Closed Bug 1517310 Opened 1 year ago Closed 1 year ago

Assertion failure: content == pc->Document()->GetRootElement() (Root element is the only case for this fallback path to be triggered), at /builds/worker/workspace/build/src/layout/base/nsLayoutUtils.cpp:9754

Categories

(Core :: Layout: Columns, defect, P3)

defect

Tracking

()

RESOLVED DUPLICATE of bug 1520722
Tracking Status
firefox66 --- affected

People

(Reporter: jkratzer, Unassigned)

References

(Blocks 2 open bugs)

Details

(Keywords: assertion, testcase)

Attachments

(1 file)

Attached file testcase.html
Testcase found while fuzzing mozilla-central rev 5826b2352ac0.

Assertion failure: content == pc->Document()->GetRootElement() (Root element is the only case for this fallback path to be triggered), at /builds/worker/workspace/build/src/layout/base/nsLayoutUtils.cpp:9754

Unfortunately we still don't have symbolized debug builds so no stack trace is available.
Flags: in-testsuite?
Column-span: all on a <details>, seems relevant to recent patches in multicol stuff :)
Component: Layout → Layout: Columns
Tentatively P3, since we haven't shipped column-span yet.
Priority: -- → P3
(In reply to Emilio Cobos Álvarez (:emilio) from comment #1)
> Column-span: all on a <details>

Likely to be a regression from bug 1508762, then.
Blocks: 1508762
Flags: needinfo?(aethanyc)

Before the assertion in comment 0 happens, I see a few other assertions like

###!!! ASSERTION: frame tree not empty, but caller reported complete status: 'aSubtreeRoot->GetPrevInFlow().

So this doesn't seem like a regression from bug 1508762, but more like the symptom in bug 1520722. I just test locally with patches from bug 1520722, and this bug is fixed.

No longer blocks: 1508762
Status: NEW → RESOLVED
Closed: 1 year ago
Flags: needinfo?(aethanyc)
Resolution: --- → DUPLICATE
Duplicate of bug: 1520722
You need to log in before you can comment on or make changes to this bug.