Closed Bug 1253336 Opened 8 years ago Closed 6 years ago

"Assertion failure: uint32_t(startOffset) <= startParent->Length() && uint32_t(endOffset) <= endParent->Length(), at dom/base/nsContentIterator.cpp:1279" with createShadowRoot, textarea

Categories

(Core :: DOM: Core & HTML, defect)

defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME
Tracking Status
firefox47 --- affected

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: assertion, testcase, Whiteboard: btpp-followup-2016-03-10)

Attachments

(3 files)

Attached file testcase
With:
  user_pref("dom.webcomponents.enabled", true);

Assertion failure: uint32_t(startOffset) <= startParent->Length() && uint32_t(endOffset) <= endParent->Length(), at dom/base/nsContentIterator.cpp:1279
Attached file stack
William will know what's up here.
Flags: needinfo?(wchen)
Whiteboard: btpp-followup-2016-03-10
William will look at this after his patches for the new Shadow DOM API land.
Flags: needinfo?(wchen)
Our fuzzers are still hitting this issue.
Flags: in-testsuite?
See Also: → 1414893
I can't reproduce this. attachShadow clearly doesn't work with documentElement anymore, so I tried some random div.
tried also having div as root
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WORKSFORME
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: