Skip to content

Crashes for a bit then segfaults on MathJax-heavy page (also cites min-/max-content size. idk) #36481

Description

@nabijaczleweli

Describe the bug:
Open https://foreign.nabijaczleweli.xyz/pub/sus/sy/ba/ka/018.%20Mean-shift%20clustering%20%E2%80%94%20blogn%EA%9E%8Ct%20%E2%80%94%20nabijaczleweli.htm. Let it sit for a bit. Scroll. Segfault.
(If you don't let it sit you may get a fullscreen stracktrace instead.)

nabijaczleweli@tarta:~/uwu/s/servo$ ./servo https://foreign.nabijaczleweli.xyz/pub/sus/sy/ba/ka/018.%20Mean-shift%20clustering%20%E2%80%94%20blogn%EA%9E%8Ct%20%E2%80%94%20nabijaczleweli.htm &
[1] 2899518
nabijaczleweli@tarta:~/uwu/s/servo$ [2025-04-12T02:56:50Z ERROR script::dom::bindings::error] Error at https://foreign.nabijaczleweli.xyz/pub/sus/sy/ba/ka/f/color.js:1:6816 MathJax is not defined
the max-content size should never be smaller than the min-content size (thread Script(1,1), at components/layout_2020/table/layout.rs:331)
[2025-04-12T02:56:52Z ERROR servoshell::panic_hook] the max-content size should never be smaller than the min-content size
[2025-04-12T02:57:24Z ERROR script::dom::bindings::error] Error at https://foreign.nabijaczleweli.xyz/pub/sus/sy/ba/ka/f/color.js:1:6816 MathJax is not defined
the max-content size should never be smaller than the min-content size (thread StyleThread#1, at components/layout_2020/table/layout.rs:331)
[2025-04-12T02:57:26Z ERROR servoshell::panic_hook] the max-content size should never be smaller than the min-content size
assertion failed: self.has_font(font.font_key) (thread WRRenderBackend#0, at /home/runner/.cargo/git/checkouts/webrender-a8b399ecb6c2da85/8846253/wr_glyph_rasterizer/src/rasterizer.rs:69)
[2025-04-12T02:57:28Z ERROR servoshell::panic_hook] assertion failed: self.has_font(font.font_key)
called `Result::unwrap()` on an `Err` value: "SendError(..)" (thread main, at /home/runner/.cargo/git/checkouts/webrender-a8b399ecb6c2da85/8846253/webrender/src/render_api.rs:1288)
[2025-04-12T02:57:28Z ERROR servoshell::panic_hook] called `Result::unwrap()` on an `Err` value: "SendError(..)"
mozilla::detail::MutexImpl::~MutexImpl: pthread_mutex_destroy failed: Device or resource busy
Caught signal 11 in thread "main"
   0: servoshell::backtrace::print
   1: servoshell::crash_handler::install::handler
   2: <unknown>
   3: _ZN7mozilla6detail9MutexImplD2Ev
   4: __run_exit_handlers
             at ./stdlib/exit.c:116:8
   5: __GI_exit
             at ./stdlib/exit.c:146:3
   6: __libc_start_call_main
             at ./csu/../sysdeps/nptl/libc_start_call_main.h:74:3
   7: __libc_start_main_impl
             at ./csu/../csu/libc-start.c:360:3
   8: _start

[1]+  Segmentation fault      ./servo https://foreign.nabijaczleweli.xyz/pub/sus/sy/ba/ka/018.%20Mean-shift%20clustering%20%E2%80%94%20blogn%EA%9E%8Ct%20%E2%80%94%20nabijaczleweli.htm

Win32 servo doesn't seem to want to log but it also hardcrashes.

Platform:
Reproed with 2025-04-11 binaries from https://servo.org/download/ on Windows 10 and Bookworm.

Tarball of triggering page: demo.tar.gz

Metadata

Metadata

Assignees

No one assigned

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions