407649 - XBL doesn't seem to update data structures properly

Status: RESOLVED WONTFIX

(Core :: XBL, defect, P3)

Description

[Boris Zbarsky [:bzbarsky]]

From bug 406900 comment 9:

It looks to me like the caller of RemoveInsertionParent() in
ChangeDocumentFor() should really be in ContentRemoved(), no?  As things stand,
it won't get called in all the cases it should get called in.

Given that not removing this stuff can lead to crashes as far as I can tell (per bug 406900), I think we need to at least check whether the "looks to me" part is right.  I could just be on crack...

Comment 1

[Mike Schroepfer]

Moving to blocking list until we can determine if bz is in fact on crack or not...

Comment 2

[Martijn Wargers (dead)]

I think I was fiddling (trying to enter text into it) with
http://lxr.mozilla.org/seamonkey/source/layout/reftests/bugs/386470-1a.html
or http://lxr.mozilla.org/seamonkey/source/layout/reftests/bugs/386470-1c.html
and I crashed afterwards, after a while.
I can't reproduce it, but it seems to me this might be related to this bug, perhaps?
http://crash-stats.mozilla.com/report/index/fdb7332e-a4ca-11dc-b28f-001a4bd43ef6

Comment 3

[Martijn Wargers (dead)]

I'm also seeing this assertion prior to the crash:
###!!! ASSERTION: Setting mutation listener bits on outer window?: 'window->IsIn
nerWindow()', file c:/mozilla-build/mozilla/content/events/src/nsEventListenerMa
nager.cpp, line 528

Comment 4

[Johnny Stenback (:jst)]

Not going to block on this one.

Comment 5

[Sylvestre Ledru [:Sylvestre]]

Moving to p3 because no activity for at least 1 year(s).
See https://github.com/mozilla/bug-handling/blob/master/policy/triage-bugzilla.md#how-do-you-triage for more information

Comment 6

[Boris Zbarsky [:bzbarsky]]

XBL is now disabled in Firefox (Bug 1583314) and is in the process of being removed from Gecko (Bug 1566221), so closing bugs requesting changes to its implementation as wontfix.