394700 - "ASSERTION: Item was successful, but node from collection was null!" involving DOMNodeRemoved event

Status: RESOLVED FIXED

(Core :: DOM: Core & HTML, defect)

Description

[Jesse Ruderman]

Attachment: testcase (from bug 339501)

Loading the testcase triggers:

###!!! ASSERTION: Item was successful, but node from collection was null!: 'node', file /Users/jruderman/trunk/mozilla/layout/forms/nsListControlFrame.cpp, line 1218

###!!! ASSERTION: could not get option element by index!: 'optionElement != nsnull', file /Users/jruderman/trunk/mozilla/layout/forms/nsListControlFrame.cpp, line 1177

Comment 1

[Olli Pettay [:smaug][[e-mail]]]

Attachment: when rebuilding options array, update the selectedIndex too

RebuildOptionsArray() is called only when something "unusual" has happened, like
mutation event listener has modified options list.
Feel free to approval1.9+ too.

Comment 2

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Comment on attachment 279424 [details] [diff] [review]
when rebuilding options array, update the selectedIndex too

Though it would be great to get a mochitest too.

Comment 3

[Olli Pettay [:smaug][[e-mail]]]

I'll check in a mochitest too.