Closed Bug 931450 Opened 11 years ago Closed 11 years ago

"ASSERTION: Layer already in list???" and crash with position:sticky

Categories

(Core :: Graphics: Layers, defect)

x86_64
All
defect
Not set
critical

Tracking

()

VERIFIED FIXED
mozilla28

People

(Reporter: jruderman, Assigned: roc)

References

Details

(Keywords: assertion, crash, testcase)

Attachments

(2 files)

Attached file testcase (deleted) —
With:
  user_pref("layers.force-active", true);

###!!! ASSERTION: Layer already in list???: '!mNewChildLayers.Contains(ownLayer)', file /Users/jruderman/trees/mozilla-central/layout/base/FrameLayerBuilder.cpp, line 2185

Followed by a crash due to too-much-recursion in mozilla::layers::APZCTreeManager::UpdatePanZoomControllerTree.
Attached file stacks (deleted) —
Sounds not unlike bug 919434.
Blocks: 916315
As suggested by bug 919434 comment 7:

I verified that bug 919144 fixed this, using targeted builds. (Its parent cset, 21df28ade757, reproduces this bug for me -- whereas the cset for the last patch in bug 919144, ff63da70a65f, does not reproduce this bug for me.)

 --> Resolving as FIXED by bug 919144.

(Also: I'm using 64-bit Linux --> broadening Platform from Mac to All)
Status: NEW → RESOLVED
Closed: 11 years ago
Depends on: 919144
Flags: in-testsuite?
OS: Mac OS X → All
Resolution: --- → FIXED
Assignee: nobody → roc
Target Milestone: --- → mozilla28
Reproduced on Nightly 2013-10-26-mozilla-central-debug.
Verified fixed Nightly 2013-12-08-mozilla-central-debug, Win 7 x64.
Status: RESOLVED → VERIFIED
Landed the crashtest:
https://hg.mozilla.org/integration/mozilla-inbound/rev/cd8bae626e62
Flags: in-testsuite? → in-testsuite+
https://hg.mozilla.org/mozilla-central/rev/cd8bae626e62
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: