Join GitHub today
GitHub is home to over 50 million developers working together to host and review code, manage projects, and build software together.
Sign up"invalid parent" error from WebRender #22901
Closed
Comments
|
|
Here's a testcase for this found via fuzzing (not by reducing that page, sadly). <li style="list-style-position: inside; list-style-image: url(#); mix-blend-mode: hue; perspective: 1px"></li>
<ul style="transform: scale3d(1, 1, -1)"></ul>I don't even know what's happening here, removing any single thing makes the bug disappear. VMware, Inc.
llvmpipe (LLVM 7.0, 256 bits)
3.3 (Core Profile) Mesa 18.3.4
invalid parent! (thread WRRenderBackend#0, at src/libcore/option.rs:1038)
stack backtrace:
0: 0x55555d084ed6 - backtrace::backtrace::libunwind::trace::h8af3b710f1a5e12e
at /home/mateon/.cargo/registry/src/github.com-1ecc6299db9ec823/backtrace-0.3.9/src/backtrace/libunwind.rs:53
- backtrace::backtrace::trace::h2a1223234ae0346f
at /home/mateon/.cargo/registry/src/github.com-1ecc6299db9ec823/backtrace-0.3.9/src/backtrace/mod.rs:42
1: 0x55555d07f4e3 - backtrace::capture::Backtrace::new_unresolved::h2dd57ce7b77a7435
at /home/mateon/.cargo/registry/src/github.com-1ecc6299db9ec823/backtrace-0.3.9/src/capture.rs:88
2: 0x55555d07f43d - backtrace::capture::Backtrace::new::h8c6b161078e28d12
at /home/mateon/.cargo/registry/src/github.com-1ecc6299db9ec823/backtrace-0.3.9/src/capture.rs:63
3: 0x555556037351 - servo::main::{{closure}}::h5fe9a894213f10e8
at ports/servo/non_android_main.rs:110
4: 0x55555f172a48 - rust_panic_with_hook
at src/libstd/panicking.rs:482
5: 0x55555f1724e1 - continue_panic_fmt
at src/libstd/panicking.rs:385
6: 0x55555f1723c5 - rust_begin_unwind
7: 0x55555f191cac - panic_fmt
at src/libcore/panicking.rs:85
8: 0x55555f191d16 - expect_failed
at src/libcore/option.rs:1038
9: 0x55555bf70d08 - <core::option::Option<T>>::expect::h2077cf2f1761623b
at /rustc/0ea22717a1e01fa535534b85a5347a7e49fc79de/src/libcore/option.rs:312
10: 0x55555bf07fbe - webrender::clip_scroll_tree::ClipScrollTree::get_relative_transform::h1ca9fa94c06d5ec4
at /home/mateon/.cargo/git/checkouts/webrender-c3596abe1cf4f320/2ff8da0/webrender/src/clip_scroll_tree.rs:143
11: 0x55555bfcfad8 - <webrender::prim_store::CoordinateSpaceMapping<F, T>>::new::h58eaa1735cfe8b9a
at /home/mateon/.cargo/git/checkouts/webrender-c3596abe1cf4f320/2ff8da0/webrender/src/prim_store/mod.rs:173
12: 0x55555bfd11ff - <webrender::prim_store::SpaceMapper<F, T>>::set_target_spatial_node::hafd133fc48b0837e
at /home/mateon/.cargo/git/checkouts/webrender-c3596abe1cf4f320/2ff8da0/webrender/src/prim_store/mod.rs:227
13: 0x55555c2305d7 - webrender::picture::PicturePrimitive::post_update::hfe5de6c621314b6c
at /home/mateon/.cargo/git/checkouts/webrender-c3596abe1cf4f320/2ff8da0/webrender/src/picture.rs:2216
14: 0x55555bfd5af0 - webrender::prim_store::PrimitiveStore::update_picture::h6d7496bcebd87ada
at /home/mateon/.cargo/git/checkouts/webrender-c3596abe1cf4f320/2ff8da0/webrender/src/prim_store/mod.rs:1685
15: 0x55555bfd5a76 - webrender::prim_store::PrimitiveStore::update_picture::h6d7496bcebd87ada
at /home/mateon/.cargo/git/checkouts/webrender-c3596abe1cf4f320/2ff8da0/webrender/src/prim_store/mod.rs:1675
16: 0x55555bfd5a76 - webrender::prim_store::PrimitiveStore::update_picture::h6d7496bcebd87ada
at /home/mateon/.cargo/git/checkouts/webrender-c3596abe1cf4f320/2ff8da0/webrender/src/prim_store/mod.rs:1675
17: 0x55555bf0dbb2 - webrender::frame_builder::FrameBuilder::build_layer_screen_rects_and_cull_layers::h073e8eb504780a6b
at /home/mateon/.cargo/git/checkouts/webrender-c3596abe1cf4f320/2ff8da0/webrender/src/frame_builder.rs:272
18: 0x55555bf0ea1b - webrender::frame_builder::FrameBuilder::build::hfde7ca6a8979deb4
at /home/mateon/.cargo/git/checkouts/webrender-c3596abe1cf4f320/2ff8da0/webrender/src/frame_builder.rs:410
19: 0x55555bf14afb - webrender::render_backend::Document::build_frame::h22890e0858018227
at /home/mateon/.cargo/git/checkouts/webrender-c3596abe1cf4f320/2ff8da0/webrender/src/render_backend.rs:509
20: 0x55555bf1d2f7 - webrender::render_backend::RenderBackend::update_document::hc2bab5247d0fc41e
at /home/mateon/.cargo/git/checkouts/webrender-c3596abe1cf4f320/2ff8da0/webrender/src/render_backend.rs:1400
21: 0x55555bf1765a - webrender::render_backend::RenderBackend::run::h8aebd3ecfa49681d
at /home/mateon/.cargo/git/checkouts/webrender-c3596abe1cf4f320/2ff8da0/webrender/src/render_backend.rs:886
22: 0x55555bb881b2 - webrender::renderer::Renderer::new::{{closure}}::hbb780a8e14c0e71a
at /home/mateon/.cargo/git/checkouts/webrender-c3596abe1cf4f320/2ff8da0/webrender/src/renderer.rs:1956
23: 0x55555be3f1b2 - std::sys_common::backtrace::__rust_begin_short_backtrace::h64155958861bdc21
at /rustc/0ea22717a1e01fa535534b85a5347a7e49fc79de/src/libstd/sys_common/backtrace.rs:136
24: 0x55555c1a9665 - std::thread::Builder::spawn_unchecked::{{closure}}::{{closure}}::h2edbc6c0b6e3b92a
at /rustc/0ea22717a1e01fa535534b85a5347a7e49fc79de/src/libstd/thread/mod.rs:469
25: 0x55555bb33315 - <std::panic::AssertUnwindSafe<F> as core::ops::function::FnOnce<()>>::call_once::h1202b28be54b21bf
at /rustc/0ea22717a1e01fa535534b85a5347a7e49fc79de/src/libstd/panic.rs:309
26: 0x55555beb6db9 - std::panicking::try::do_call::hd50943108b4bf68e
at /rustc/0ea22717a1e01fa535534b85a5347a7e49fc79de/src/libstd/panicking.rs:297
27: 0x55555f17d5f9 - __rust_maybe_catch_panic
at src/libpanic_unwind/lib.rs:87
28: 0x55555beb67bf - std::panicking::try::hee6dd1d99122d758
at /rustc/0ea22717a1e01fa535534b85a5347a7e49fc79de/src/libstd/panicking.rs:276
29: 0x55555bb396c5 - std::panic::catch_unwind::h444e73b71ae527d7
at /rustc/0ea22717a1e01fa535534b85a5347a7e49fc79de/src/libstd/panic.rs:388
30: 0x55555c1a905f - std::thread::Builder::spawn_unchecked::{{closure}}::haba5c0e107442376
at /rustc/0ea22717a1e01fa535534b85a5347a7e49fc79de/src/libstd/thread/mod.rs:468
31: 0x55555c202fa7 - <F as alloc::boxed::FnBox<A>>::call_box::hf2aee73a3c94a587
at /rustc/0ea22717a1e01fa535534b85a5347a7e49fc79de/src/liballoc/boxed.rs:749
32: 0x55555f17c93d - call_once<(),()>
at /rustc/0ea22717a1e01fa535534b85a5347a7e49fc79de/src/liballoc/boxed.rs:759
- start_thread
at src/libstd/sys_common/thread.rs:14
- thread_start
at src/libstd/sys/unix/thread.rs:80
33: 0x7ffff6f71fa2 - start_thread
34: 0x7ffff6e8682e - clone
35: 0x0 - <unknown>
[2019-03-26T16:39:31Z ERROR servo] invalid parent!(This is followed by a hang, rather than Servo closing, which meant a lot of time wasted while reducing.) |
|
This crash also reproduces on http://diana-adrianne.com/purecss-francine/ Here's an example reduced from that page: <style>
body .paper .container .head .face .eyebrow:before{content:"";display:block;transform:rotate(35deg);}
body .paper .container .head .face .eyebrow.left{filter:blur(2px);transform:scaleX(-1) rotate(-9deg);}
body .paper .container .head .face .mouth:after{transform:rotate(7deg);content:"";display:block;}
</style>
<div class="paper">
<div class="container">
<div class="head">
<div class="face">
<div class="eyebrow left">
</div>
<div class="mouth"> |
|
I wasn't able to reproduce this on http://acko.net/ or with any of the reduced test cases. However, http://diana-adrianne.com/purecss-francine/ still triggers this. Strange. |
|
Happy coincidence! |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
http://acko.net/