412623 - Hang and assertions with positioned objects, keygen and position: fixed

Status: VERIFIED WORKSFORME

(Core :: Layout, defect, P3)

Description

[Martijn Wargers (dead)]

Attachment: testcase

See testcase, which hangs in current trunk build on load.

The regression range is between 2008-01-04 16:00 and 2008-01-04 21:00:
http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=all&branch=HEAD&branchtype=match&dir=&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2008-01-04+16&maxdate=2008-01-04+21&cvsroot=%2Fcvsroot

So I guess a regression from bug 408656, somehow.

I'm also seeing these assertions in a debug build, not sure if they are related:
###!!! ASSERTION: aChild not properly removed from its old child list: '!aChild-
>GetNextSibling() && !aChild->GetPrevSibling()', file c:/mozilla-build/mozilla/w
idget/src/xpwidgets/nsBaseWidget.cpp, line 302
###!!! ASSERTION: aChild not properly removed from its old child list: '!aChild-
>GetNextSibling() && !aChild->GetPrevSibling()', file c:/mozilla-build/mozilla/w
idget/src/xpwidgets/nsBaseWidget.cpp, line 302
###!!! ASSERTION: Bogus state: '!mLastChild->GetNextSibling()', file c:/mozilla-
build/mozilla/widget/src/xpwidgets/nsBaseWidget.cpp, line 309

Comment 1

[Håkan Waara]

Windows-only? WFM on Mac OS X 10.5.1 with a trunk build from today.

Comment 2

[Martijn Wargers (dead)]

I guess so, it's still happening for me on current trunk build.

Comment 3

[Daniel Holbert [:dholbert]]

On Linux, I get 4 copies of this assertion when I load the testcase, using a debug build from today. (No hang, though -- that part's probably windows-specific)

###!!! ASSERTION: nsWindow::SetParent - reparenting a non-child window: 'Not Reached', file /scratch/work/builds/trunk.08-02-27.13-34/mozilla/widget/src/gtk2/nsWindow.cpp, line 524

Comment 4

[Martijn Wargers (dead)]

I'm seeing a new assertion now with the testcase:
###!!! ASSERTION: How did we get here if it's not safe to run scripts?: 'nsConte
ntUtils::IsSafeToRunScript()', file c:/mozilla-build/mozilla/layout/base/nsPresS
hell.cpp, line 5567
That was added in bug 401155.

Comment 5

[Martijn Wargers (dead)]

I'm not getting a hang or any assertion anymore with the testcase, so marking worksforme.

Comment 6

[Damian Shaw [Quan]]

Verified on:

Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1b3pre) Gecko/20081216 Shiretoko/3.1b3pre ID:20081216044608