Closed Bug 386000 Opened 17 years ago Closed 17 years ago

Crash [@ nsStyleSet::ResolveStyleFor] removing documentElement and appending a <body> during the DOMNodeRemoved event

Categories

(Core :: DOM: Core & HTML, defect)

defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: assertion, crash, testcase)

Crash Data

Attachments

(1 file)

Attached file testcase
Loading the testcase causes a crash [@ nsStyleSet::ResolveStyleFor]. Before the crash, there's an assertion failure: ###!!! ASSERTION: must have content: 'aContent', nsStyleSet.cpp, line 595 Related to bug 366200?
Summary: Crash [@ nsStyleSet::ResolveStyleFor] → Crash [@ nsStyleSet::ResolveStyleFor] removing documentElement and appending a <body> during the DOMNodeRemoved event
Same underlying cause as bug 366200.
Depends on: 366200
OS: Mac OS X → All
Hardware: PC → All
WFM with Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a7pre) Gecko/2007071005 Minefield/3.0a7pre
Fixed by patch in bug 366200
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
Crashtest checked in.
Flags: in-testsuite? → in-testsuite+
Crash Signature: [@ nsStyleSet::ResolveStyleFor]
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: