Open Bug 842079 Opened 12 years ago Updated 2 years ago

Crash in nsIFrame::BuildDisplayListForChild

Categories

(Core :: Web Painting, defect)

defect

Tracking

()

Tracking Status
firefox21 - ---

People

(Reporter: reuben, Unassigned)

References

()

Details

(Keywords: crash, reproducible, Whiteboard: qa-not-actionable)

Crash Data

Attachments

(1 file)

Attached file Stack trace
WARNING: I lost my session to this crash, test on a new profile if you want your data This might be OS X specific. STR: 1) Go to http://vps2.etotheipiplusone.com:30176/redmine/emscripten-qt-examples/wiggly.html 2) Click fullscreen 3) Wait for transition and click allow The crash reporter doesn't handle it very well: bp-7a8c6df6-cfaa-45da-b670-0da6b2130216 bp-b74841e0-9030-497d-88b6-057ed2130216 The stack in GDB appears to be an infinite recursion (I cancelled after 10000 frames).
A crash report from cers that wasn't corrupted: bp-ec395fd3-4685-4c50-aa8f-de55b2130216
Works for me on today's nightly on Linux. Is it a recent regression?
This is a crash from today's nightly on my retina MBP: bp-6b6fc425-bef2-4e59-82eb-d8f982130216 however I'm unable to reproduce it on my old non-retina macbook
Severity: normal → critical
Crash Signature: [@ nsIFrame::BuildDisplayListForChild(nsDisplayListBuilder*, nsIFrame*, nsRect const&, nsDisplayListSet const&, unsigned int) ] [@ nsCSSRendering::FindBackground(nsPresContext*, nsIFrame* nsStyleContext**) ] [@ nsDisplayBackgroundImage::AppendBackground…
Component: Event Handling → Layout
Keywords: crash, reproducible
Low volume, the signature has been around a long time and is not specific to Mac (more Windows actually) and since it cannot be reproduced consistently we will not track here but will consider an uplift nomination if a low risk fix is available.
OS: Mac OS X → All
Looks like it could be related to bug 805261, but bug 805261 should have been fixed in the build used in comment #3.
FWIW, it still happens in today's nightly. 97ae13d3-d6df-4a16-aeaf-a7e972130225
That site looks down for me. Is the testcase available anywhere else?
Crash Signature: , nsStyleContext**) ] [@ nsDisplayBackgroundImage::AppendBackgroundItemsToTop(nsDisplayListBuilder*, nsIFrame*, nsDisplayList*, nsDisplayBackgroundImage**) ] → , nsStyleContext**) ] [@ nsDisplayBackgroundImage::AppendBackgroundItemsToTop(nsDisplayListBuilder*, nsIFrame*, nsDisplayList*, nsDisplayBackgroundImage**) ] [@ nsIFrame::BuildDisplayListForChild ] [@ nsCSSRendering::FindBackground ] [@ nsDisplayBackg…
Component: Layout → Layout: View Rendering
Component: Layout: View Rendering → Layout: Web Painting
Whiteboard: qa-not-actionable
Severity: critical → S2
Severity: S2 → S3

Only 3 crashes newer than 102, latest in 105. Hence the lower severity.

You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: