387213 - "ASSERTION: cannot call on a dirty frame not currently being reflowed" with position: fixed and overflow: scroll

Status: RESOLVED WORKSFORME

(Core :: Layout, defect)

Description

[Jesse Ruderman]

Attachment: testcase

Loading the testcase triggers:

###!!! ASSERTION: cannot call on a dirty frame not currently being reflowed: '!NS_SUBTREE_DIRTY(this) || (GetStateBits() & NS_FRAME_IN_REFLOW)', 
file mozilla/layout/generic/nsFrame.cpp, line 739

This is the same assertion as in bug 366021 and bug 369563, but this bug has a much simpler testcase.

Comment 1

[Alex Vincent [:WeirdAl]]

Does the stack trace resemble either one of the other two bugs?

Comment 2

[Jesse Ruderman]

Attachment: stack trace

Comment 3

[Jesse Ruderman]

The stack trace is similar to the stack trace in bug 366021.

Comment 4

[Eli Friedman]

The issue here is that the child fixed-pos frame is somehow ending up on the fixed-pos frame list before the parent fixed-pos frame.  Looks like a frame construction bug.  (Note that this bug does actually have visual effects: the child fixed-pos frame isn't getting positioned in the right place.)

Comment 5

[Daniel Holbert [:dholbert]]

The testcases on Bug 388058 trigger this assertion as well. 
(see https://bugzilla.mozilla.org/show_bug.cgi?id=388058#c10)

Comment 6

[Aakash Desai [:aakashd]]

I'm still seeing this whenever I perform the steps to reproduce on OSX:

1. Go to www.lastfm.com
2. use any band in the "artistSearch" element field and click on go.
3. Notice the assertions on the resulting page.

.. with the following build ids:

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2a1pre) Gecko/20090720 Minefield/3.6a1pre ID:20090720081030

and

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1pre) Gecko/20090720 Shiretoko/3.5.1pre ID:20090720080943


There's a number of bugs associated to this bug, so I'm going to update the oldest bug.

I'm talking about bug 448040 and bug 419289 as the other ones found.

Comment 7

[Jesse Ruderman]

WFM with the testcase in comment 0, and with the steps in comment 6.

Comment 8

[Jesse Ruderman]

Crashtest: http://hg.mozilla.org/mozilla-central/rev/4a4e6dea49bd