Closed Bug 335995 Opened 18 years ago Closed 17 years ago

Crash [@ nsHTMLEditor::GetInlinePropertyBase] involving designMode, removeformat, <select>

Categories

(Core :: DOM: Editor, defect)

Product:
Core
Component:
DOM: Editor
Platform:
PowerPC
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: jruderman, Assigned: mozeditor)

References

Details

(Keywords: crash, testcase)

Crash Data

Attachments

(1 file, 1 obsolete file)

testcase
1.42 KB, application/xhtml+xml
Details 
Before the crash, I see this assertion:

###!!! ASSERTION: Null current node in an iterator that's not done!: 'mCurNode', file /Users/admin/trunk/mozilla/content/base/src/nsContentIterator.cpp, line 1186
Attached file testcase (obsolete) — 

    
    

    
  
Bug 336081 is similar.

    
  
Blocks: 336383

    
    

    
  

      
      
      
      

        Attached file
          
        testcase
        — 
      

    


  
The testcase as-is doesn't work because it hits WRONG_DOCUMENT_ERR when trying
to move nodes into the iframe, because of the change in bug 47903.  Once I fix
that, it runs into NS_ERROR_DOM_RANGE_BAD_BOUNDARYPOINTS_ERR when trying to
create the second range, thanks to the change in bug 336381.

(I even tried changing it to create r2 while its endpoints are still in the
document.  Still no crash.)

        Attachment #220297 -
        Attachment is obsolete: true

    
  
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED

    
  
Flags: in-testsuite-
Crash Signature: [@ nsHTMLEditor::GetInlinePropertyBase]

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: