656416 - Content Process crash when panning an overflow list

Status: RESOLVED DUPLICATE of bug 656041

(Firefox for Android Graveyard :: General, defect)

Description

[Wesley Johnston (:wesj)]

Attachment: Test Page

Scrolling this overflow ul element results in a crash for me on desktop.

#0  0x00007fdcb181cd05 in raise (sig=6)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1  0x00007fdcb1820ab6 in abort () at abort.c:92
#2  0x00007fdcb63eb3ad in mozalloc_abort (
    msg=0x7fff9228d2b0 "###!!! ABORT: nsDisplayScrollLayer should always be defined: 'hasCount', file /home/wes/src/mozilla-central/layout/base/nsDisplayList.cpp, line 1938")
    at /home/wes/src/mozilla-central/memory/mozalloc/mozalloc_abort.cpp:75
#3  0x00007fdcb4a05fb0 in Abort (
    aMsg=0x7fff9228d2b0 "###!!! ABORT: nsDisplayScrollLayer should always be defined: 'hasCount', file /home/wes/src/mozilla-central/layout/base/nsDisplayList.cpp, line 1938") at /home/wes/src/mozilla-central/xpcom/base/nsDebugImpl.cpp:388
#4  0x00007fdcb4a05eb3 in NS_DebugBreak_P (aSeverity=3, 
    aStr=0x7fdcb528ea48 "nsDisplayScrollLayer should always be defined", 
    aExpr=0x7fdcb528ea38 "hasCount", 
    aFile=0x7fdcb528e518 "/home/wes/src/mozilla-central/layout/base/nsDisplayList.cpp", aLine=1938)
    at /home/wes/src/mozilla-central/xpcom/base/nsDebugImpl.cpp:345
#5  0x00007fdcb35f703a in nsDisplayScrollLayer::GetScrollLayerCount (
    this=0x7fdc9d8551a8)
    at /home/wes/src/mozilla-central/layout/base/nsDisplayList.cpp:1938
#6  0x00007fdcb35f6fa2 in nsDisplayScrollLayer::ShouldFlattenAway (
    this=0x7fdc9d8551a8, aBuilder=0x7fff9228fed0)
    at /home/wes/src/mozilla-central/layout/base/nsDisplayList.cpp:1923
#7  0x00007fdcb35f1bd6 in nsDisplayList::ComputeVisibilityForSublist (
    this=0x7fdc9d855378, aBuilder=0x7fff9228fed0, 
    aVisibleRegion=0x7fff9228e960, aListVisibleBounds=..., 
    aAllowVisibleRegionExpansion=..., 
    aContainsRootContentDocBG=@0x7fff9228eb50)
    at /home/wes/src/mozilla-central/layout/base/nsDisplayList.cpp:468
#8  0x00007fdcb35f580a in nsDisplayWrapList::ComputeVisibility (
    this=0x7fdc9d855348, aBuilder=0x7fff9228fed0, 
    aVisibleRegion=0x7fff9228e960, aAllowVisibleRegionExpansion=..., 
    aContainsRootContentDocBG=@0x7fff9228eb50)
    at /home/wes/src/mozilla-central/layout/base/nsDisplayList.cpp:1537
#9  0x00007fdcb35f75b2 in nsDisplayClip::ComputeVisibility (
    this=0x7fdc9d855348, aBuilder=0x7fff9228fed0, 
    aVisibleRegion=0x7fff9228fcb0, aAllowVisibleRegionExpansion=..., 
    aContainsRootContentDocBG=@0x7fff9228eb50)
    at /home/wes/src/mozilla-central/layout/base/nsDisplayList.cpp:2045
#10 0x00007fdcb35f1d56 in nsDisplayList::ComputeVisibilityForSublist (
    this=0x7fff9228fcf0, aBuilder=0x7fff9228fed0, 
    aVisibleRegion=0x7fff9228fcb0, aListVisibleBounds=..., 
    aAllowVisibleRegionExpansion=..., 
    aContainsRootContentDocBG=@0x7fff9228fc1c)
    at /home/wes/src/mozilla-central/layout/base/nsDisplayList.cpp:489
#11 0x00007fdcb35f1823 in nsDisplayList::ComputeVisibilityForRoot (
    this=0x7fff9228fcf0, aBuilder=0x7fff9228fed0, 
    aVisibleRegion=0x7fff9228fcb0)
    at /home/wes/src/mozilla-central/layout/base/nsDisplayList.cpp:419
#12 0x00007fdcb36246f4 in nsLayoutUtils::PaintFrame (aRenderingContext=0x0, 
    aFrame=0x7fdc9d85a020, aDirtyRegion=..., aBackstop=4294967295, aFlags=260)
    at /home/wes/src/mozilla-central/layout/base/nsLayoutUtils.cpp:1605
#13 0x00007fdcb364c979 in PresShell::Paint (this=0x7fdc9d9e5400, aViewToPaint=
    0x7fdc9d9ca7e0, aWidgetToPaint=0x7fdca6ef0210, aDirtyRegion=..., 
    aIntDirtyRegion=..., aPaintDefaultBackground=0, aWillSendDidPaint=0)
    at /home/wes/src/mozilla-central/layout/base/nsPresShell.cpp:6051
#14 0x00007fdcb3c7ad31 in nsViewManager::RenderViews (this=0x7fdc9f0b1040, 
    aView=0x7fdc9d9ca7e0, aWidget=0x7fdca6ef0210, aRegion=..., aIntRegion=..., 
    aPaintDefaultBackground=0, aWillSendDidPaint=0)
    at /home/wes/src/mozilla-central/view/src/nsViewManager.cpp:449
#15 0x00007fdcb3c7ac18 in nsViewManager::Refresh (this=0x7fdc9f0b1040, 
    aView=0x7fdc9d9ca7e0, aWidget=0x7fdca6ef0210, aRegion=..., aUpdateFlags=1)
    at /home/wes/src/mozilla-central/view/src/nsViewManager.cpp:424
#16 0x00007fdcb3c7c25b in nsViewManager::DispatchEvent (this=0x7fdc9f0b1040, 
    aEvent=0x7fff92290930, aView=0x7fdc9d9ca7e0, aStatus=0x7fff922907cc)
    at /home/wes/src/mozilla-central/view/src/nsViewManager.cpp:930
#17 0x00007fdcb3c761f9 in HandleEvent (aEvent=0x7fff92290930)
    at /home/wes/src/mozilla-central/view/src/nsView.cpp:160
#18 0x00007fdcb4701eb0 in mozilla::widget::PuppetWidget::DispatchEvent (
    this=0x7fdca6ef0210, event=0x7fff92290930, aStatus=@0x7fff92290a0c)
    at /home/wes/src/mozilla-central/widget/src/xpwidgets/PuppetWidget.cpp:323
#19 0x00007fdcb47029c8 in mozilla::widget::PuppetWidget::DispatchPaintEvent (
    this=0x7fdca6ef0210)
    at /home/wes/src/mozilla-central/widget/src/xpwidgets/PuppetWidget.cpp:534
#20 0x00007fdcb4702c09 in mozilla::widget::PuppetWidget::PaintTask::Run (
    this=0x7fdc9d889be0)
    at /home/wes/src/mozilla-central/widget/src/xpwidgets/PuppetWidget.cpp:573
#21 0x00007fdcb49f570c in nsThread::ProcessNextEvent (this=0x7fdcaa34c560, 
    mayWait=0, result=0x7fff92290b7c)
    at /home/wes/src/mozilla-central/xpcom/threads/nsThread.cpp:618
#22 0x00007fdcb497ec4d in NS_ProcessNextEvent_P (thread=0x7fdcaa34c560, 
    mayWait=0) at /home/wes/src/linux/xpcom/build/nsThreadUtils.cpp:250
#23 0x00007fdcb484caa4 in mozilla::ipc::MessagePump::Run (this=0x7fdcaa30f440, 
    aDelegate=0x7fff92292020)
    at /home/wes/src/mozilla-central/ipc/glue/MessagePump.cpp:110
#24 0x00007fdcb484cfcb in mozilla::ipc::MessagePumpForChildProcess::Run (
    this=0x7fdcaa30f440, aDelegate=0x7fff92292020)
    at /home/wes/src/mozilla-central/ipc/glue/MessagePump.cpp:229
#25 0x00007fdcb4a554a5 in MessageLoop::RunInternal (this=0x7fff92292020)
    at /home/wes/src/mozilla-central/ipc/chromium/src/base/message_loop.cc:218
#26 0x00007fdcb4a55436 in MessageLoop::RunHandler (this=0x7fff92292020)
    at /home/wes/src/mozilla-central/ipc/chromium/src/base/message_loop.cc:202
#27 0x00007fdcb4a553c7 in MessageLoop::Run (this=0x7fff92292020)
    at /home/wes/src/mozilla-central/ipc/chromium/src/base/message_loop.cc:176
#28 0x00007fdcb46e26a7 in nsBaseAppShell::Run (this=0x7fdca2bcb860)
    at /home/wes/src/mozilla-central/widget/src/xpwidgets/nsBaseAppShell.cpp:189
#29 0x00007fdcb32eb90d in XRE_RunAppShell ()
    at /home/wes/src/mozilla-central/toolkit/xre/nsEmbedFunctions.cpp:671
#30 0x00007fdcb484cf06 in mozilla::ipc::MessagePumpForChildProcess::Run (
    this=0x7fdcaa30f440, aDelegate=0x7fff92292020)
    at /home/wes/src/mozilla-central/ipc/glue/MessagePump.cpp:215
#31 0x00007fdcb4a554a5 in MessageLoop::RunInternal (this=0x7fff92292020)
    at /home/wes/src/mozilla-central/ipc/chromium/src/base/message_loop.cc:218
#32 0x00007fdcb4a55436 in MessageLoop::RunHandler (this=0x7fff92292020)
    at /home/wes/src/mozilla-central/ipc/chromium/src/base/message_loop.cc:202
#33 0x00007fdcb4a553c7 in MessageLoop::Run (this=0x7fff92292020)
    at /home/wes/src/mozilla-central/ipc/chromium/src/base/message_loop.cc:176
#34 0x00007fdcb32eb3d4 in XRE_InitChildProcess (aArgc=1, aArgv=0x7fff92292378, 
    aProcess=GeckoProcessType_Content)
    at /home/wes/src/mozilla-central/toolkit/xre/nsEmbedFunctions.cpp:510
#35 0x00000000004013a6 in main (argc=3, argv=0x7fff92292378)
    at /home/wes/src/mozilla-central/ipc/app/MozillaRuntimeMain.cpp:80