1244894 - "Assertion failure: !Failed(), at ErrorResult.h:103" - nsEditor::SplitNodeDeep - nsHTMLEditRules::BustUpInlinesAtRangeEndpoints

Status: RESOLVED FIXED

(Core :: DOM: Editor, defect)

Description

[Jesse Ruderman]

Attachment: testcase

Assertion failure: !Failed(), at ErrorResult.h:103

> * thread #1: tid = 0x87b05e, 0x0000000102877388 XUL`mozilla::ErrorResult::~ErrorResult(this=0x00007fff5fbf63f0) + 88 at ErrorResult.h:103, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0x0)
>   * frame #0: 0x0000000102877388 XUL`mozilla::ErrorResult::~ErrorResult(this=0x00007fff5fbf63f0) + 88 at ErrorResult.h:103
>     frame #1: 0x00000001028703c5 XUL`mozilla::ErrorResult::~ErrorResult(this=0x00007fff5fbf63f0) + 21 at ErrorResult.h:100
>     frame #2: 0x00000001061ffe63 XUL`nsEditor::SplitNodeDeep(this=0x000000013f34c400, aNode=0x00000001206e68c0, aSplitPointParent=0x000000013bbf9700, aSplitPointOffset=0, aEmptyContainers=no, aOutLeftNode=0x0000000000000000, aOutRightNode=0x0000000000000000) + 547 at nsEditor.cpp:3844
>     frame #3: 0x00000001062770e7 XUL`nsHTMLEditRules::BustUpInlinesAtRangeEndpoints(this=0x00000001244c7800, item=0x000000013f3d25e0) + 967 at nsHTMLEditRules.cpp:6145

Comment 1

[Jesse Ruderman]

Attachment: stack

Comment 2

[Tim Taubert [:ttaubert] (inactive)]

Attachment: another testcase

Here's another testcase with slightly different call stack, but still including SplitNodeDeeop. Taken from WebKit's crash test suite.

Comment 3

[Kyle Huey (Exited; not receiving bugmail, old account, do not use)]

Attachment: Patch

Comment 4

[Boris Zbarsky [:bzbarsky]]

Comment on attachment 8715923 [details] [diff] [review]
Patch

r=me

Comment 5

[Pulsebot]

https://hg.mozilla.org/integration/mozilla-inbound/rev/a1ab58495944

Comment 6

[Phil Ringnalda (:philor)]

https://hg.mozilla.org/mozilla-central/rev/a1ab58495944