414689 - "ASSERTION: already started a batch!" with contenteditable, onbeforecut, <object>

Status: RESOLVED WORKSFORME

(Core :: Web Painting, defect)

Description

[Jesse Ruderman]

Attachment: testcase

Loading the testcase triggers:

###!!! ASSERTION: already started a batch!: '!mRootVM', file ../../../dist/include/view/nsIViewManager.h, line 348

This bug also makes the document stop painting, and can do other strange things, such as breaking keyboard shortcuts.

Can this bug be triggered using events other than onbefore{cut|copy|paste}?  Or is part of the bug the fact that those events fire at the time they do?  (I'm not referring to the debate in bug 280959 and bug 410858 about "what things should make those events fire"; I'm referring to "what Gecko is in the middle of" when the event handlers run.)

This reminds me of bug 413292.

Comment 1

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Bug 418457 removed support for onbeforecut/copy/paste, so this should be WFM, feel free to reopen if you think there are remaining issues.