Closed Bug 1323702 Opened 8 years ago Closed 8 years ago

stylo: layout/mathml/crashtests/477740-1.xhtml fatally asserts with "IsGecko()" under nsXULElement::Clone

Categories

(Core :: CSS Parsing and Computation, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED
mozilla53
Tracking Status
firefox53 --- fixed

People

(Reporter: heycam, Assigned: heycam)

References

Details

Attachments

(1 file)

#0 0x00007fffe479c5ac in mozilla::DeclarationBlock::AsGecko (this=0x7fffb5ef3ac0) at /z/stylo/hg-incubator/obj/dist/include/mozilla/DeclarationBlockInlines.h:15 #1 0x00007fffe69325e8 in nsXULElement::Clone (this=0x7fffb6a49840, aNodeInfo=0x7fffbfefe880, aResult=0x7fffffff5468) at /z/stylo/hg-incubator/dom/xul/nsXULElement.cpp:385 #2 0x00007fffe495c434 in nsNodeUtils::CloneAndAdopt (aNode=0x7fffb6a49840, aClone=true, aDeep=false, aNewNodeInfoManager=0x0, aReparentScope=..., aNodesWithProperties=..., aParent=0x0, aResult=0x7fffffff55e8) at /z/stylo/hg-incubator/dom/base/nsNodeUtils.cpp:476 #3 0x00007fffe48fd221 in nsNodeUtils::Clone (aNode=0x7fffb6a49840, aDeep=false, aNewNodeInfoManager=0x0, aNodesWithProperties=..., aResult=0x7fffffff55e8) at /z/stylo/hg-incubator/dom/base/nsNodeUtils.h:192 #4 0x00007fffe494508e in nsNodeUtils::CloneNodeImpl (aNode=0x7fffb6a49840, aDeep=false, aResult=0x7fffffff5650) at /z/stylo/hg-incubator/dom/base/nsNodeUtils.cpp:412 #5 0x00007fffe4944fd2 in nsINode::CloneNode (this=0x7fffb6a49840, aDeep=false, aError=...) at /z/stylo/hg-incubator/dom/base/nsINode.cpp:2938 #6 0x00007fffe498323a in nsRange::CloneParentsBetween (aAncestor=0x7fffb177f000, aNode=0x7fffce1438c0, aClosestAncestor=0x7fffffff5930, aFarthestAncestor=0x7fffffff5928) at /z/stylo/hg-incubator/dom/base/nsRange.cpp:2249 #7 0x00007fffe49820a0 in nsRange::CutContents (this=0x7fffc14d0880, aFragment=0x7fffffff5c28) at /z/stylo/hg-incubator/dom/base/nsRange.cpp:2084 #8 0x00007fffe4983599 in nsRange::ExtractContents (this=0x7fffc14d0880, rv=...) at /z/stylo/hg-incubator/dom/base/nsRange.cpp:2161 #9 0x00007fffe4ec50ab in mozilla::dom::RangeBinding::extractContents (cx=0x7fffdbbb7000, obj=..., self=0x7fffc14d0880, args=...) at /z/stylo/hg-incubator/obj/dom/bindings/RangeBinding.cpp:892 #10 0x00007fffe58aa6f2 in mozilla::dom::GenericBindingMethod (cx=0x7fffdbbb7000, argc=0, vp=0x7fffd363e110) at /z/stylo/hg-incubator/dom/bindings/BindingUtils.cpp:2886 #11 0x00007fffe96a761d in js::CallJSNative (cx=0x7fffdbbb7000, native=0x7fffe58aa490 <mozilla::dom::GenericBindingMethod(JSContext*, unsigned int, JS::Value*)>, args=...) at /z/stylo/hg-incubator/js/src/jscntxtinlines.h:239 #12 0x00007fffe968b470 in js::InternalCallOrConstruct (cx=0x7fffdbbb7000, args=..., construct=js::NO_CONSTRUCT) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:457 #13 0x00007fffe968b86f in InternalCall (cx=0x7fffdbbb7000, args=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:502 #14 0x00007fffe968b66d in js::CallFromStack (cx=0x7fffdbbb7000, args=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:508 #15 0x00007fffe967fe76 in Interpret (cx=0x7fffdbbb7000, state=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:2919 #16 0x00007fffe96752d0 in js::RunScript (cx=0x7fffdbbb7000, state=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:403 #17 0x00007fffe968b568 in js::InternalCallOrConstruct (cx=0x7fffdbbb7000, args=..., construct=js::NO_CONSTRUCT) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:475 #18 0x00007fffe968b86f in InternalCall (cx=0x7fffdbbb7000, args=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:502 #19 0x00007fffe968b8e6 in js::Call (cx=0x7fffdbbb7000, fval=..., thisv=..., args=..., rval=...) at /z/stylo/hg-incubator/js/src/vm/Interpreter.cpp:521 #20 0x00007fffe937d1b0 in JS::Call (cx=0x7fffdbbb7000, thisv=..., fval=..., args=..., rval=...) at /z/stylo/hg-incubator/js/src/jsapi.cpp:2830 #21 0x00007fffe554405f in mozilla::dom::EventHandlerNonNull::Call (this=0x7fffb7283b00, cx=0x7fffdbbb7000, aThisVal=..., event=..., aRetVal=..., aRv=...) at /z/stylo/hg-incubator/obj/dom/bindings/EventHandlerBinding.cpp:259 #22 0x00007fffe5b85760 in mozilla::dom::EventHandlerNonNull::Call<nsISupports*> (this=0x7fffb7283b00, thisVal=@0x7fffb5ef3268: 0x7fffb9153000, event=..., aRetVal=..., aRv=..., aExecutionReason=0x7fffeacd9ce3 "EventHandlerNonNull", aExceptionHandling=mozilla::dom::CallbackObject::eReportExceptions, aCompartment=0x0) at /z/stylo/hg-incubator/obj/dist/include/mozilla/dom/EventHandlerBinding.h:361 #23 0x00007fffe5b761c1 in mozilla::JSEventHandler::HandleEvent (this=0x7fffb5ef3250, aEvent=0x7fffb58780a0) at /z/stylo/hg-incubator/dom/events/JSEventHandler.cpp:214 #24 0x00007fffe5b60891 in mozilla::EventListenerManager::HandleEventSubType (this=0x7fffb5bf8f20, aListener=0x7fffb5bf8f50, aDOMEvent=0x7fffb58780a0, aCurrentTarget=0x7fffb9153000) at /z/stylo/hg-incubator/dom/events/EventListenerManager.cpp:1133 #25 0x00007fffe5b60fbe in mozilla::EventListenerManager::HandleEventInternal (this=0x7fffb5bf8f20, aPresContext=0x7fffb808a000, aEvent=0x7fffffffa6a0, aDOMEvent=0x7fffffffa370, aCurrentTarget=0x7fffb9153000, aEventStatus=0x7fffffffa378) at /z/stylo/hg-incubator/dom/events/EventListenerManager.cpp:1286 #26 0x00007fffe5b8af7d in mozilla::EventListenerManager::HandleEvent (this=0x7fffb5bf8f20, aPresContext=0x7fffb808a000, aEvent=0x7fffffffa6a0, aDOMEvent=0x7fffffffa370, aCurrentTarget=0x7fffb9153000, aEventStatus=0x7fffffffa378) at /z/stylo/hg-incubator/obj/dist/include/mozilla/EventListenerManager.h:374 #27 0x00007fffe5b7dd38 in mozilla::EventTargetChainItem::HandleEvent (this=0x7fffbff5c008, aVisitor=..., aCd=...) at /z/stylo/hg-incubator/dom/events/EventDispatcher.cpp:314 #28 0x00007fffe5b5880a in mozilla::EventTargetChainItem::HandleEventTargetChain (aChain=..., aVisitor=..., aCallback=0x0, aCd=...) at /z/stylo/hg-incubator/dom/events/EventDispatcher.cpp:463 #29 0x00007fffe5b59ddf in mozilla::EventDispatcher::Dispatch (aTarget=0x7fffb4c11820, aPresContext=0x7fffb808a000, aEvent=0x7fffffffa6a0, aDOMEvent=0x0, aEventStatus=0x7fffffffa700, aCallback=0x0, aTargets=0x0) at /z/stylo/hg-incubator/dom/events/EventDispatcher.cpp:820 #30 0x00007fffe6f7eef5 in nsDocumentViewer::LoadComplete (this=0x7fffb119cc50, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/layout/base/nsDocumentViewer.cpp:1024 #31 0x00007fffe772771d in nsDocShell::EndPageLoad (this=0x7fffb1536000, aProgress=0x7fffb1536028, aChannel=0x7fffb5dd3360, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/docshell/base/nsDocShell.cpp:7571 #32 0x00007fffe77259d3 in nsDocShell::OnStateChange (this=0x7fffb1536000, aProgress=0x7fffb1536028, aRequest=0x7fffb5dd3360, aStateFlags=131088, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/docshell/base/nsDocShell.cpp:7375 #33 0x00007fffe3f27cce in nsDocLoader::DoFireOnStateChange (this=0x7fffb1536000, aProgress=0x7fffb1536028, aRequest=0x7fffb5dd3360, aStateFlags=@0x7fffffffb324: 131088, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:1255 #34 0x00007fffe3f277a9 in nsDocLoader::doStopDocumentLoad (this=0x7fffb1536000, request=0x7fffb5dd3360, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:840 #35 0x00007fffe3f2626f in nsDocLoader::DocLoaderIsEmpty (this=0x7fffb1536000, aFlushLayout=true) at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:730 #36 0x00007fffe3f271ac in nsDocLoader::OnStopRequest (this=0x7fffb1536000, aRequest=0x7fffb39a0480, aCtxt=0x0, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/uriloader/base/nsDocLoader.cpp:612 #37 0x00007fffe2c4798f in mozilla::net::nsLoadGroup::RemoveRequest (this=0x7fffb369ff10, request=0x7fffb39a0480, ctxt=0x0, aStatus=nsresult::NS_OK) at /z/stylo/hg-incubator/netwerk/base/nsLoadGroup.cpp:633 #38 0x00007fffe48a9dd0 in nsDocument::DoUnblockOnload (this=0x7fffb177f000) at /z/stylo/hg-incubator/dom/base/nsDocument.cpp:8622 #39 0x00007fffe48a9b8d in nsDocument::UnblockOnload (this=0x7fffb177f000, aFireSync=true) at /z/stylo/hg-incubator/dom/base/nsDocument.cpp:8550 #40 0x00007fffe489ab73 in nsDocument::DispatchContentLoadedEvents (this=0x7fffb177f000) at /z/stylo/hg-incubator/dom/base/nsDocument.cpp:5058 #41 0x00007fffe4928d1a in mozilla::detail::RunnableMethodArguments<>::applyImpl<nsDocument, void (nsDocument::*)()>(nsDocument*, void (nsDocument::*)(), mozilla::Tuple<>&, mozilla::IndexSequence<>) (o=0x7fffb177f000, m=(void (nsDocument::*)(nsDocument * const)) 0x7fffe489a380 <nsDocument::DispatchContentLoadedEvents()>, args=...) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:791 #42 0x00007fffe4928c99 in mozilla::detail::RunnableMethodArguments<>::apply<nsDocument, void (nsDocument::*)()>(nsDocument*, void (nsDocument::*)()) (this=0x7fffb8550460, o=0x7fffb177f000, m=(void (nsDocument::*)(nsDocument * const)) 0x7fffe489a380 <nsDocument::DispatchContentLoadedEvents()>) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:797 #43 0x00007fffe4928b22 in mozilla::detail::RunnableMethodImpl<void (nsDocument::*)(), true, false>::Run (this=0x7fffb8550420) at /z/stylo/hg-incubator/obj/dist/include/nsThreadUtils.h:826 #44 0x00007fffe2ad0ca8 in nsThread::ProcessNextEvent (this=0x7fffdfe3d300, aMayWait=false, aResult=0x7fffffffbd4e) at /z/stylo/hg-incubator/xpcom/threads/nsThread.cpp:1213 #45 0x00007fffe2b505fc in NS_ProcessNextEvent (aThread=0x7fffdfe3d300, aMayWait=false) at /z/stylo/hg-incubator/xpcom/glue/nsThreadUtils.cpp:381 #46 0x00007fffe33cb0e9 in mozilla::ipc::MessagePump::Run (this=0x7fffdfe98a80, aDelegate=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/glue/MessagePump.cpp:96 #47 0x00007fffe33296c5 in MessageLoop::RunInternal (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:232 #48 0x00007fffe3329645 in MessageLoop::RunHandler (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:225 #49 0x00007fffe332961d in MessageLoop::Run (this=0x7ffff6bb2410) at /z/stylo/hg-incubator/ipc/chromium/src/base/message_loop.cc:205 #50 0x00007fffe6ad4003 in nsBaseAppShell::Run (this=0x7fffd36e7970) at /z/stylo/hg-incubator/widget/nsBaseAppShell.cpp:156 #51 0x00007fffe7cab192 in nsAppStartup::Run (this=0x7fffd36ef880) at /z/stylo/hg-incubator/toolkit/components/startup/nsAppStartup.cpp:283 #52 0x00007fffe7da48ac in XREMain::XRE_mainRun (this=0x7fffffffc728) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4485 #53 0x00007fffe7da5396 in XREMain::XRE_main (this=0x7fffffffc728, argc=4, argv=0x7fffffffdc08, aAppData=0x7fffffffc9e8) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4618 #54 0x00007fffe7da5b6f in XRE_main (argc=4, argv=0x7fffffffdc08, aAppData=0x7fffffffc9e8, aFlags=0) at /z/stylo/hg-incubator/toolkit/xre/nsAppRunner.cpp:4709 #55 0x000000000040633f in do_main (argc=4, argv=0x7fffffffdc08, envp=0x7fffffffdc30, xreDirectory=0x7ffff6b5eb40) at /z/stylo/hg-incubator/browser/app/nsBrowserApp.cpp:328 #56 0x0000000000405a62 in main (argc=4, argv=0x7fffffffdc08, envp=0x7fffffffdc30) at /z/stylo/hg-incubator/browser/app/nsBrowserApp.cpp:461
Assignee: nobody → cam
Comment on attachment 8824907 [details] Bug 1323702 - Support cloning XUL element style="" attributes in Servo-styled documents. https://reviewboard.mozilla.org/r/103236/#review103984
Attachment #8824907 - Flags: review?(bobbyholley) → review+
Pushed by cmccormack@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/185c510b7d16 Support cloning XUL element style="" attributes in Servo-styled documents. r=bholley
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla53
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: