477740 - "ASSERTION: Parent in document but flagged as forcing XBL" with XBL, <xul:resizer>, <math:ms>

Status: RESOLVED WORKSFORME

(Core :: XBL, defect)

Description

[Jesse Ruderman]

Attachment: testcase

###!!! ASSERTION: aDocument must be current doc of aParent: '!aParent || aDocument == aParent->GetCurrentDoc()', file /Users/jruderman/central/content/base/src/nsGenericElement.cpp, line 2497

###!!! ASSERTION: Parent in document but flagged as forcing XBL: '!aParent || !aDocument || !aParent->HasFlag(NODE_FORCE_XBL_BINDINGS)', file /Users/jruderman/central/content/base/src/nsGenericElement.cpp, line 2510

Comment 1

[Boris Zbarsky [:bzbarsky]]

So in this case, aDocument is non-null but aParent->GetCurrentDoc() is null.  The second assertion just follows from the first.

It looks like we're creating generated content for a content node that's no longer in the document.  And in particular for the mathml:ms.

Smaug, sicking, want to dig into why we're constructing frames for nodes that are not in the document anymore in this case?  ;)

Comment 2

[Jesse Ruderman]

WFM

Comment 3

[Jesse Ruderman]

Crashtest: http://hg.mozilla.org/mozilla-central/rev/e5dd52dd3cb5