1517310 - Assertion failure: content == pc->Document()->GetRootElement() (Root element is the only case for this fallback path to be triggered), at /builds/worker/workspace/build/src/layout/base/nsLayoutUtils.cpp:9754

Status: RESOLVED DUPLICATE of bug 1520722

(Core :: Layout: Columns, defect, P3)

Description

[Jason Kratzer [:jkratzer]]

Attachment: testcase.html

Testcase found while fuzzing mozilla-central rev 5826b2352ac0.

Assertion failure: content == pc->Document()->GetRootElement() (Root element is the only case for this fallback path to be triggered), at /builds/worker/workspace/build/src/layout/base/nsLayoutUtils.cpp:9754

Unfortunately we still don't have symbolized debug builds so no stack trace is available.

Comment 1

[Emilio Cobos Álvarez (:emilio)]

Column-span: all on a <details>, seems relevant to recent patches in multicol stuff :)

Comment 2

[Jonathan Watt [:jwatt]]

Tentatively P3, since we haven't shipped column-span yet.

Comment 3

[Daniel Holbert [:dholbert]]

(In reply to Emilio Cobos Álvarez (:emilio) from comment #1)
> Column-span: all on a <details>

Likely to be a regression from bug 1508762, then.

Comment 4

[Ting-Yu Lin [:TYLin] (PST, UTC-8)]

Before the assertion in comment 0 happens, I see a few other assertions like

###!!! ASSERTION: frame tree not empty, but caller reported complete status: 'aSubtreeRoot->GetPrevInFlow().

So this doesn't seem like a regression from bug 1508762, but more like the symptom in bug 1520722. I just test locally with patches from bug 1520722, and this bug is fixed.