1954230 - Crash in [@ mozilla::dom::ViewTimeline::ComputeOffsets]

Status: NEW

(Core :: DOM: Animation, defect)

Description

[Andrew McCreight [:mccr8]]

Crash report: https://crash-stats.mozilla.org/report/index/ceef2fe6-8cfe-4051-b1cb-76acd0250313

Reason:

EXC_BAD_ACCESS / KERN_INVALID_ADDRESS

Top 10 frames:

0  XUL  mozilla::dom::ViewTimeline::ComputeOffsets(mozilla::ScrollContainerFrame cons...  dom/animation/ViewTimeline.cpp:78
1  XUL  mozilla::dom::ScrollTimeline::GetCurrentTimeAsDuration() const  dom/animation/ScrollTimeline.cpp:139
2  XUL  mozilla::dom::Animation::GetCurrentTimeForHoldTime(mozilla::dom::Nullable<moz...  dom/animation/Animation.cpp:412
2  XUL  mozilla::dom::Animation::GetCurrentTimeAsDuration() const  dom/animation/Animation.h:128
2  XUL  mozilla::dom::Animation::PlayState() const  dom/animation/Animation.cpp:581
3  XUL  mozilla::dom::Animation::Cancel(mozilla::PostRestyleMode)  dom/animation/Animation.cpp:635
4  XUL  mozilla::dom::CSSAnimation::CancelFromStyle(mozilla::PostRestyleMode)  dom/animation/CSSAnimation.h:87
4  XUL  mozilla::AnimationCollection<mozilla::dom::CSSAnimation>::~AnimationCollection()  layout/style/AnimationCollection.cpp:28
5  XUL  mozilla::AnimationCollection<mozilla::dom::CSSAnimation>::~AnimationCollection()  layout/style/AnimationCollection.cpp:19
5  XUL  mozilla::DefaultDelete<mozilla::AnimationCollection<mozilla::dom::CSSAnimatio...  mfbt/UniquePtr.h:460

Null crashes on Nightly, from two different install times. It doesn't look like the code near the top of the stack changed recently, so maybe it is a fluke.

Comment 1

[Tyson Smith [:tsmith]]

This has also been reported by live site testing. A Pernosco session is available here: https://pernos.co/debug/Hwf9CXArGgevGwi40zHbjA/index.html