418498 - "ASSERTION: Already have a document. Unbind first!" with XBL

Status: RESOLVED DUPLICATE of bug 460876

(Core :: DOM: Core & HTML, defect)

Description

[Jesse Ruderman]

Attachment: stack trace

I have a testcase that uses XBL and sometimes triggers one or both of:

###!!! ASSERTION: Already have a document.  Unbind first!: '!GetCurrentDoc() && !IsInDoc()', file /Users/jruderman/trunk/mozilla/content/base/src/nsGenericDOMDataNode.cpp, line 568

###!!! ASSERTION: Already have a document.  Unbind first!: '!GetCurrentDoc()', file /Users/jruderman/trunk/mozilla/content/base/src/nsGenericElement.cpp, line 1981

I can reproduce reliably enough to extract bits of information from gdb, but not reliably enough to make a reduced testcase.  How enlightening is the attached stack trace?

These assertions were added in 2005 in bug 286000.

Comment 1

[Boris Zbarsky [:bzbarsky]]

Hmm....  I thought we already had this on file for situations when the XUL forces binding attachment.  Not sure.  smaug might know?

Comment 2

[Jesse Ruderman]

Attachment: testcase (requires privs to force GC)

Here's a testcase that triggers the bug by forcing a garbage collection at the right moment.

Related to bug 429623?

Comment 3

[Jesse Ruderman]

This bug might be related to some too-much-recursion crashes I've been seeing with nsXULElement::BindToTree.

Comment 4

[Jesse Ruderman]

The testcase now triggers:

Error: uncaught exception: [Exception... "Operation is not supported"  code: "9" nsresult: "0x80530009 (NS_ERROR_DOM_NOT_SUPPORTED_ERR)"  location: "file:///Users/jruderman/Downloads/f4.xul Line: 13"]

Which means it is a duplicate.