Closed
Bug 335995
Opened 19 years ago
Closed 18 years ago
Crash [@ nsHTMLEditor::GetInlinePropertyBase] involving designMode, removeformat, <select>
Categories
(Core :: DOM: Editor, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: jruderman, Assigned: mozeditor)
References
Details
(Keywords: crash, testcase)
Crash Data
Attachments
(1 file, 1 obsolete file)
|
1.42 KB,
application/xhtml+xml
|
Details |
Before the crash, I see this assertion:
###!!! ASSERTION: Null current node in an iterator that's not done!: 'mCurNode', file /Users/admin/trunk/mozilla/content/base/src/nsContentIterator.cpp, line 1186
|
Reporter | |
Comment 1•19 years ago
|
||
|
|
Reporter | |
Comment 2•19 years ago
|
||
Bug 336081 is similar.
|
|
Reporter | |
Comment 3•18 years ago
|
||
The testcase as-is doesn't work because it hits WRONG_DOCUMENT_ERR when trying
to move nodes into the iframe, because of the change in bug 47903. Once I fix
that, it runs into NS_ERROR_DOM_RANGE_BAD_BOUNDARYPOINTS_ERR when trying to
create the second range, thanks to the change in bug 336381.
(I even tried changing it to create r2 while its endpoints are still in the
document. Still no crash.)
Attachment #220297 -
Attachment is obsolete: true
|
|
Reporter | |
Updated•18 years ago
|
Status: NEW → RESOLVED
Closed: 18 years ago
Resolution: --- → FIXED
|
|
Reporter | |
Updated•17 years ago
|
Flags: in-testsuite-
|
||
Updated•14 years ago
|
Crash Signature: [@ nsHTMLEditor::GetInlinePropertyBase]
You need to log in
before you can comment on or make changes to this bug.
Description
•