590421 - "ASSERTION: Must have the same owner document" with document fragments, GC

Status: RESOLVED WORKSFORME

(Core :: DOM: Core & HTML, defect)

Description

[Jesse Ruderman]

Attachment: testcase (requires extension to be installed)

The testcase needs to be able to trigger a GC, so you'll need to install https://www.squarefree.com/extensions/domFuzzLite.xpi or modify it to trigger a GC in another way.

###!!! ASSERTION: Must have the same owner document: 'HasSameOwnerDoc(NODE_FROM(aParent, aDocument))', file /builds/slave/mozilla-central-macosx-debug/build/content/base/src/nsGenericElement.cpp, line 2828

Comment 1

[Jesse Ruderman]

Attachment: stack trace

Comment 2

[Boris Zbarsky [:bzbarsky]]

Peter, are we failing to adopt due to the owner doc of the target having gone away or something?  And then pressing on?

Olli, weren't we going to hold strong refs to owner docs?

Comment 3

[Jesse Ruderman]

I think this situation can lead to additional assertions, such as:

###!!! ASSERTION: Element without owner document: 'Error', file content/base/src/nsGenericElement.cpp, line 3424

###!!! ASSERTION: need base URI: 'aBaseURI', file layout/style/nsCSSParser.cpp, line 1074

Comment 4

[Jesse Ruderman]

WFM