Closed Bug 1281715 Opened 8 years ago Closed 6 years ago

"Assertion failure: mElements.Contains(cur)" with createShadowRoot and removing stylesheet

Categories

(Core :: DOM: Core & HTML, defect, P2)

defect

Tracking

()

RESOLVED FIXED
mozilla57
Tracking Status
firefox-esr52 --- disabled
firefox56 --- disabled
firefox57 --- fixed

People

(Reporter: jruderman, Assigned: emilio)

References

Details

(Keywords: assertion, testcase)

Attachments

(2 files)

Attached file testcase
Assertion failure: mElements.Contains(cur), at layout/style/nsCSSRuleProcessor.cpp:4099

DOMFuzz found this by modifying https://dxr.mozilla.org/mozilla-central/source/layout/reftests/css-display/display-contents-shadow-dom-1.html
Attached file stack
Flags: needinfo?(william)
Priority: -- → P2
Tested with webcomponents preffed on and Stylo preffed off.

Fix range:
INFO: First good revision: 3c698f2b2eed6e29d6346c798e6234bd5b2696c4
INFO: Last bad revision: bfea6090979c54bea1d4b7ef56a8fa8f641da39a
INFO: Pushlog:
https://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=bfea6090979c54bea1d4b7ef56a8fa8f641da39a&tochange=3c698f2b2eed6e29d6346c798e6234bd5b2696c4

Presumably something in Emilio's push. NI myself to land a crashtest.
Assignee: nobody → emilio
Status: NEW → RESOLVED
Has Regression Range: --- → no
Closed: 6 years ago
Flags: needinfo?(ryanvm)
Flags: in-testsuite?
Resolution: --- → FIXED
Target Milestone: --- → mozilla57
Flags: needinfo?(ryanvm)
Flags: in-testsuite?
Flags: in-testsuite+
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.