334132 - ASSERTION: Placeholder relationship should have been torn down

Status: RESOLVED DUPLICATE of bug 316267

(Core :: Layout, defect)

Description

[Jesse Ruderman]

###!!! ASSERTION: Placeholder relationship should have been torn down: '!shell->FrameManager()->GetPlaceholderFrameFor(mOutOfFlowFrame)', file /Users/admin/trunk/mozilla/layout/generic/nsPlaceholderFrame.cpp, line 89

The testcase is strange.  It involves setting "content: 'generated'" on the root (html) element, which I wouldn't expect to have any effect (since it isn't a pseudo-element) and which doesn't have a visible effect.

Marking security-sensitive for now because when I asked dbaron about this assertion failure (before I created a reduced testcase), he said it "may be a sign of potential future memory corruption".

This might be a dup of bug 316267.

Comment 1

[Jesse Ruderman]

Attachment: testcase

Comment 2

[Boris Zbarsky [:bzbarsky]]

Yeah, this is a dup.

*** This bug has been marked as a duplicate of 316267 ***

Comment 3

[Jesse Ruderman]

Dup of a public bug, and doesn't sound like this is a security hole, so making public.