343206 - Crash with floated generated content [@ nsCachedStyleData::GetStyleData] called from nsRuleNode::ComputeDisplayData

Status: RESOLVED WORKSFORME

(Core :: Layout, defect)

Description

[Jesse Ruderman]

Loading the testcase makes Firefox trunk crash on Mac.  In a debug build, I see this assertion before the crash:

###!!! ASSERTION: Must have parent context for generated content: '!generatedContent || parentContext', file mozilla/layout/style/nsRuleNode.cpp, line 2628

ispiked found this bug on Linux; I only helped make a reduced testcase.

Comment 1

[Jesse Ruderman]

Attachment: small testcase

Comment 2

[Jesse Ruderman]

Attachment: stack trace (mac debug / gdb)

Comment 3

[Bob Clary [:bc] (inactive)]

this appears to be the most common crash in the test run for random classes for 20060629 windows firefox trunk.

Comment 4

[Martijn Wargers (dead)]

*** Bug 343608 has been marked as a duplicate of this bug. ***

Comment 5

[Martijn Wargers (dead)]

The duplicate bug 343608 has a regression range, pointing to bug 332333.

Comment 6

[Jesse Ruderman]

Nominating because this crash gets in the way of my testing.

Comment 7

[Jesse Ruderman]

WFM:

* 2006-08-11 Mac trunk nightly crashes.
* 2006-08-12 Mac trunk nightly does not crash.
* A reasonably current Mac trunk debug build does not crash or assert.

Perhaps this was fixed by bz's patch for bug 334602?  (That bug happens to have a bug number that is a permutation of this one.)

Comment 8

[Boris Zbarsky [:bzbarsky]]

Yeah, this got fixed by the patch for bug 334602.  The permutation is a random coincidence.  ;)

Comment 9

[[e-mail]]

(In reply to comment #8)
>The permutation is a random coincidence.  ;)
As opposed to a deliberate coincidence? :-P

Comment 10

[Jesse Ruderman]

Crashtest checked in.