1862662 - Crash in [@ style::values::computed::length_percentage::CalcLengthPercentage::resolve]

Status: RESOLVED DUPLICATE of bug 1852060

(Core :: CSS Parsing and Computation, defect)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

This crash signature exists since Firefox v117. It got more frequent with v118: 431 crashes from 310 installations.

Crash report: https://crash-stats.mozilla.org/report/index/7da3ad5c-770e-44a9-a6d6-21a3c0231102

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0  xul.dll  enum2$<style::values::generics::calc::GenericCalcNode<enum2$<style::values::computed::length_percentage::CalcLengthPercentageLeaf> > >::resolve_internal<enum2$<style::values::computed::length_percentage::CalcLengthPercentageLeaf>, style::values::computed::length_percentage::impl$19::resolve::closure_env$0>  servo/components/style/values/generics/calc.rs:806
1  xul.dll  enum2$<style::values::generics::calc::GenericCalcNode<enum2$<style::values::computed::length_percentage::CalcLengthPercentageLeaf> > >::resolve_map  servo/components/style/values/generics/calc.rs:799
1  xul.dll  style::values::computed::length_percentage::CalcLengthPercentage::resolve  servo/components/style/values/computed/length_percentage.rs:802
1  xul.dll  geckoservo::glue::Servo_ResolveCalcLengthPercentage  servo/ports/geckolib/glue.rs:7853
2  xul.dll  mozilla::StyleCalcLengthPercentage::ResolveToCSSPixels const  layout/style/ServoStyleConstsInlines.h:684
2  xul.dll  mozilla::StyleCalcLengthPercentage::Resolve const  layout/style/nsStyleStruct.cpp:3507
2  xul.dll  mozilla::StyleLengthPercentageUnion::Resolve const  layout/style/ServoStyleConstsInlines.h:726
2  xul.dll  mozilla::StyleLengthPercentageUnion::Resolve const  layout/style/ServoStyleConstsInlines.h:732
2  xul.dll  nsIFrame::ComputeBorderRadii  layout/generic/nsIFrame.cpp:1813
2  xul.dll  nsIFrame::GetBorderRadii const  layout/generic/nsIFrame.cpp:1940