Closed
Bug 852293
Opened 11 years ago
Closed 11 years ago
mozilla::css::OverflowChangedTracker::Flush hits SplayTree assertion
Categories
(Core :: Layout, defect)
Core
Layout
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: jruderman, Assigned: jruderman)
References
Details
(Keywords: assertion, testcase)
Attachments
(2 files)
Within a few seconds, the testcase usually hits: Assertion failure: Comparator::compare(*minimum, *node) < 0, at SplayTree.h:263 Why is this non-deterministic? Can this kind of bug be made deterministic, perhaps by adding more assertions? (The non-determinism caused me to spend several hours massaging the testcase instead of several minutes simply reducing it.)
Assignee | ||
Comment 1•11 years ago
|
||
Might this have started as a result of the patch to bug 849263? I still think that patch is right, though.
Comment 3•11 years ago
|
||
(In reply to David Baron [:dbaron] (don't cc:, use needinfo? instead) from comment #2) > Might this have started as a result of the patch to bug 849263? I still > think that patch is right, though. I believe so, yes. This appears to be a different symptom of bug 850672. Thanks for the testcase Jesse!
Assignee | ||
Comment 4•11 years ago
|
||
Makes sense. The non-determinism might come from [whether and when the presarena reuses a memory address]. This particular SplayTree cares whether frame pointers are reused because its entries are sorted by by depth and then frame pointer.
Comment 5•11 years ago
|
||
WFM in local m-c debug build on Linux64 and OSX.
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: in-testsuite?
OS: Mac OS X → All
Hardware: x86_64 → All
Resolution: --- → WORKSFORME
Comment 7•11 years ago
|
||
Crash test: https://hg.mozilla.org/integration/mozilla-inbound/rev/62aa2d6dbeb2
Flags: in-testsuite? → in-testsuite+
Comment 8•11 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/62aa2d6dbeb2
Assignee: nobody → jruderman
You need to log in
before you can comment on or make changes to this bug.
Description
•