487856 - Crash [@ nsDisplayBackground::IsOpaque(nsDisplayListBuilder*) ]

Status: RESOLVED FIXED

(Core :: Layout, defect)

Description

[Florian Quèze [:florian]]

I just saw this stack (that doesn't look corrupted) and it seems to be in very recently added code in bug 482689.
I have no idea about the steps to reproduce.

518 bottomLayer.mImage.mRequest->GetImage(getter_AddRefs(container));
519
520 PRUint32 nframes;
521 container->GetNumFrames(&nframes); 

The crash happened on line 521. Is it possible that container is null after GetImage?

Comment 1

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

I would have thought this was fixed by http://hg.mozilla.org/mozilla-central/rev/8d5495c3449e

Was your build from in the short interval between the original landing and the bustage fix?
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=683b00c3d1d1&tochange=8d5495c3449e

Comment 2

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

Given the code you're quoting... which was only in the tree in that interval, I'm going to say this was fixed by the changeset cited in comment 1.