849996 - Incorrect CSS Vertical Positioning if applied CSS overflow hidden and transform to parent element.

Status: RESOLVED FIXED

(Core :: Layout, defect)

Description

[Alice0775 White]

Attachment: testcase

Build Identifier:
http://hg.mozilla.org/mozilla-central/rev/eccf45749400
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:22.0) Gecko/20130311 Firefox/22.0 ID:20130311030946

This problem does not happen in IE, Opera and Chrome.

Reproducible: always

Steps to Reproduce:
1. Open testcase

Actual Results:
 The vertical positioning of child element is incorrect.

Expected Results:
 The child eleemnt should be positioned at top-left corner of the parent element.


Regression window(m-c)
Good[1]:
http://hg.mozilla.org/mozilla-central/rev/f7c89de3ab43
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/18.0 Firefox/18.0 ID:20120915201302
Bad:
http://hg.mozilla.org/mozilla-central/rev/b3f462d96fb5
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/18.0 Firefox/18.0 ID:20120916161603
Pushlog:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=f7c89de3ab43&tochange=b3f462d96fb5

Regression window(m-i)
Good[1]:
http://hg.mozilla.org/integration/mozilla-inbound/rev/33087122ace7
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/18.0 Firefox/18.0 ID:20120916022601
Bad:
http://hg.mozilla.org/integration/mozilla-inbound/rev/6ee831a85d12
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/18.0 Firefox/18.0 ID:20120916033402
Pushlog:
http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=33087122ace7&tochange=6ee831a85d12

Last Good: 0ee3959754f8
First Bad: 6ee831a85d12
Tiggered by:
6ee831a85d12	Matt Woodrow — Bug 788044 - Make transformed frames the reference frame for their display list tree. r=roc


[1]
There is another very old bug.
The child element is re-positioned when I resize browser window

Regression window[1]
Good:
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9a1) Gecko/20061207 Minefield/3.0a1
Bad:
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9a1) Gecko/20061208 Minefield/3.0a1

Bonsai log:
http://bonsai.mozilla.org/cvsquery.cgi?treeid=default&module=all&branch=HEAD&branchtype=match&dir=&file=&filetype=match&who=&whotype=match&sortby=Date&hours=2&date=explicit&mindate=2006-12-07+00%3A00%3A00&maxdate=2006-12-08+03%3A00%3A00&cvsroot=%2Fcvsroot

Suspected: Bug 300030

Comment 1

[Alice0775 White]

I've filed Bug 850015 for problem[1].

Comment 2

[Matt Woodrow (:mattwoodrow)]

This looks very similar to bug 827577.

The relevant section of the frame tree is:

FixedList<
  Block(div)(1)@0x14e432c68 next=0x14e432390 [content=0x1345bf880] {0,0,6000,6000] [state=000017a000d00300] sc=0x14e432978(i=0,b=0)<
  >
  HTMLScroll(div)(1)@0x14e432390 {480,480,12000,12000} [state=0000078000010110] [content=0x12533a680] [sc=0x14e431e08]<
    Block(div)(1)@0x14e4327b8 [content=0x12533a680] {0,0,12000,12000} [state=000011a000d00210] sc=0x14e431eb8(i=1,b=0) pst=:-moz-scrolled-content<
      line 0x14e432d58: count=1 state=inline,clean,prevmarginclean,not impacted,not wrapped,before:nobr,after:nobr[0x300] {0,0,0,0} <
        Placeholder(div)(1)@0x14e432d00 {0,0,0,0} [state=0000018000400000] [content=0x1345bf880] [sc=0x14e432890] outOfFlowFrame=Block(div)(1)@0x14e432c68
      >
    >
  >
>

The "child" element (Block(div)(1)@0x14e432c68) doesn't realize that its display items are contained within the transformed "parent" element (HTMLScroll(div)(1)@0x14e432390), and so we pick the wrong reference frame.

Comment 3

[Robert O'Callahan (:roc) (email my personal email if necessary)]

Attachment: fix

Comment 4

[Boris Zbarsky [:bzbarsky]]

Comment on attachment 734460 [details] [diff] [review]
fix

r=me

Comment 5

[:Ms2ger (he/him; ⌚ UTC+1/+2)]

https://hg.mozilla.org/integration/mozilla-inbound/rev/7c596ffafa29

Comment 6

[Robert O'Callahan (:roc) (email my personal email if necessary)]

relanded: https://hg.mozilla.org/integration/mozilla-inbound/rev/0aab4158b4e5

Comment 7

[(Out Sep 17-23) Ryan VanderMeulen]

https://hg.mozilla.org/mozilla-central/rev/0aab4158b4e5