435895 - Crash [nsStyleSet::EndReconstruct] with toggling iframe display and resize event handler doing reload

Status: RESOLVED DUPLICATE of bug 462392

(Core :: DOM: UI Events & Focus Handling, defect)

Description

[Martijn Wargers (dead)]

Attachment: testcase

See testcase, which can crash current trunk builds real soon, or it can took forever.
It seems that minimizing Firefox to the task bar speeds up the crash.
Also, in a debug build, the crash seems to occur easier.

The crash seems somehow related to the resize event handler, which apparently fires sometimes for some reason, so that's why I'm filing this under Core->Event Handling.

http://crash-stats.mozilla.com/report/index/286ec330-2bf7-11dd-a9cb-001cc4e2bf68?p=1
0  	xul.dll  	nsStyleSet::EndReconstruct  	 mozilla/layout/style/nsStyleSet.cpp:142
1 	xul.dll 	nsCSSFrameConstructor::RebuildAllStyleData 	mozilla/layout/base/nsCSSFrameConstructor.cpp:13430
2 	xul.dll 	nsLocation::Reload 	mozilla/dom/src/base/nsLocation.cpp:895
3 	xul.dll 	NS_InvokeByIndex_P 	mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:101
4 	xul.dll 	XPCWrappedNative::CallMethod 	mozilla/js/src/xpconnect/src/xpcwrappednative.cpp:2388

Comment 1

[Martijn Wargers (dead)]

The testcase iframe document consists of this:
<script>
window.addEventListener('resize', function(e) {window.location.reload() }, true);

function toggleIframe(){
var x=top.document.getElementById('content');
x.style.display = x.style.display == 'none' ? x.style.display = '' : x.style.display = 'none';
setTimeout(toggleIframe,100);
}
setTimeout(toggleIframe,100);
</script>

Comment 2

[Olli Pettay [:smaug][[e-mail]]]

So far no luck with reproducing on Linux.

Comment 3

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

Bug 462392 might be a more-reproducable variant.