Open Bug 842079 Opened 11 years ago Updated 9 months ago

Crash in nsIFrame::BuildDisplayListForChild


(Core :: Web Painting, defect)




Tracking Status
firefox21 - ---


(Reporter: reuben, Unassigned)




(Keywords: crash, reproducible, Whiteboard: qa-not-actionable)

Crash Data


(1 file)

Attached file Stack trace
WARNING: I lost my session to this crash, test on a new profile if you want your data

This might be OS X specific.

1) Go to
2) Click fullscreen
3) Wait for transition and click allow

The crash reporter doesn't handle it very well:

The stack in GDB appears to be an infinite recursion (I cancelled after 10000 frames).
A crash report from cers that wasn't corrupted: bp-ec395fd3-4685-4c50-aa8f-de55b2130216
Works for me on today's nightly on Linux.  Is it a recent regression?
This is a crash from today's nightly on my retina MBP: bp-6b6fc425-bef2-4e59-82eb-d8f982130216 however I'm unable to reproduce it on my old non-retina macbook
Severity: normal → critical
Crash Signature: [@ nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int) ] [@ nsCSSRendering::FindBackground(nsPresContext*, nsIFrame* nsStyleContext**) ] [@ nsDisplayBackgroundImage::AppendBackground…
Component: Event Handling → Layout
Keywords: crash, reproducible
Low volume, the signature has been around a long time and is not specific to Mac (more Windows actually) and since it cannot be reproduced consistently we will not track here but will consider an uplift nomination if a low risk fix is available.
OS: Mac OS X → All
Looks like it could be related to bug 805261, but bug 805261 should have been fixed in the build used in comment #3.
FWIW, it still happens in today's nightly. 97ae13d3-d6df-4a16-aeaf-a7e972130225
That site looks down for me. Is the testcase available anywhere else?
Crash Signature: , nsStyleContext**) ] [@ nsDisplayBackgroundImage::AppendBackgroundItemsToTop(nsDisplayListBuilder*, nsIFrame*, nsDisplayList*, nsDisplayBackgroundImage**) ] → , nsStyleContext**) ] [@ nsDisplayBackgroundImage::AppendBackgroundItemsToTop(nsDisplayListBuilder*, nsIFrame*, nsDisplayList*, nsDisplayBackgroundImage**) ] [@ nsIFrame::BuildDisplayListForChild ] [@ nsCSSRendering::FindBackground ] [@ nsDisplayBackg…
Component: Layout → Layout: View Rendering
Component: Layout: View Rendering → Layout: Web Painting
Whiteboard: qa-not-actionable
Severity: critical → S2
Severity: S2 → S3

Only 3 crashes newer than 102, latest in 105. Hence the lower severity.

You need to log in before you can comment on or make changes to this bug.