1940011 - Crash in [@ style::stylesheets::rules_iterator::RulesIterator<T>::children]

Status: NEW

(Core :: CSS Parsing and Computation, defect, P3)

Description

[BugBot [:suhaib / :marco]]

Crash report: https://crash-stats.mozilla.org/report/index/abffdb9f-4a2f-4159-a465-8f6cb0240909

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0  xul.dll  style::stylesheets::rules_iterator::RulesIterator<style::stylesheets::rules_iterator::EffectiveRules>::children  third_party/rust/smallvec/src/lib.rs:1124
0  xul.dll  style::stylist::CascadeData::add_rule_list<style::gecko::data::GeckoStyleSheet>  servo/components/style/stylist.rs:3500
1  xul.dll  style::stylist::CascadeData::add_stylesheet<style::gecko::data::GeckoStyleSheet>  servo/components/style/stylist.rs:3725
2  xul.dll  style::stylist::impl$47::rebuild::closure$0  servo/components/style/stylist.rs:2776
2  xul.dll  style::stylesheet_set::SheetCollectionFlusher<style::gecko::data::GeckoStyleSheet>::each  servo/components/style/stylesheet_set.rs:242
2  xul.dll  style::stylist::CascadeData::rebuild<style::gecko::data::GeckoStyleSheet>  servo/components/style/stylist.rs:2775
3  xul.dll  style::stylist::DocumentCascadeData::rebuild  servo/components/style/stylist.rs:464
3  xul.dll  style::stylist::Stylist::flush  servo/components/style/stylist.rs:913
3  xul.dll  style::gecko::data::PerDocumentStyleDataImpl::flush_stylesheets  servo/components/style/gecko/data.rs:212
3  xul.dll  geckoservo::glue::Servo_StyleSet_FlushStyleSheets  servo/ports/geckolib/glue.rs:2040

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

• First crash report: 2024-12-22
• Process type: Content
• Is startup crash: No
• Has user comments: No
• Is null crash: Yes - 1 out of 3 crashes happened on null or near null memory address

Comment 1

[BugBot [:suhaib / :marco]]

The Bugbug bot thinks this bug should belong to the 'Core::CSS Parsing and Computation' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[BugBot [:suhaib / :marco]]

The severity field is not set for this bug.
:emilio, could you have a look please?

For more information, please visit BugBot documentation.

Comment 3

[Emilio Cobos Álvarez [:emilio]]

Given the extremely low volume and the unaligned crash address this smells a lot like bad hardware.