1997819 - Hit MOZ_CRASH(<ul class="astro-3ii7xxms"> (0x7fff9f2243a0) has still dirty bit true or animation-only dirty bit false) at servo/ports/geckolib/glue.rs:7206

Status: NEW

(Core :: CSS Parsing and Computation, defect)

Description

[Tyson Smith [:tsmith]]

Found with m-c 20251031-7481c44fceaf (--enable-debug)

This was found by visiting a live website with a debug build. A Pernosco session is available here: https://pernos.co/debug/qKmwckBwUm_NnFZPuGUwIQ/index.html

STR:

• Launch browser and visit site

This issue was triggered by visiting https://chiron-fonts.github.io/technical-details/notes-on-em-dash-and-ellipsis/.

Hit MOZ_CRASH(<ul class="astro-3ii7xxms"> (0x7fff9f2243a0) has still dirty bit true or animation-only dirty bit false) at servo/ports/geckolib/glue.rs:7206

0|0|libxul.so|RustMozCrash|hg:hg.mozilla.org/mozilla-central:mozglue/static/rust/wrappers.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|18|0x2a
0|1|libxul.so|mozglue_static::panic_hook|hg:hg.mozilla.org/mozilla-central:mozglue/static/rust/lib.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|99|0xef
0|2|libxul.so|core::ops::function::Fn::call|/builds/worker/fetches/rustc/lib/rustlib/src/rust/library/core/src/ops/function.rs|79|0xb
0|3|libxul.so|std::panicking::rust_panic_with_hook|git:github.com/rust-lang/rust:library/std/src/panicking.rs:05f9846f893b09a1be1fc8560e33fc3c815cfecb|839|0x16f
0|4|libxul.so|std::panicking::begin_panic_handler::{{closure}}|git:github.com/rust-lang/rust:library/std/src/panicking.rs:05f9846f893b09a1be1fc8560e33fc3c815cfecb|704|0x99
0|5|libxul.so|std::sys::backtrace::__rust_end_short_backtrace|git:github.com/rust-lang/rust:library/std/src/sys/backtrace.rs:05f9846f893b09a1be1fc8560e33fc3c815cfecb|168|0x8
0|6|libxul.so|rust_begin_unwind|git:github.com/rust-lang/rust:library/std/src/panicking.rs:05f9846f893b09a1be1fc8560e33fc3c815cfecb|695|0x1c
0|7|libxul.so|core::panicking::panic_fmt|git:github.com/rust-lang/rust:library/core/src/panicking.rs:05f9846f893b09a1be1fc8560e33fc3c815cfecb|75|0x1f
0|8|libxul.so|geckoservo::glue::Servo_AssertTreeIsClean::assert_subtree_is_clean|hg:hg.mozilla.org/mozilla-central:servo/ports/geckolib/glue.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7206|0x154
0|9|libxul.so|geckoservo::glue::Servo_AssertTreeIsClean::assert_subtree_is_clean|hg:hg.mozilla.org/mozilla-central:servo/ports/geckolib/glue.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7215|0x9c
0|10|libxul.so|geckoservo::glue::Servo_AssertTreeIsClean::assert_subtree_is_clean|hg:hg.mozilla.org/mozilla-central:servo/ports/geckolib/glue.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7215|0x9c
0|11|libxul.so|geckoservo::glue::Servo_AssertTreeIsClean::assert_subtree_is_clean|hg:hg.mozilla.org/mozilla-central:servo/ports/geckolib/glue.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7215|0x9c
0|12|libxul.so|geckoservo::glue::Servo_AssertTreeIsClean::assert_subtree_is_clean|hg:hg.mozilla.org/mozilla-central:servo/ports/geckolib/glue.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7215|0x9c
0|13|libxul.so|geckoservo::glue::Servo_AssertTreeIsClean::assert_subtree_is_clean|hg:hg.mozilla.org/mozilla-central:servo/ports/geckolib/glue.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7215|0x9c
0|14|libxul.so|geckoservo::glue::Servo_AssertTreeIsClean::assert_subtree_is_clean|hg:hg.mozilla.org/mozilla-central:servo/ports/geckolib/glue.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7215|0x9c
0|15|libxul.so|geckoservo::glue::Servo_AssertTreeIsClean::assert_subtree_is_clean|hg:hg.mozilla.org/mozilla-central:servo/ports/geckolib/glue.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7215|0x9c
0|16|libxul.so|geckoservo::glue::Servo_AssertTreeIsClean::assert_subtree_is_clean|hg:hg.mozilla.org/mozilla-central:servo/ports/geckolib/glue.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7215|0x9c
0|17|libxul.so|geckoservo::glue::Servo_AssertTreeIsClean::assert_subtree_is_clean|hg:hg.mozilla.org/mozilla-central:servo/ports/geckolib/glue.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7215|0x9c
0|18|libxul.so|geckoservo::glue::Servo_AssertTreeIsClean::assert_subtree_is_clean|hg:hg.mozilla.org/mozilla-central:servo/ports/geckolib/glue.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7215|0x9c
0|19|libxul.so|geckoservo::glue::Servo_AssertTreeIsClean::assert_subtree_is_clean|hg:hg.mozilla.org/mozilla-central:servo/ports/geckolib/glue.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7215|0x9c
0|20|libxul.so|Servo_AssertTreeIsClean|hg:hg.mozilla.org/mozilla-central:servo/ports/geckolib/glue.rs:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7220|0x120
0|21|libxul.so|mozilla::ServoStyleSet::AssertTreeIsClean()|hg:hg.mozilla.org/mozilla-central:layout/style/ServoStyleSet.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|1115|0x64
0|22|libxul.so|mozilla::RestyleManager::DoProcessPendingRestyles(mozilla::ServoTraversalFlags)|hg:hg.mozilla.org/mozilla-central:layout/style/RestyleManager.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|3354|0x9cf
0|23|libxul.so|mozilla::RestyleManager::ProcessPendingRestyles()|hg:hg.mozilla.org/mozilla-central:layout/style/RestyleManager.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|3390|0xc1
0|24|libxul.so|mozilla::PresShell::DoFlushPendingNotifications(mozilla::ChangesToFlush)|hg:hg.mozilla.org/mozilla-central:layout/base/PresShell.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|4467|0x72e
0|25|libxul.so|mozilla::dom::Document::FlushPendingNotifications(mozilla::ChangesToFlush)|hg:hg.mozilla.org/mozilla-central:dom/base/Document.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|11664|0x269
0|26|libxul.so|mozilla::PresShell::ScrollContentIntoView(nsIContent*, mozilla::ScrollAxis, mozilla::ScrollAxis, mozilla::ScrollFlags)|hg:hg.mozilla.org/mozilla-central:layout/base/PresShell.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|3607|0x391
0|27|libxul.so|nsFocusManager::ScrollIntoView(mozilla::PresShell*, nsIContent*, unsigned int)|hg:hg.mozilla.org/mozilla-central:dom/base/nsFocusManager.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|3109|0x5a
0|28|libxul.so|nsFocusManager::Focus(nsPIDOMWindowOuter*, mozilla::dom::Element*, unsigned int, bool, bool, bool, bool, unsigned long, mozilla::Maybe<nsFocusManager::BlurredElementInfo> const&)|hg:hg.mozilla.org/mozilla-central:dom/base/nsFocusManager.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|2864|0xbab
0|29|libxul.so|nsFocusManager::SetFocusInner(mozilla::dom::Element*, int, bool, bool)|hg:hg.mozilla.org/mozilla-central:dom/base/nsFocusManager.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|1944|0xf30
0|30|libxul.so|nsFocusManager::MoveFocus(mozIDOMWindowProxy*, mozilla::dom::Element*, unsigned int, unsigned int, mozilla::dom::Element**)|hg:hg.mozilla.org/mozilla-central:dom/base/nsFocusManager.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|559|0x23b
0|31|libxul.so|mozilla::EventStateManager::PostHandleKeyboardEvent(mozilla::WidgetKeyboardEvent*, nsIFrame*, nsEventStatus&)|hg:hg.mozilla.org/mozilla-central:dom/events/EventStateManager.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|3940|0x35a
0|32|libxul.so|mozilla::EventStateManager::PostHandleEvent(nsPresContext*, mozilla::WidgetEvent*, nsIFrame*, nsEventStatus*, nsIContent*)|hg:hg.mozilla.org/mozilla-central:dom/events/EventStateManager.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|4648|0xa30
0|33|libxul.so|mozilla::PresShell::EventHandler::DispatchEvent(mozilla::EventStateManager*, mozilla::WidgetEvent*, bool, nsEventStatus*, nsIContent*)|hg:hg.mozilla.org/mozilla-central:layout/base/PresShell.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|9366|0x431
0|34|libxul.so|mozilla::PresShell::EventHandler::HandleEventWithCurrentEventInfo(mozilla::WidgetEvent*, nsEventStatus*, bool, nsIContent*)|hg:hg.mozilla.org/mozilla-central:layout/base/PresShell.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|9245|0x345
0|35|libxul.so|mozilla::PresShell::EventHandler::HandleEventAtFocusedContent(mozilla::WidgetGUIEvent*, nsEventStatus*)|hg:hg.mozilla.org/mozilla-central:layout/base/PresShell.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|8995|0x13d
0|36|libxul.so|mozilla::PresShell::EventHandler::HandleEvent(AutoWeakFrame&, mozilla::WidgetGUIEvent*, bool, nsEventStatus*)|hg:hg.mozilla.org/mozilla-central:layout/base/PresShell.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7689|0x237
0|37|libxul.so|mozilla::PresShell::HandleEvent(nsIFrame*, mozilla::WidgetGUIEvent*, bool, nsEventStatus*)|hg:hg.mozilla.org/mozilla-central:layout/base/PresShell.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|7484|0x467
0|38|libxul.so|nsViewManager::DispatchEvent(mozilla::WidgetGUIEvent*, nsView*, nsEventStatus*)|hg:hg.mozilla.org/mozilla-central:view/nsViewManager.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|598|0x183
0|39|libxul.so|nsView::HandleEvent(mozilla::WidgetGUIEvent*, bool)|hg:hg.mozilla.org/mozilla-central:view/nsView.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|793|0xc6
0|40|libxul.so|mozilla::widget::PuppetWidget::DispatchEvent(mozilla::WidgetGUIEvent*, nsEventStatus&)|hg:hg.mozilla.org/mozilla-central:widget/PuppetWidget.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|308|0x1f3
0|41|libxul.so|mozilla::widget::TextEventDispatcher::DispatchInputEvent(nsIWidget*, mozilla::WidgetInputEvent&, nsEventStatus&)|hg:hg.mozilla.org/mozilla-central:widget/TextEventDispatcher.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|293|0xac
0|42|libxul.so|mozilla::widget::TextEventDispatcher::DispatchKeyboardEventInternal(mozilla::EventMessage, mozilla::WidgetKeyboardEvent const&, nsEventStatus&, void*, unsigned int, bool)|hg:hg.mozilla.org/mozilla-central:widget/TextEventDispatcher.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|781|0x7ec
0|43|libxul.so|mozilla::widget::TextEventDispatcher::MaybeDispatchKeypressEvents(mozilla::WidgetKeyboardEvent const&, nsEventStatus&, void*, bool)|hg:hg.mozilla.org/mozilla-central:widget/TextEventDispatcher.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|811|0x87
0|44|libxul.so|mozilla::TextInputProcessor::KeydownInternal(mozilla::WidgetKeyboardEvent const&, unsigned int, bool, unsigned int&)|hg:hg.mozilla.org/mozilla-central:dom/base/TextInputProcessor.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|1171|0x3d4
0|45|libxul.so|NS_InvokeByIndex|||0x8d
0|46|libxul.so|CallMethodHelper::Call()|hg:hg.mozilla.org/mozilla-central:js/xpconnect/src/XPCWrappedNative.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|1173|0x24d
0|47|libxul.so|XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode)|hg:hg.mozilla.org/mozilla-central:js/xpconnect/src/XPCWrappedNative.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|1119|0x97
0|48|libxul.so|XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*)|hg:hg.mozilla.org/mozilla-central:js/xpconnect/src/XPCWrappedNativeJSOps.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|966|0x368
0|49|||||
0|50|||||
0|51|||||
0|52|||||
0|53|||||
0|54|||||
0|55|||||
0|56|||||
0|57|||||
0|58|||||
0|59|||||
0|60|libxul.so|js::jit::MaybeEnterJit(JSContext*, js::RunState&)|hg:hg.mozilla.org/mozilla-central:js/src/jit/Jit.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|255|0x49b
0|61|libxul.so|js::RunScript(JSContext*, js::RunState&)|hg:hg.mozilla.org/mozilla-central:js/src/vm/Interpreter.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|450|0x3c1
0|62|libxul.so|js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)|hg:hg.mozilla.org/mozilla-central:js/src/vm/Interpreter.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|618|0x2e5
0|63|libxul.so|js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason)|hg:hg.mozilla.org/mozilla-central:js/src/vm/Interpreter.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|685|0x12c
0|64|libxul.so|JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)|hg:hg.mozilla.org/mozilla-central:js/src/vm/CallAndConstruct.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|119|0x20b
0|65|libxul.so|mozilla::dom::MessageListener::ReceiveMessage(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::dom::ReceiveMessageArgument const&, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&)|s3:gecko-generated-sources:d01fd731b0a2dd12291b621774d88619c1a60454bd2760958e3a1055b2740665edb6c236dbdb2666091892c4f2013157a68f155e2aa02d601f037ad66b6bad8f/dom/bindings/MessageManagerBinding.cpp:|5756|0x3fa
0|66|libxul.so|mozilla::dom::MessageListener::ReceiveMessage(mozilla::dom::ReceiveMessageArgument const&, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObjectBase::ExceptionHandling, JS::Realm*)|s3:gecko-generated-sources:9b2aa2670f267a2aefbcacbab9744eb3c967b72481e28f8725f4ed272f5c42f1d186cbd276a0dd4a5ddf6a57cf2273b50a8620351bb9e78546b89866bf8ede5b/dist/include/mozilla/dom/MessageManagerBinding.h:|579|0xc0
0|67|libxul.so|mozilla::dom::JSActor::CallReceiveMessage(JSContext*, mozilla::dom::JSActorMessageMeta const&, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&)|hg:hg.mozilla.org/mozilla-central:dom/ipc/jsactor/JSActor.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|286|0x247
0|68|libxul.so|mozilla::dom::JSActor::ReceiveQuery(JSContext*, mozilla::dom::JSActorMessageMeta const&, JS::Handle<JS::Value>, mozilla::ErrorResult&)|hg:hg.mozilla.org/mozilla-central:dom/ipc/jsactor/JSActor.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|323|0x246
0|69|libxul.so|mozilla::dom::JSActorManager::ReceiveRawMessage(mozilla::dom::JSActorMessageMeta const&, std::unique_ptr<mozilla::dom::ipc::StructuredCloneData, std::default_delete<mozilla::dom::ipc::StructuredCloneData> >, std::unique_ptr<mozilla::dom::ipc::StructuredCloneData, std::default_delete<mozilla::dom::ipc::StructuredCloneData> >)|hg:hg.mozilla.org/mozilla-central:dom/ipc/jsactor/JSActorManager.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|230|0x5ac
0|70|libxul.so|mozilla::dom::WindowGlobalChild::RecvRawMessage(mozilla::dom::JSActorMessageMeta const&, std::unique_ptr<mozilla::dom::ClonedMessageData, std::default_delete<mozilla::dom::ClonedMessageData> > const&, std::unique_ptr<mozilla::dom::ClonedMessageData, std::default_delete<mozilla::dom::ClonedMessageData> > const&)|hg:hg.mozilla.org/mozilla-central:dom/ipc/WindowGlobalChild.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|584|0x299
0|71|libxul.so|mozilla::dom::PWindowGlobalChild::OnMessageReceived(IPC::Message const&)|s3:gecko-generated-sources:2d7a9108bace72ca1553c5e6303e27826eba790eb14e1a8c76907418dc958b57655b27486ec957ec40914565d268f143d824e91a2d956b34424f7320bbf5cd31/ipc/ipdl/PWindowGlobalChild.cpp:|1918|0xc45
0|72|libxul.so|mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)|s3:gecko-generated-sources:27dc071255cddad3651b2cef09b4e4b1a0a8cadfcd8bdab5336ac444b5b56764558d648f9696b032ef8c0adb2956e8fdc411ebfdb1c56e11d21311a7e2524834/ipc/ipdl/PContentChild.cpp:|8477|0x5e9
0|73|libxul.so|mozilla::ipc::MessageChannel::DispatchAsyncMessage(mozilla::ipc::ActorLifecycleProxy*, IPC::Message const&)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|1794|0x128
0|74|libxul.so|mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, std::unique_ptr<IPC::Message, std::default_delete<IPC::Message> >)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|1720|0x250
0|75|libxul.so|mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|1509|0x178
0|76|libxul.so|mozilla::ipc::MessageChannel::MessageTask::Run()|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessageChannel.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|1611|0xcd
0|77|libxul.so|mozilla::RunnableTask::Run()|hg:hg.mozilla.org/mozilla-central:xpcom/threads/TaskController.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|705|0x17
0|78|libxul.so|mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/TaskController.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|1325|0x597
0|79|libxul.so|mozilla::TaskController::ExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/TaskController.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|1148|0x57
0|80|libxul.so|mozilla::TaskController::ProcessPendingMTTask(bool)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/TaskController.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|641|0x65
0|81|libxul.so|mozilla::detail::RunnableFunction<mozilla::TaskController::TaskController()::$_1>::Run()|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.h:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|549|0x19
0|82|libxul.so|nsThread::ProcessNextEvent(bool, bool*)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThread.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|1166|0x5aa
0|83|libxul.so|NS_ProcessNextEvent(nsIThread*, bool)|hg:hg.mozilla.org/mozilla-central:xpcom/threads/nsThreadUtils.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|461|0x4f
0|84|libxul.so|mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessagePump.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|107|0x125
0|85|libxul.so|MessageLoop::Run()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|343|0x61
0|86|libxul.so|nsBaseAppShell::Run()|hg:hg.mozilla.org/mozilla-central:widget/nsBaseAppShell.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|152|0x28
0|87|libxul.so|nsAppShell::Run()|hg:hg.mozilla.org/mozilla-central:widget/gtk/nsAppShell.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|470|0x114
0|88|libxul.so|XRE_RunAppShell()|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsEmbedFunctions.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|656|0x6b
0|89|libxul.so|mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)|hg:hg.mozilla.org/mozilla-central:ipc/glue/MessagePump.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|235|0x3c
0|90|libxul.so|MessageLoop::Run()|hg:hg.mozilla.org/mozilla-central:ipc/chromium/src/base/message_loop.cc:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|343|0x61
0|91|libxul.so|XRE_InitChildProcess(int, char**, XREChildData const*)|hg:hg.mozilla.org/mozilla-central:toolkit/xre/nsEmbedFunctions.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|594|0xa21
0|92|firefox-bin|main|hg:hg.mozilla.org/mozilla-central:browser/app/nsBrowserApp.cpp:7481c44fceafe1f0912e0d0cb08181ca65e28ce7|465|0x21c

Comment 1

[David Shin[:dshin]]

Attachment: Somewhat reduced testcase

summary:is(:hover, :focus-visible) {
  color: var(--sl-color-accent-high);
}

summary {
  &:is(:hover, :focus-visible) + ul > li { 
    border-inline-start-color: var(--sl-color-accent-high);
  }
}

Last two rules, manually simplified and added back, seems pivotal to the crash.
You need to hover over some items to trigger the crash.