477569 - Testcase from bug 459883 triggers "ASSERTION: GetPrimaryFrameFor() called while frames are being destroyed!"

Status: RESOLVED WORKSFORME

(Core :: Layout, defect)

Description

[Jesse Ruderman]

Attachment: stack trace

The testcase from bug 459883 (currently security-sensitive) still triggers two assertions:

###!!! ASSERTION: GetPrimaryFrameFor() called while frames are being
destroyed!: '!mIsDestroyingFrames', file
/Users/jruderman/central/layout/base/nsFrameManager.cpp, line 336

###!!! ASSERTION: frame was not removed from primary frame map before
destruction or was readded to map after being removed: 'Not Reached', file
/Users/jruderman/central/layout/base/nsFrameManager.cpp, line 734

Dunno if this is the same problem as in bug 459666 or a separate bug.

Comment 1

[Jesse Ruderman]

Gah, now it gives me this instead:

###!!! ASSERTION: Cached frame is incorrect!: 'mElement.get() && !mReferencedFramePresShell->FrameManager()->IsDestroyingFrames() && static_cast<nsGenericElement*>(mElement.get())->GetPrimaryFrame() == mReferencedFrame', file /Users/jruderman/central/layout/svg/base/src/nsSVGEffects.cpp, line 88

Comment 2

[Jesse Ruderman]

And now it's totally WFM.

in-testsuite- because this will be added to the test suite when the other bug is disclosed.