Closed Bug 822865 Opened 8 years ago Closed 8 years ago

Crash [@ nsDisplayBackgroundImage::AppendBackgroundItemsToTop] with -moz-appearance, display:table, elementFromPoint

Categories

(Core :: Layout, defect)

x86_64
All
defect
Not set
critical

Tracking

()

VERIFIED FIXED
mozilla20
Tracking Status
firefox20 + verified

People

(Reporter: jruderman, Assigned: mattwoodrow)

References

(Blocks 1 open bug)

Details

(Keywords: crash, testcase)

Crash Data

Attachments

(3 files)

No description provided.
Attached file stack
Nightly: bp-d7c3b0ad-0ed9-45db-b531-0d8fa2121218
bp-5d85b0cb-ac41-4bca-a943-cd52d2121219


Regression window(m-c)
Good:
http://hg.mozilla.org/mozilla-central/rev/8a30e07815ff
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:20.0) Gecko/20121214 Firefox/20.0 ID:20121214015122
Bad:
http://hg.mozilla.org/mozilla-central/rev/50d8f411d305
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:20.0) Gecko/20121214 Firefox/20.0 ID:20121214072922
Pushlog:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=8a30e07815ff&tochange=50d8f411d305


Regression window(m-c)
Good:
http://hg.mozilla.org/integration/mozilla-inbound/rev/66f91a854410
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:20.0) Gecko/20121213 Firefox/20.0 ID:20121213140922
Bad:
http://hg.mozilla.org/integration/mozilla-inbound/rev/777fd91b7fda
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:20.0) Gecko/20121213 Firefox/20.0 ID:20121213141630
Pushlog:
http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=66f91a854410&tochange=777fd91b7fda

Suspected: Bug 821477 or Bug 820246
Crash Signature: [@ nsDisplayBackgroundImage::AppendBackgroundItemsToTop] → [@ nsDisplayBackgroundImage::AppendBackgroundItemsToTop] [@ nsDisplayBackgroundImage::AppendBackgroundItemsToTop(nsDisplayListBuilder*, nsIFrame*, nsDisplayList*, nsDisplayBackgroundImage**)]
OS: Mac OS X → All
Blocks: 821477
Attachment #694262 - Flags: review?(roc)
https://hg.mozilla.org/mozilla-central/rev/3b4cfcc2aed2
Status: NEW → RESOLVED
Closed: 8 years ago
Flags: in-testsuite?
Resolution: --- → FIXED
Target Milestone: --- → mozilla20
Reproduced on Nightly 2012-12-17.
Verified fixed using the testcase on FF 20b6, FF 21.0a2 (2013-03-20), FF 22.0a1 (2013-03-20) on Win 7, Ubuntu 12.04 and Mac OS X 10.7.5
Status: RESOLVED → VERIFIED
Crash test:
https://hg.mozilla.org/integration/mozilla-inbound/rev/4a2d72acdf94
Flags: in-testsuite? → in-testsuite+
You need to log in before you can comment on or make changes to this bug.