Closed Bug 1514511 Opened 5 years ago Closed 5 years ago

Crash in FlushPendingNotifications from nsTextInputSelectionImpl::ScrollSelectionIntoView

Categories

(Core :: Layout, defect, P3)

defect

Tracking

()

RESOLVED FIXED
mozilla66
Tracking Status
firefox66 --- fixed

People

(Reporter: emilio, Assigned: emilio)

References

(Depends on 1 open bug)

Details

Attachments

(2 files)

Flushing just the shell is not quite sound, since it doesn't flush parent
documents, and also has the side effect of ensuring the shell is not destroying
and the document is not in the bfcache.
I think this is slightly better fix given the amount of offenders we have that
don't make sure this is the case.

Generally we get through the flush just fine, but there's code that relies on
nsIDocument::GetShell to return something meaningful, like the styleset code
that gets a pres context.
Priority: -- → P3
Assignee: nobody → emilio
Pushed by emilio@crisal.io:
https://hg.mozilla.org/integration/autoland/rev/da799f611f33
Flush the document, not the shell, in Selection::ScrollIntoView. r=bzbarsky
https://hg.mozilla.org/integration/autoland/rev/8f22c3daa581
Don't flush if the document is in the bfcache. r=bzbarsky
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla66
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: