1875970 - Hit MOZ_CRASH(calc(2rem + env(safe-area-inset-left) + env(safe-area-inset-right)/2)) at servo/components/style/custom_properties.rs:525

Status: RESOLVED DUPLICATE of bug 1875673

(Core :: CSS Parsing and Computation, defect)

Description

[Tyson Smith [:tsmith]]

Found with m-c 20240118-842adcf822fc (--enable-debug)

This was found by visiting a live website with a debug build.

This has been triggered by visiting:

• https://www.bitstamp.net/

Hit MOZ_CRASH(calc(2rem + env(safe-area-inset-left) + env(safe-area-inset-right)/2)) at servo/components/style/custom_properties.rs:525

#0 0x7f46eff46f17 in MOZ_Crash(char const*, int, char const*) /builds/worker/workspace/obj-build/dist/include/mozilla/Assertions.h:301:3
#1 0x7f46eff46f17 in RustMozCrash /builds/worker/checkouts/gecko/mozglue/static/rust/wrappers.cpp:18:3
#2 0x7f46eff46e5d in mozglue_static::panic_hook::hf6112c1d42873da6 /builds/worker/checkouts/gecko/mozglue/static/rust/lib.rs:96:9
#3 0x7f46eff44a06 in core::ops::function::Fn::call::h856648461c30ce5d /rustc/82e1608dfa6e0b5569232559e3d385fea5a93112/library/core/src/ops/function.rs:79:5
#4 0x7f46f299d9f7 in _$LT$alloc..boxed..Box$LT$F$C$A$GT$$u20$as$u20$core..ops..function..Fn$LT$Args$GT$$GT$::call::h1f8f335eaa9cfaee /rustc/82e1608dfa6e0b5569232559e3d385fea5a93112/library/alloc/src/boxed.rs:2021:9
#5 0x7f46f299d9f7 in std::panicking::rust_panic_with_hook::h2b5517d590cab22e /rustc/82e1608dfa6e0b5569232559e3d385fea5a93112/library/std/src/panicking.rs:783:13
#6 0x7f46f299d74d in std::panicking::begin_panic_handler::_$u7b$$u7b$closure$u7d$$u7d$::h233112c06e0ef43e /rustc/82e1608dfa6e0b5569232559e3d385fea5a93112/library/std/src/panicking.rs:657:13
#7 0x7f46f299ad05 in std::sys_common::backtrace::__rust_end_short_backtrace::h6e893f24d7ebbff8 /rustc/82e1608dfa6e0b5569232559e3d385fea5a93112/library/std/src/sys_common/backtrace.rs:170:18
#8 0x7f46f299d4b1 in rust_begin_unwind /rustc/82e1608dfa6e0b5569232559e3d385fea5a93112/library/std/src/panicking.rs:645:5
#9 0x7f46f29e9d34 in core::panicking::panic_fmt::hbf0e066aabfa482c /rustc/82e1608dfa6e0b5569232559e3d385fea5a93112/library/core/src/panicking.rs:72:14
#10 0x7f46f1a9b984 in core::panicking::panic_display::h2df254d7bfc5f6dc /rustc/82e1608dfa6e0b5569232559e3d385fea5a93112/library/core/src/panicking.rs:178:5
#11 0x7f46f1f1bdae in style::custom_properties::VariableValue::push_variable::heeceb10717fd0d26 /builds/worker/checkouts/gecko/servo/components/style/custom_properties.rs:525:9
#12 0x7f46f1f24299 in style::custom_properties::substitute_block::_$u7b$$u7b$closure$u7d$$u7d$::hd5cdbca6b096b829 /builds/worker/checkouts/gecko/servo/components/style/custom_properties.rs:1976:25
#13 0x7f46f1e16f4d in cssparser::parser::Parser::parse_entirely::hf4b12f57618e5ade /builds/worker/checkouts/gecko/third_party/rust/cssparser/src/parser.rs:689:22
#14 0x7f46f1dc0e07 in cssparser::parser::parse_nested_block::h038a8bdcd4f4c950 /builds/worker/checkouts/gecko/third_party/rust/cssparser/src/parser.rs:1139:18
#15 0x7f46f1e1a186 in cssparser::parser::Parser::parse_nested_block::h1fb58d619cf140d8 /builds/worker/checkouts/gecko/third_party/rust/cssparser/src/parser.rs:777:9
#16 0x7f46f1f23b21 in style::custom_properties::substitute_block::h71fd3e86ae42b64b /builds/worker/checkouts/gecko/servo/components/style/custom_properties.rs:1913:17
#17 0x7f46f1f24dd1 in style::custom_properties::substitute::hb99fde1baed51024 /builds/worker/checkouts/gecko/servo/components/style/custom_properties.rs:2055:27
#18 0x7f46f20dbc47 in style::properties::UnparsedValue::substitute_variables::h9c90e29d8d9955e4 /builds/worker/checkouts/gecko/servo/components/style/properties/mod.rs:1377:25
#19 0x7f46f20cc3ae in style::properties::cascade::Cascade::substitute_variables_if_needed::hffb9b266d9d23597 /builds/worker/checkouts/gecko/servo/components/style/properties/cascade.rs:684:9
#20 0x7f46f20cd4f3 in style::properties::cascade::Cascade::apply_one_longhand::hf39bbaf2ead9e608 /builds/worker/checkouts/gecko/servo/components/style/properties/cascade.rs:875:31
#21 0x7f46f20cd2e6 in style::properties::cascade::Cascade::apply_non_prioritary_properties::hb9823712db556185 /builds/worker/checkouts/gecko/servo/components/style/properties/cascade.rs:831:13
#22 0x7f46f1589dd0 in style::properties::cascade::apply_declarations::he2457227febbbbfe /builds/worker/checkouts/gecko/servo/components/style/properties/cascade.rs:364:5
#23 0x7f46f15887b9 in style::properties::cascade::cascade_rules::h708e5637e9682e1e /builds/worker/checkouts/gecko/servo/components/style/properties/cascade.rs:197:5
#24 0x7f46f158a59e in style::properties::cascade::cascade::h6f911a3ec34b5d88 /builds/worker/checkouts/gecko/servo/components/style/properties/cascade.rs:81:5
#25 0x7f46f164b42f in style::stylist::Stylist::cascade_style_and_visited::he2f43f3624b5a38a /builds/worker/checkouts/gecko/servo/components/style/stylist.rs:1183:9
#26 0x7f46f15eb6f5 in style::style_resolver::StyleResolverForElement$LT$E$GT$::cascade_style_and_visited::h838975e85148073a /builds/worker/checkouts/gecko/servo/components/style/style_resolver.rs:353:22
#27 0x7f46f15eb205 in style::style_resolver::StyleResolverForElement$LT$E$GT$::cascade_primary_style::h9af9093df4f96b66 /builds/worker/checkouts/gecko/servo/components/style/style_resolver.rs:250:20
#28 0x7f46f15eb564 in style::style_resolver::StyleResolverForElement$LT$E$GT$::resolve_primary_style::hc6dbfd6ce41439d9 /builds/worker/checkouts/gecko/servo/components/style/style_resolver.rs:205:9
#29 0x7f46f15eaaf4 in style::style_resolver::StyleResolverForElement$LT$E$GT$::resolve_style::h64c5be038a53d863 /builds/worker/checkouts/gecko/servo/components/style/style_resolver.rs:266:29
#30 0x7f46f15eb875 in style::style_resolver::StyleResolverForElement$LT$E$GT$::resolve_style_with_default_parents::_$u7b$$u7b$closure$u7d$$u7d$::hd03a117358ef36a2 /builds/worker/checkouts/gecko/servo/components/style/style_resolver.rs:301:13
#31 0x7f46f15e9635 in style::style_resolver::with_default_parent_styles::hbefaf7bb2743c0a8 /builds/worker/checkouts/gecko/servo/components/style/style_resolver.rs:119:5
#32 0x7f46f15eb829 in style::style_resolver::StyleResolverForElement$LT$E$GT$::resolve_style_with_default_parents::h3d9dcc1a1902bcae /builds/worker/checkouts/gecko/servo/components/style/style_resolver.rs:300:9
#33 0x7f46f1663f30 in style::traversal::compute_style::h81d838347a8d9033 /builds/worker/checkouts/gecko/servo/components/style/traversal.rs:615:25
#34 0x7f46f1665e92 in style::traversal::recalc_style_at::h9967e0f0a11324a4 /builds/worker/checkouts/gecko/servo/components/style/traversal.rs:428:13
#35 0x7f46f14b3c4d in _$LT$style..gecko..traversal..RecalcStyleOnly$u20$as$u20$style..traversal..DomTraversal$LT$style..gecko..wrapper..GeckoElement$GT$$GT$::process_preorder::h4561368d83679515 /builds/worker/checkouts/gecko/servo/components/style/gecko/traversal.rs:37:13
#36 0x7f46f1660dff in style::parallel::style_trees::hf5968eba2d36bef3 /builds/worker/checkouts/gecko/servo/components/style/parallel.rs:158:9
#37 0x7f46f1608f01 in style::driver::traverse_dom::_$u7b$$u7b$closure$u7d$$u7d$::hcb907f0d47887a1a /builds/worker/checkouts/gecko/servo/components/style/driver.rs:126:9
#38 0x7f46f1608fbb in style::driver::with_pool_in_place_scope::h0b0270cea5374d73 /builds/worker/checkouts/gecko/servo/components/style/driver.rs:55:9
#39 0x7f46f160884d in style::driver::traverse_dom::h797acecef83cf831 /builds/worker/checkouts/gecko/servo/components/style/driver.rs:111:5
#40 0x7f46f177adaa in geckoservo::glue::traverse_subtree::h32103fe8143abb9a /builds/worker/checkouts/gecko/servo/ports/geckolib/glue.rs:302:5
#41 0x7f46f177b3ff in Servo_TraverseSubtree /builds/worker/checkouts/gecko/servo/ports/geckolib/glue.rs:362:5
#42 0x7f46e6d27bbd in mozilla::ServoStyleSet::StyleDocument(mozilla::ServoTraversalFlags) /builds/worker/checkouts/gecko/layout/style/ServoStyleSet.cpp:814:9
#43 0x7f46e6e40402 in mozilla::RestyleManager::DoProcessPendingRestyles(mozilla::ServoTraversalFlags) /builds/worker/checkouts/gecko/layout/base/RestyleManager.cpp:3242:20
#44 0x7f46e6e0caef in mozilla::RestyleManager::ProcessPendingRestyles() /builds/worker/checkouts/gecko/layout/base/RestyleManager.cpp:3377:3
#45 0x7f46e6e0c206 in mozilla::PresShell::DoFlushPendingNotifications(mozilla::ChangesToFlush) /builds/worker/checkouts/gecko/layout/base/PresShell.cpp:4332:39
#46 0x7f46e0a5c7c6 in mozilla::PresShell::FlushPendingNotifications(mozilla::ChangesToFlush) /builds/worker/workspace/obj-build/dist/include/mozilla/PresShell.h:1474:5
#47 0x7f46e6db6b9b in nsRefreshDriver::TickObserverArray(unsigned int, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:2502:20
#48 0x7f46e6db34f1 in nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:2736:28
#49 0x7f46e6dc0283 in mozilla::RefreshDriverTimer::TickDriver(nsRefreshDriver*, mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:367:13
#50 0x7f46e6dc019a in mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver>>&) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:345:7
#51 0x7f46e6dbffbb in mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:361:5
#52 0x7f46e6dbfb9b in mozilla::VsyncRefreshDriverTimer::RunRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:951:5
#53 0x7f46e6dbe2a6 in mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:861:5
#54 0x7f46e6dbd703 in mozilla::VsyncRefreshDriverTimer::NotifyVsyncOnMainThread(mozilla::VsyncEvent const&) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:758:5
#55 0x7f46e6dbcd15 in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsyncTimerOnMainThread() /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:592:14
#56 0x7f46e6dbc811 in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsync(mozilla::VsyncEvent const&) /builds/worker/checkouts/gecko/layout/base/nsRefreshDriver.cpp:549:9
#57 0x7f46e59b53c0 in mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&) /builds/worker/checkouts/gecko/dom/ipc/VsyncMainChild.cpp:66:15
#58 0x7f46e5f02c1d in mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PVsyncChild.cpp:237:78
#59 0x7f46e5c9df5a in mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&) /builds/worker/workspace/obj-build/ipc/ipdl/PContentChild.cpp:8261:32
#60 0x7f46e59770a7 in mozilla::dom::ContentChild::OnMessageReceived(IPC::Message const&) /builds/worker/checkouts/gecko/dom/ipc/ContentChild.cpp:3702:25
#61 0x7f46df0e0df3 in mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1813:25
#62 0x7f46df0de17c in mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message>>) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1732:9
#63 0x7f46df0de890 in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1525:3
#64 0x7f46df0dfc25 in mozilla::ipc::MessageChannel::MessageTask::Run() /builds/worker/checkouts/gecko/ipc/glue/MessageChannel.cpp:1623:14
#65 0x7f46ddae2f25 in mozilla::RunnableTask::Run() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:578:16
#66 0x7f46ddad52a1 in mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:905:26
#67 0x7f46ddad3249 in mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:728:15
#68 0x7f46ddad3694 in mozilla::TaskController::ProcessPendingMTTask(bool) /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:514:36
#69 0x7f46ddaf4f7a in mozilla::TaskController::TaskController()::$_0::operator()() const /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:232:37
#70 0x7f46ddaf4ef8 in mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::$_0>::Run() /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.h:548:5
#71 0x7f46ddb145fa in nsThread::ProcessNextEvent(bool, bool*) /builds/worker/checkouts/gecko/xpcom/threads/nsThread.cpp:1199:16
#72 0x7f46ddb1cba5 in NS_ProcessNextEvent(nsIThread*, bool) /builds/worker/checkouts/gecko/xpcom/threads/nsThreadUtils.cpp:480:10
#73 0x7f46df0e805c in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:85:21
#74 0x7f46df0e99c9 in mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:268:30
#75 0x7f46def4b137 in MessageLoop::RunInternal() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:370:10
#76 0x7f46def4b0b4 in MessageLoop::RunHandler() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:363:3
#77 0x7f46def4b06f in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:345:3
#78 0x7f46e6871fcb in nsBaseAppShell::Run() /builds/worker/checkouts/gecko/widget/nsBaseAppShell.cpp:148:27
#79 0x7f46e699951a in nsAppShell::Run() /builds/worker/checkouts/gecko/widget/gtk/nsAppShell.cpp:470:33
#80 0x7f46eabe18a6 in XRE_RunAppShell() /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:721:20
#81 0x7f46df0e972a in mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) /builds/worker/checkouts/gecko/ipc/glue/MessagePump.cpp:235:9
#82 0x7f46def4b137 in MessageLoop::RunInternal() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:370:10
#83 0x7f46def4b0b4 in MessageLoop::RunHandler() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:363:3
#84 0x7f46def4b06f in MessageLoop::Run() /builds/worker/checkouts/gecko/ipc/chromium/src/base/message_loop.cc:345:3
#85 0x7f46eabe0c31 in XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/nsEmbedFunctions.cpp:656:34
#86 0x7f46eabf5fb6 in mozilla::BootstrapImpl::XRE_InitChildProcess(int, char**, XREChildData const*) /builds/worker/checkouts/gecko/toolkit/xre/Bootstrap.cpp:67:12
#87 0x5609534cb2b8 in content_process_main(mozilla::Bootstrap*, int, char**) /builds/worker/checkouts/gecko/browser/app/../../ipc/contentproc/plugin-container.cpp:57:28
#88 0x5609534cb559 in main /builds/worker/checkouts/gecko/browser/app/nsBrowserApp.cpp:375:18
#89 0x7f46fd629d8f in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
#90 0x7f46fd629e3f in __libc_start_main csu/../csu/libc-start.c:392:3
#91 0x5609534a1488 in _start (/home/user/workspace/browsers/m-c-20240121204046-fuzzing-noopt-debug/firefox-bin+0xce488) (BuildId: a98ed082a4bb74fc4c48b953821de15e6909390d)

Comment 1

[Bugmon [:jkratzer for issues]]

Bugmon was unable reproduce this issue.
Removing bugmon keyword as no further action possible. Please review the bug and re-add the keyword for further analysis.

Comment 2

[David Shin[:dshin]]

Ah - Instance of bug 1875673 that asserts the same way on debug builds.