956765 - crash in nsStyleSet::ReparentStyleContext(nsStyleContext*, nsStyleContext*, mozilla::dom::Element*)

Status: RESOLVED DUPLICATE of bug 930250

(Core :: Layout, defect)

Description

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

This bug was filed from the Socorro interface and is 
report bp-d80e6090-e9d3-4e7a-aa0d-6e2ea2140106.
=============================================================
Frame 	Module 	Signature 	Source
0 	XUL 	nsStyleSet::ReparentStyleContext(nsStyleContext*, nsStyleContext*, mozilla::dom::Element*) 	layout/style/nsStyleContext.h
1 	XUL 	mozilla::ElementRestyler::RestyleSelf(nsRestyleHint) 	layout/base/RestyleManager.cpp
2 	XUL 	mozilla::ElementRestyler::Restyle(nsRestyleHint) 	layout/base/RestyleManager.cpp
3 	XUL 	mozilla::ElementRestyler::RestyleSelf(nsRestyleHint) 	layout/base/RestyleManager.cpp
4 	XUL 	mozilla::ElementRestyler::Restyle(nsRestyleHint) 	layout/base/RestyleManager.cpp
5 	XUL 	mozilla::ElementRestyler::RestyleContentChildren(nsRestyleHint) 	layout/base/RestyleManager.cpp
6 	XUL 	mozilla::ElementRestyler::RestyleChildren(nsRestyleHint) 	layout/base/RestyleManager.cpp
7 	XUL 	mozilla::ElementRestyler::Restyle(nsRestyleHint) 	layout/base/RestyleManager.cpp
8 	XUL 	mozilla::ElementRestyler::RestyleContentChildren(nsRestyleHint) 	layout/base/RestyleManager.cpp
9 	XUL 	mozilla::ElementRestyler::RestyleChildren(nsRestyleHint) 	layout/base/RestyleManager.cpp
10 	XUL 	mozilla::ElementRestyler::Restyle(nsRestyleHint) 	layout/base/RestyleManager.cpp
11 	XUL 	mozilla::ElementRestyler::RestyleContentChildren(nsRestyleHint) 	layout/base/RestyleManager.cpp
12 	XUL 	mozilla::ElementRestyler::RestyleChildren(nsRestyleHint) 	layout/base/RestyleManager.cpp
13 	XUL 	mozilla::ElementRestyler::Restyle(nsRestyleHint) 	layout/base/RestyleManager.cpp
14 	XUL 	mozilla::ElementRestyler::RestyleContentChildren(nsRestyleHint) 	layout/base/RestyleManager.cpp
15 	XUL 	mozilla::ElementRestyler::RestyleChildren(nsRestyleHint) 	layout/base/RestyleManager.cpp
16 	XUL 	mozilla::ElementRestyler::Restyle(nsRestyleHint) 	layout/base/RestyleManager.cpp
17 	XUL 	mozilla::ElementRestyler::RestyleContentChildren(nsRestyleHint) 	layout/base/RestyleManager.cpp
18 	XUL 	mozilla::ElementRestyler::RestyleChildren(nsRestyleHint) 	layout/base/RestyleManager.cpp
19 	XUL 	mozilla::ElementRestyler::Restyle(nsRestyleHint) 	layout/base/RestyleManager.cpp
20 	XUL 	mozilla::RestyleManager::ComputeStyleChangeFor(nsIFrame*, nsStyleChangeList*, nsChangeHint, mozilla::RestyleTracker&, bool) 	layout/base/RestyleManager.cpp
21 	XUL 	mozilla::RestyleManager::RestyleElement(mozilla::dom::Element*, nsIFrame*, nsChangeHint, mozilla::RestyleTracker&, bool) 	layout/base/RestyleManager.cpp
22 	XUL 	mozilla::RestyleTracker::DoProcessRestyles() 	layout/base/RestyleTracker.cpp
23 	XUL 	mozilla::RestyleManager::ProcessPendingRestyles() 	layout/base/RestyleTracker.h
24 	XUL 	PresShell::FlushPendingNotifications(mozilla::ChangesToFlush) 	layout/base/nsPresShell.cpp
25 	XUL 	nsRefreshDriver::Tick(long long, mozilla::TimeStamp) 	layout/base/nsRefreshDriver.cpp
26 	XUL 	mozilla::RefreshDriverTimer::Tick() 	layout/base/nsRefreshDriver.cpp
27 	XUL 	nsTimerImpl::Fire() 	xpcom/threads/nsTimerImpl.cpp
28 	XUL 	nsTimerEvent::Run() 	xpcom/threads/nsTimerImpl.cpp
29 	XUL 	nsThread::ProcessNextEvent(bool, bool*) 	xpcom/threads/nsThread.cpp
30 	XUL 	NS_ProcessPendingEvents(nsIThread*, unsigned int) 	xpcom/glue/nsThreadUtils.cpp
31 	XUL 	nsBaseAppShell::NativeEventCallback() 	widget/xpwidgets/nsBaseAppShell.cpp
32 	XUL 	nsAppShell::ProcessGeckoEvents(void*) 	widget/cocoa/nsAppShell.mm
33 	CoreFoundation 	CoreFoundation@0x12b31 	
34 	CoreFoundation 	CoreFoundation@0x12455 	
35 	CoreFoundation 	CoreFoundation@0x357f5 	
36 	XUL 	nsDisplayList::HitTest(nsDisplayListBuilder*, nsRect const&, nsDisplayItem::HitTestState*, nsTArray<nsIFrame*>*) const 	obj-firefox/x86_64/dist/include/nsTArray.h
37 	XUL 	nsLayoutUtils::GetFramesForArea(nsIFrame*, nsRect const&, nsTArray<nsIFrame*>&, unsigned int) 	layout/base/nsLayoutUtils.cpp
38 	CoreFoundation 	CoreFoundation@0x5a3c0 	
39 	CoreFoundation 	CoreFoundation@0x5a267 	
40 	CoreFoundation 	CoreFoundation@0x350e2 	
41 	HIToolbox 	HIToolbox@0x5feb4 	
42 	HIToolbox 	HIToolbox@0x5fb94 	
43 	HIToolbox 	HIToolbox@0x5fae3 	
44 	AppKit 	AppKit@0x155533 	
45 	libsystem_c.dylib 	libsystem_c.dylib@0x19d84 	
46 	CoreFoundation 	CoreFoundation@0x35279 	
47 	AppKit 	AppKit@0x983439 	
48 	AppKit 	AppKit@0x236f08 	
49 	libobjc.A.dylib 	objc::DenseMap<objc_object*, unsigned long, true, objc::DenseMapInfo<objc_object*>, objc::DenseMapInfo<unsigned long> >::erase(objc_object* const&) 	
50 	AppKit 	AppKit@0x154df2 	
51 	AppKit 	AppKit@0x3a1d53 	
52 	AppKit 	AppKit@0x3a1d20 	
53 	AppKit 	AppKit@0x3a1d40 	
54 	AppKit 	AppKit@0x236aff

STR: 
1. go to : https://bugzilla.mozilla.org/show_bug.cgi?id=943919
2. on the link for https://bug930250.bugzilla.mozilla.org/attachment.cgi?id=821321, control click and open in a new tab

Expected: page opens up
Actual: crash occurs.

Note: 10.8.5, Mem 8 GB, Proc: 3 GHz, Intel Core i7, Graphics Intel HD Graphics 4000 768 MB

Comment 1

[Daniel Holbert [:dholbert]]

Isn't this just a duplicate of bug 930250? (the bug that the testcase is attached to)

Comment 2

[Daniel Holbert [:dholbert]]

I'm assuming it is, based on skimming the stacks in each bug. Marking as such.