Closed Bug 1323696 Opened 8 years ago Closed 7 years ago

stylo: layout/generic/crashtests/574958.xhtml fatally asserts "mEmbeddingStack.Length() (embedding/override underflow)"

Categories

(Core :: CSS Parsing and Computation, defect, P3)

defect

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: heycam, Unassigned)

References

Details

#0  0x00007fffe6fafd67 in BidiParagraphData::PopBidiControl (this=0x7fffffff5e18, aCh=8295 u'⁧') at /z/stylo/hg-incubator/layout/base/nsBidiPresUtils.cpp:305
#1  0x00007fffe6f4b672 in nsBidiPresUtils::TraverseFrames (aBlockFrame=0x7fffbd73ca80, aLineIter=0x7fffffff5de8, aCurrentFrame=0x7fffbd73d7c0, aBpd=0x7fffffff5e18) at /z/stylo/hg-incubator/layout/base/nsBidiPresUtils.cpp:1213
#2  0x00007fffe6f4ab4b in nsBidiPresUtils::Resolve (aBlockFrame=0x7fffbd73ca80) at /z/stylo/hg-incubator/layout/base/nsBidiPresUtils.cpp:697
#3  0x00007fffe7026bef in nsBlockFrame::ResolveBidi (this=0x7fffbd73ca80) at /z/stylo/hg-incubator/layout/generic/nsBlockFrame.cpp:7419
#4  0x00007fffe7026380 in nsBlockFrame::GetMinISize (this=0x7fffbd73ca80, aRenderingContext=0x7fffffffa200) at /z/stylo/hg-incubator/layout/generic/nsBlockFrame.cpp:704
#5  0x00007fffe6f9d522 in nsLayoutUtils::IntrinsicForAxis (aAxis=mozilla::eAxisHorizontal, aRenderingContext=0x7fffffffa200, aFrame=0x7fffbd73ca80, aType=nsLayoutUtils::IntrinsicISizeType::MIN_ISIZE, aFlags=0, 
    aMarginBoxMinSizeClamp=1073741824) at /z/stylo/hg-incubator/layout/base/nsLayoutUtils.cpp:5057
#6  0x00007fffe6f9ec80 in nsLayoutUtils::IntrinsicForContainer (aRenderingContext=0x7fffffffa200, aFrame=0x7fffbd73ca80, aType=nsLayoutUtils::IntrinsicISizeType::MIN_ISIZE, aFlags=0)
    at /z/stylo/hg-incubator/layout/base/nsLayoutUtils.cpp:5188
#7  0x00007fffe70f4619 in nsPlaceholderFrame::AddInlineMinISize (this=0x7fffbd73cc40, aRenderingContext=0x7fffffffa200, aData=0x7fffffff6540) at /z/stylo/hg-incubator/layout/generic/nsPlaceholderFrame.cpp:78
#8  0x00007fffe7054ef3 in nsContainerFrame::DoInlineIntrinsicISize (this=0x7fffbd73da20, aRenderingContext=0x7fffffffa200, aData=0x7fffffff6540, aType=nsLayoutUtils::IntrinsicISizeType::MIN_ISIZE)
    at /z/stylo/hg-incubator/layout/generic/nsContainerFrame.cpp:894
#9  0x00007fffe70e9e32 in nsInlineFrame::AddInlineMinISize (this=0x7fffbd73da20, aRenderingContext=0x7fffffffa200, aData=0x7fffffff6540) at /z/stylo/hg-incubator/layout/generic/nsInlineFrame.cpp:268
#10 0x00007fffe7026687 in nsBlockFrame::GetMinISize (this=0x7fffbd73c480, aRenderingContext=0x7fffffffa200) at /z/stylo/hg-incubator/layout/generic/nsBlockFrame.cpp:742
#11 0x00007fffe7055643 in nsFrame::ShrinkWidthToFit (this=0x7fffbd73c480, aRenderingContext=0x7fffffffa200, aISizeInCB=47940, aFlags=nsIFrame::eShrinkWrap) at /z/stylo/hg-incubator/layout/generic/nsFrame.cpp:5447
#12 0x00007fffe70551cc in nsContainerFrame::ComputeAutoSize (this=0x7fffbd73c480, aRenderingContext=0x7fffffffa200, aWM=..., aCBSize=..., aAvailableISize=48000, aMargin=..., aBorder=..., aPadding=..., 
    aFlags=nsIFrame::eShrinkWrap) at /z/stylo/hg-incubator/layout/generic/nsContainerFrame.cpp:942
#13 0x00007fffe7058967 in nsFrame::ComputeSize (this=0x7fffbd73c480, aRenderingContext=0x7fffffffa200, aWM=..., aCBSize=..., aAvailableISize=48000, aMargin=..., aBorder=..., aPadding=..., aFlags=nsIFrame::eShrinkWrap)
    at /z/stylo/hg-incubator/layout/generic/nsFrame.cpp:4703
#14 0x00007fffe70078b6 in mozilla::ReflowInput::InitAbsoluteConstraints (this=0x7fffffff8610, aPresContext=0x7fffb11a3800, cbrs=0x7fffffff92f0, aCBSize=..., aFrameType=0x7fffd346c0d0)
    at /z/stylo/hg-incubator/layout/generic/ReflowInput.cpp:1690
#15 0x00007fffe7003aac in mozilla::ReflowInput::InitConstraints (this=0x7fffffff8610, aPresContext=0x7fffb11a3800, aContainingBlockSize=..., aBorder=0x0, aPadding=0x0, aFrameType=0x7fffd346c0d0)
    at /z/stylo/hg-incubator/layout/generic/ReflowInput.cpp:2362
#16 0x00007fffe6fffeb0 in mozilla::ReflowInput::Init (this=0x7fffffff8610, aPresContext=0x7fffb11a3800, aContainingBlockSize=0x7fffffff8790, aBorder=0x0, aPadding=0x0) at /z/stylo/hg-incubator/layout/generic/ReflowInput.cpp:399
#17 0x00007fffe70014ca in mozilla::ReflowInput::ReflowInput (this=0x7fffffff8610, aPresContext=0x7fffb11a3800, aParentReflowInput=..., aFrame=0x7fffbd73c480, aAvailableSpace=..., aContainingBlockSize=0x7fffffff8790, aFlags=0)
    at /z/stylo/hg-incubator/layout/generic/ReflowInput.cpp:258
#18 0x00007fffe701f6e4 in nsAbsoluteContainingBlock::ReflowAbsoluteFrame (this=0x7fffb17d18e0, aDelegatingFrame=0x7fffb966d2e0, aPresContext=0x7fffb11a3800, aReflowInput=..., aContainingBlock=..., aFlags=7, 
    aKidFrame=0x7fffbd73c480, aStatus=@0x7fffffff89cc: 0, aOverflowAreas=0x7fffffff95a4) at /z/stylo/hg-incubator/layout/generic/nsAbsoluteContainingBlock.cpp:648
#19 0x00007fffe701e78f in nsAbsoluteContainingBlock::Reflow (this=0x7fffb17d18e0, aDelegatingFrame=0x7fffb966d2e0, aPresContext=0x7fffb11a3800, aReflowInput=..., aReflowStatus=@0x7fffffff92b0: 0, aContainingBlock=..., aFlags=7, 
    aOverflowAreas=0x7fffffff95a4) at /z/stylo/hg-incubator/layout/generic/nsAbsoluteContainingBlock.cpp:138
#20 0x00007fffe7074b2a in nsFrame::ReflowAbsoluteFrames (this=0x7fffb966d2e0, aPresContext=0x7fffb11a3800, aDesiredSize=..., aReflowInput=..., aStatus=@0x7fffffff92b0: 0, aConstrainBSize=true)
    at /z/stylo/hg-incubator/layout/generic/nsFrame.cpp:5600
#21 0x00007fffe704edc8 in nsFrame::FinishReflowWithAbsoluteFrames (this=0x7fffb966d2e0, aPresContext=0x7fffb11a3800, aDesiredSize=..., aReflowInput=..., aStatus=@0x7fffffff92b0: 0, aConstrainBSize=true)
    at /z/stylo/hg-incubator/layout/generic/nsFrame.cpp:5567
#22 0x00007fffe704e682 in nsCanvasFrame::Reflow (this=0x7fffb966d2e0, aPresContext=0x7fffb11a3800, aDesiredSize=..., aReflowInput=..., aStatus=@0x7fffffff92b0: 0) at /z/stylo/hg-incubator/layout/generic/nsCanvasFrame.cpp:741
#23 0x00007fffe704ebb7 in nsContainerFrame::ReflowChild (this=0x7fffb966d370, aKidFrame=0x7fffb966d2e0, aPresContext=0x7fffb11a3800, aDesiredSize=..., aReflowInput=..., aWM=..., aPos=..., aContainerSize=..., aFlags=3, 
    aStatus=@0x7fffffff92b0: 0, aTracker=0x0) at /z/stylo/hg-incubator/layout/generic/nsContainerFrame.cpp:1027
#24 0x00007fffe70b2780 in nsHTMLScrollFrame::ReflowScrolledFrame (this=0x7fffb966d370, aState=0x7fffffff9790, aAssumeHScroll=false, aAssumeVScroll=false, aMetrics=0x7fffffff9588, aFirstPass=false)
    at /z/stylo/hg-incubator/layout/generic/nsGfxScrollFrame.cpp:552
#25 0x00007fffe70b3161 in nsHTMLScrollFrame::ReflowContents (this=0x7fffb966d370, aState=0x7fffffff9790, aDesiredSize=...) at /z/stylo/hg-incubator/layout/generic/nsGfxScrollFrame.cpp:697
#26 0x00007fffe70b44b0 in nsHTMLScrollFrame::Reflow (this=0x7fffb966d370, aPresContext=0x7fffb11a3800, aDesiredSize=..., aReflowInput=..., aStatus=@0x7fffffff9fd4: 0)
    at /z/stylo/hg-incubator/layout/generic/nsGfxScrollFrame.cpp:1039
#27 0x00007fffe70557ff in nsContainerFrame::ReflowChild (this=0x7fffb966d148, aKidFrame=0x7fffb966d370, aPresContext=0x7fffb11a3800, aDesiredSize=..., aReflowInput=..., aX=0, aY=0, aFlags=0, aStatus=@0x7fffffff9fd4: 0, 
    aTracker=0x0) at /z/stylo/hg-incubator/layout/generic/nsContainerFrame.cpp:1070
#28 0x00007fffe70147f3 in mozilla::ViewportFrame::Reflow (this=0x7fffb966d148, aPresContext=0x7fffb11a3800, aDesiredSize=..., aReflowInput=..., aStatus=@0x7fffffff9fd4: 0)
    at /z/stylo/hg-incubator/layout/generic/ViewportFrame.cpp:316
#29 0x00007fffe6ef16e3 in mozilla::PresShell::DoReflow (this=0x7fffb1435800, target=0x7fffb966d148, aInterruptible=false) at /z/stylo/hg-incubator/layout/base/PresShell.cpp:9401
#30 0x00007fffe6ef9865 in mozilla::PresShell::ProcessReflowCommands (this=0x7fffb1435800, aInterruptible=false) at /z/stylo/hg-incubator/layout/base/PresShell.cpp:9574
#31 0x00007fffe6ef9435 in mozilla::PresShell::FlushPendingNotifications (this=0x7fffb1435800, aFlush=...) at /z/stylo/hg-incubator/layout/base/PresShell.cpp:4150
#32 0x00007fffe6ef8ca0 in mozilla::PresShell::FlushPendingNotifications (this=0x7fffb1435800, aType=Flush_Layout) at /z/stylo/hg-incubator/layout/base/PresShell.cpp:4007
#33 0x00007fffe6f7e94d in nsDocumentViewer::LoadComplete (this=0x7fffb34edfe0, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/layout/base/nsDocumentViewer.cpp:953
#34 0x00007fffe772771d in nsDocShell::EndPageLoad (this=0x7fffb141d800, aProgress=0x7fffb141d828, aChannel=0x7fffb0f30670, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/docshell/base/nsDocShell.cpp:7571
#35 0x00007fffe77259d3 in nsDocShell::OnStateChange (this=0x7fffb141d800, aProgress=0x7fffb141d828, aRequest=0x7fffb0f30670, aStateFlags=131088, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/docshell/base/nsDocShell.cpp:7375
#36 0x00007fffe3f27cce in nsDocLoader::DoFireOnStateChange (this=0x7fffb141d800, aProgress=0x7fffb141d828, aRequest=0x7fffb0f30670, aStateFlags=@0x7fffffffb324: 131088, aStatus=nsresult::NS_OK)
    at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:1255
#37 0x00007fffe3f277a9 in nsDocLoader::doStopDocumentLoad (this=0x7fffb141d800, request=0x7fffb0f30670, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:840
#38 0x00007fffe3f2626f in nsDocLoader::DocLoaderIsEmpty (this=0x7fffb141d800, aFlushLayout=true) at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:730
#39 0x00007fffe3f271ac in nsDocLoader::OnStopRequest (this=0x7fffb141d800, aRequest=0x7fffb17d1900, aCtxt=0x0, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:612
#40 0x00007fffe2c4798f in mozilla::net::nsLoadGroup::RemoveRequest (this=0x7fffb0fa8020, request=0x7fffb17d1900, ctxt=0x0, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/netwerk/base/nsLoadGroup.cpp:633
#41 0x00007fffe48a9dd0 in nsDocument::DoUnblockOnload (this=0x7fffb7b53000) at /z/stylo/hg-incubator/dom/base/nsDocument.cpp:8622
#42 0x00007fffe48a9b8d in nsDocument::UnblockOnload (this=0x7fffb7b53000, aFireSync=true) at /z/stylo/hg-incubator/dom/base/nsDocument.cpp:8550
#43 0x00007fffe489ab73 in nsDocument::DispatchContentLoadedEvents (this=0x7fffb7b53000) at /z/stylo/hg-incubator/dom/base/nsDocument.cpp:5058
#44 0x00007fffe4928d1a in mozilla::detail::RunnableMethodArguments<>::applyImpl<nsDocument, void (nsDocument::*)()>(nsDocument*, void (nsDocument::*)(), mozilla::Tuple<>&, mozilla::IndexSequence<>) (o=0x7fffb7b53000, 
    m=(void (nsDocument::*)(nsDocument * const)) 0x7fffe489a380 <nsDocument::DispatchContentLoadedEvents()>, args=...) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:791
#45 0x00007fffe4928c99 in mozilla::detail::RunnableMethodArguments<>::apply<nsDocument, void (nsDocument::*)()>(nsDocument*, void (nsDocument::*)()) (this=0x7fffb65a2e10, o=0x7fffb7b53000, 
    m=(void (nsDocument::*)(nsDocument * const)) 0x7fffe489a380 <nsDocument::DispatchContentLoadedEvents()>) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:797
#46 0x00007fffe4928b22 in mozilla::detail::RunnableMethodImpl<void (nsDocument::*)(), true, false>::Run (this=0x7fffb65a2dd0) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:826
#47 0x00007fffe2ad0ca8 in nsThread::ProcessNextEvent (this=0x7fffdfe3d300, aMayWait=false, aResult=0x7fffffffbd4e) at /z/stylo/hg-incubator/xpcom/threads/nsThread.cpp:1213
#48 0x00007fffe2b505fc in NS_ProcessNextEvent (aThread=0x7fffdfe3d300, aMayWait=false) at /z/stylo/hg-incubator/xpcom/glue/nsThreadUtils.cpp:381
#49 0x00007fffe33cb0e9 in mozilla::ipc::MessagePump::Run (this=0x7fffdfe98a80, aDelegate=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/glue/MessagePump.cpp:96
#50 0x00007fffe33296c5 in MessageLoop::RunInternal (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:232
#51 0x00007fffe3329645 in MessageLoop::RunHandler (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:225
#52 0x00007fffe332961d in MessageLoop::Run (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:205
#53 0x00007fffe6ad4003 in nsBaseAppShell::Run (this=0x7fffd34e7970) at /z/stylo/hg-incubator/widget/nsBaseAppShell.cpp:156
#54 0x00007fffe7cab192 in nsAppStartup::Run (this=0x7fffd34ef880) at /z/stylo/hg-incubator/toolkit/components/startup/nsAppStartup.cpp:283
#55 0x00007fffe7da48ac in XREMain::XRE_mainRun (this=0x7fffffffc728) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4485
#56 0x00007fffe7da5396 in XREMain::XRE_main (this=0x7fffffffc728, argc=4, argv=0x7fffffffdc08, aAppData=0x7fffffffc9e8) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4618
#57 0x00007fffe7da5b6f in XRE_main (argc=4, argv=0x7fffffffdc08, aAppData=0x7fffffffc9e8, aFlags=0) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4709
#58 0x000000000040633f in do_main (argc=4, argv=0x7fffffffdc08, envp=0x7fffffffdc30, xreDirectory=0x7ffff6b5eb40) at /z/stylo/hg-incubator/browser/app/nsBrowserApp.cpp:328
#59 0x0000000000405a62 in main (argc=4, argv=0x7fffffffdc08, envp=0x7fffffffdc30) at /z/stylo/hg-incubator/browser/app/nsBrowserApp.cpp:461
Priority: -- → P3
This fixed itself.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.