&, nsLineLayout&, nsLineList_iterator, nsIFrame*, LineReflowStatus*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:0)
#50: nsBlockFrame::DoReflowInlineFrames(mozilla::BlockReflowState&, nsLineLayout&, nsLineList_iterator, nsFlowAreaRect&, int&, nsFloatManager::SavedState*, bool*, LineReflowStatus*, bool) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:4586)
#51: nsBlockFrame::ReflowInlineFrames(mozilla::BlockReflowState&, nsLineList_iterator, bool*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:4460)
#52: nsBlockFrame::ReflowLine(mozilla::BlockReflowState&, nsLineList_iterator, bool*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:3435)
#53: nsBlockFrame::ReflowDirtyLines(mozilla::BlockReflowState&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:0)
#54: nsBlockFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:1511)
#55: nsBlockReflowContext::ReflowBlock(mozilla::LogicalRect const&, bool, nsCollapsingMargin&, int, nsLineBox*, mozilla::ReflowInput&, nsReflowStatus&, mozilla::BlockReflowState&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockReflowContext.cpp:291)
#56: nsBlockFrame::ReflowBlockFrame(mozilla::BlockReflowState&, nsLineList_iterator, bool*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:0)
#57: nsBlockFrame::ReflowLine(mozilla::BlockReflowState&, nsLineList_iterator, bool*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:3454)
#58: nsBlockFrame::ReflowDirtyLines(mozilla::BlockReflowState&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:0)
#59: nsBlockFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:1511)
#60: nsBlockReflowContext::ReflowBlock(mozilla::LogicalRect const&, bool, nsCollapsingMargin&, int, nsLineBox*, mozilla::ReflowInput&, nsReflowStatus&, mozilla::BlockReflowState&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockReflowContext.cpp:291)
#61: nsBlockFrame::ReflowBlockFrame(mozilla::BlockReflowState&, nsLineList_iterator, bool*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:0)
#62: nsBlockFrame::ReflowLine(mozilla::BlockReflowState&, nsLineList_iterator, bool*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:3454)
#63: nsBlockFrame::ReflowDirtyLines(mozilla::BlockReflowState&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:0)
#64: nsBlockFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsBlockFrame.cpp:1511)
#65: nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, mozilla::WritingMode const&, mozilla::LogicalPoint const&, nsSize const&, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsContainerFrame.cpp:893)
#66: nsCanvasFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsCanvasFrame.cpp:760)
#67: nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, mozilla::WritingMode const&, mozilla::LogicalPoint const&, nsSize const&, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsContainerFrame.cpp:893)
#68: nsHTMLScrollFrame::ReflowScrolledFrame(mozilla::ScrollReflowInput&, bool, bool, mozilla::ReflowOutput*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsGfxScrollFrame.cpp:939)
#69: nsHTMLScrollFrame::ReflowContents(mozilla::ScrollReflowInput&, mozilla::ReflowOutput const&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsGfxScrollFrame.cpp:1094)
#70: nsHTMLScrollFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/nsGfxScrollFrame.cpp:0)
#71: nsContainerFrame::ReflowChild(nsIFrame*, nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, int, int, nsIFrame::ReflowChildFlags, nsReflowStatus&, nsOverflowContinuationTracker*) (/home/wuyue/browser/mozilla-unified/layout/generic/nsContainerFrame.cpp:934)
#72: mozilla::ViewportFrame::Reflow(nsPresContext*, mozilla::ReflowOutput&, mozilla::ReflowInput const&, nsReflowStatus&) (/home/wuyue/browser/mozilla-unified/layout/generic/ViewportFrame.cpp:386)
#73: mozilla::PresShell::DoReflow(nsIFrame*, bool, mozilla::OverflowChangedTracker*) (/home/wuyue/browser/mozilla-unified/layout/base/PresShell.cpp:9686)
#74: mozilla::PresShell::ProcessReflowCommands(bool) (/home/wuyue/browser/mozilla-unified/layout/base/PresShell.cpp:9858)
#75: mozilla::PresShell::DoFlushPendingNotifications(mozilla::ChangesToFlush) (/home/wuyue/browser/mozilla-unified/layout/base/PresShell.cpp:4367)
#76: nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick) (/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/include/mozilla/PresShell.h:0)
#77: mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&) (/home/wuyue/browser/mozilla-unified/layout/base/nsRefreshDriver.cpp:336)
#78: mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) (/home/wuyue/browser/mozilla-unified/layout/base/nsRefreshDriver.cpp:354)
#79: mozilla::VsyncRefreshDriverTimer::RunRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) (/home/wuyue/browser/mozilla-unified/layout/base/nsRefreshDriver.cpp:966)
#80: mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) (/home/wuyue/browser/mozilla-unified/layout/base/nsRefreshDriver.cpp:829)
#81: mozilla::VsyncRefreshDriverTimer::NotifyVsyncOnMainThread(mozilla::VsyncEvent const&) (/home/wuyue/browser/mozilla-unified/layout/base/nsRefreshDriver.cpp:736)
#82: mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsyncTimerOnMainThread() (/home/wuyue/browser/mozilla-unified/layout/base/nsRefreshDriver.cpp:578)
#83: mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsync(mozilla::VsyncEvent const&) (/home/wuyue/browser/mozilla-unified/layout/base/nsRefreshDriver.cpp:0)
#84: mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&) (/home/wuyue/browser/mozilla-unified/dom/ipc/VsyncMainChild.cpp:67)
#85: mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&) (/home/wuyue/browser/mozilla-unified/objdir-ff-asan/ipc/ipdl/PVsyncChild.cpp:0)
#86: mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&) (/home/wuyue/browser/mozilla-unified/objdir-ff-asan/ipc/ipdl/PBackgroundChild.cpp:5538)
#87: mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) (/home/wuyue/browser/mozilla-unified/ipc/glue/MessageChannel.cpp:1800)
#88: mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >) (/home/wuyue/browser/mozilla-unified/ipc/glue/MessageChannel.cpp:1728)
#89: mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) (/home/wuyue/browser/mozilla-unified/ipc/glue/MessageChannel.cpp:1525)
#90: mozilla::ipc::MessageChannel::MessageTask::Run() (/home/wuyue/browser/mozilla-unified/ipc/glue/MessageChannel.cpp:0)
#91: mozilla::RunnableTask::Run() (/home/wuyue/browser/mozilla-unified/xpcom/threads/TaskController.cpp:560)
#92: mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) (/home/wuyue/browser/mozilla-unified/xpcom/threads/TaskController.cpp:0)
#93: mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) (/home/wuyue/browser/mozilla-unified/xpcom/threads/TaskController.cpp:0)
#94: mozilla::TaskController::ProcessPendingMTTask(bool) (/home/wuyue/browser/mozilla-unified/xpcom/threads/TaskController.cpp:495)
#95: mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::$_0>::Run() (/home/wuyue/browser/mozilla-unified/xpcom/threads/nsThreadUtils.h:549)
#96: nsThread::ProcessNextEvent(bool, bool*) (/home/wuyue/browser/mozilla-unified/xpcom/threads/nsThread.cpp:1203)
#97: NS_ProcessNextEvent(nsIThread*, bool) (/home/wuyue/browser/mozilla-unified/xpcom/threads/nsThreadUtils.cpp:480)
#98: mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) (/home/wuyue/browser/mozilla-unified/ipc/glue/MessagePump.cpp:85)
#99: MessageLoop::RunInternal() (/home/wuyue/browser/mozilla-unified/ipc/chromium/src/base/message_loop.cc:371)
#100: MessageLoop::Run() (/home/wuyue/browser/mozilla-unified/ipc/chromium/src/base/message_loop.cc:346)
#101: nsBaseAppShell::Run() (/home/wuyue/browser/mozilla-unified/widget/nsBaseAppShell.cpp:150)
#102: XRE_RunAppShell() (/home/wuyue/browser/mozilla-unified/toolkit/xre/nsEmbedFunctions.cpp:721)
#103: mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) (/home/wuyue/browser/mozilla-unified/ipc/glue/MessagePump.cpp:235)
#104: MessageLoop::RunInternal() (/home/wuyue/browser/mozilla-unified/ipc/chromium/src/base/message_loop.cc:371)
#105: MessageLoop::Run() (/home/wuyue/browser/mozilla-unified/ipc/chromium/src/base/message_loop.cc:346)
#106: XRE_InitChildProcess(int, char**, XREChildData const*) (/home/wuyue/browser/mozilla-unified/toolkit/xre/nsEmbedFunctions.cpp:660)
#107: content_process_main(mozilla::Bootstrap*, int, char**) (/home/wuyue/browser/mozilla-unified/ipc/contentproc/plugin-container.cpp:58)
#108: main (/home/wuyue/browser/mozilla-unified/browser/app/nsBrowserApp.cpp:375)
#109: ??? (/lib/x86_64-linux-gnu/libc.so.6 + 0x29d90)
#110: __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6 + 0x29e40)
#111: ??? (/home/wuyue/browser/mozilla-unified/objdir-ff-asan/dist/bin/firefox + 0xdd9b9)
#112: ??? (???:???)

Sorry for replying late. Hope this bt could be helpful. And I will upload the original testcase triggered the crash and upload the most minimized testcase as soon as possible.

Flags: needinfo?(1319794503)
Attached file original testcase —
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: