1864938 - Crash in [@ selectors::parser::Component<T>::visit]

Status: RESOLVED DUPLICATE of bug 1864647

(Core :: CSS Parsing and Computation, defect)

Description

[Ryan VanderMeulen [:RyanVM]]

Crash report: https://crash-stats.mozilla.org/report/index/d5bb1c85-4972-452f-a200-5fdef0231114

MOZ_CRASH Reason: internal error: entered unreachable code: Nested relative selector?

Top 10 frames of crashing thread:

0  XUL  MOZ_Crash  mfbt/Assertions.h:281
0  XUL  RustMozCrash  mozglue/static/rust/wrappers.cpp:18
1  XUL  mozglue_static::panic_hook  mozglue/static/rust/lib.rs:96
2  XUL  core::ops::function::Fn::call  library/core/src/ops/function.rs:79
3  XUL  <alloc::boxed::Box<F, A> as core::ops::function::Fn<Args>>::call  library/alloc/src/boxed.rs:2021
3  XUL  std::panicking::rust_panic_with_hook  library/std/src/panicking.rs:711
4  XUL  std::panicking::begin_panic_handler::{{closure}}  library/std/src/panicking.rs:599
5  XUL  std::sys_common::backtrace::__rust_end_short_backtrace  library/std/src/sys_common/backtrace.rs:170
6  XUL  rust_begin_unwind  library/std/src/panicking.rs:595
7  XUL  core::panicking::panic_fmt  library/core/src/panicking.rs:67

Comment 1

[Daniel Holbert [:dholbert]]

One of the crash reports has a codepen URL which does in fact reliably crash for me. I'll attach it (as a standalone testcase) shortly.

It seems to use :has, and when I crash with it, I get a slightly different crash signature, but the same MOZ_CRASH Reason of internal error: entered unreachable code: Nested relative selector?

My crash report: bp-6a5f3e2c-07a2-4546-940a-435f10231115
which has signature [@ <style::invalidation::element::invalidation_map::RelativeSelectorInnerDependencyCollector as selectors::visitor::SelectorVisitor>::visit_relative_selector_list]

Comment 2

[Daniel Holbert [:dholbert]]

Attachment: testcase 1 (warning, triggers a content-process crash)

Comment 3

[Daniel Holbert [:dholbert]]

dshin, maybe you could take a look, since :has is involved here? (obviously :has isn't associated with the older crash volume, but it's at least relevant in the attached testcase that's known to trigger this current nightly)

Comment 4

[David Shin[:dshin]]

Ah, this is a dupe of bug 1860373.

Comment 5

[David Shin[:dshin]]

(Argh, wrong dupe target)