429623 - "ASSERTION: Reparenting something that has no usable parent?" with XBL, GC

Status: RESOLVED DUPLICATE of bug 460876

(Core :: XBL, defect)

Description

[Jesse Ruderman]

Attachment: testcase (requires privs to force GC)

Loading the testcase with privs triggers:

###!!! ASSERTION: Shallow unbind won't clear document and binding parent on kids!: 'aDeep || (!GetCurrentDoc() && !GetBindingParent())', file /Users/jruderman/trunk/mozilla/content/base/src/nsGenericElement.cpp, line 2194

###!!! ASSERTION: element not in the document: 'doc', file /Users/jruderman/trunk/mozilla/layout/base/nsChildIterator.cpp, line 62

###!!! ASSERTION: Reparenting something that has no usable parent? Shouldn't happen!: 'Not Reached', file /Users/jruderman/trunk/mozilla/layout/base/nsFrameManager.cpp, line 941

Comment 1

[Jesse Ruderman]

Related to bug 418498?

Comment 2

[Boris Zbarsky [:bzbarsky]]

Hard to say without investigating.  That last assert sounds pretty bad to me, but the real issue is the very first assert, I bet.

Comment 3

[Jesse Ruderman]

Bug 463511 also triggers these assertions, and does it without forcing GC.

Comment 4

[Boris Zbarsky [:bzbarsky]]

This is very likely to be the same issue as what I describe in bug 495354.

Comment 5

[Jesse Ruderman]

The testcase now triggers:

JavaScript error: , line 0: uncaught exception: [Exception... "Operation is not supported"  code: "9" nsresult: "0x80530009 (NS_ERROR_DOM_NOT_SUPPORTED_ERR)"  location: "https://bug429623.bugzilla.mozilla.org/attachment.cgi?id=316379 Line: 18"]

and no assertions.  Whatever fixed bug 460876 must have fixed this too.