460876 - Crash [@ nsContentIterator::NextNode] with contenteditable, XBL, GC

Status: RESOLVED WORKSFORME

(Core :: DOM: Editor, defect)

Description

[Jesse Ruderman]

Attachment: testcase (requires privs; crashes Firefox)

Comment 1

[Jesse Ruderman]

I think this was fixed elsewhere, by not allowing certain DOM operations on XBL insertion points.  (Maybe in bug 476245?)  When I load the testcase, I now get an exception halfway through the script.

  var b = document.getElementById("b");
  var ip = document.getAnonymousNodes(d)[0];
  b.appendChild(ip); // this line triggers the exception

Error: uncaught exception: [Exception... "Operation is not supported"  code: "9" nsresult: "0x80530009 (NS_ERROR_DOM_NOT_SUPPORTED_ERR)"  location: "file:///Users/jruderman/Downloads/a.xhtml Line: 13"]