1865498 - Crash in [@ mozilla::nsDisplayList::~nsDisplayList]

Status: NEW

(Core :: Layout, defect)

Description

[BugBot [:suhaib / :marco/ :calixte]]

Crash report: https://crash-stats.mozilla.org/report/index/3a77a518-3277-47f5-83bc-7afd00231104

MOZ_CRASH Reason: MOZ_RELEASE_ASSERT(IsEmpty()) (Nonempty list left over?)

Top 10 frames of crashing thread:

0  xul.dll  AnnotateMozCrashReason  mfbt/Assertions.h:46
0  xul.dll  mozilla::nsDisplayList::~nsDisplayList  layout/painting/nsDisplayList.h:3017
0  xul.dll  mozilla::nsDisplayListCollection::~nsDisplayListCollection  layout/painting/nsDisplayList.h:3494
0  xul.dll  nsIFrame::BuildDisplayListForChild  layout/generic/nsIFrame.cpp:4318
1  xul.dll  DisplayLine  layout/generic/nsBlockFrame.cpp:7335
1  xul.dll  nsBlockFrame::BuildDisplayList  layout/generic/nsBlockFrame.cpp:7492
2  xul.dll  nsIFrame::BuildDisplayListForSimpleChild  layout/generic/nsIFrame.cpp:3974
2  xul.dll  nsIFrame::BuildDisplayListForChild  layout/generic/nsIFrame.cpp:4078
3  xul.dll  DisplayLine  layout/generic/nsBlockFrame.cpp:7335
3  xul.dll  nsBlockFrame::BuildDisplayList  layout/generic/nsBlockFrame.cpp:7492

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

• First crash report: 2023-09-18
• Process type: Multiple distinct types
• Is startup crash: No
• Has user comments: No
• Is null crash: No

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::Layout' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.