Closed Bug 635757 Opened 10 years ago Closed 10 years ago

Intermittent crashtests/420439.html | assertion count 16 is more than expected 0 assertions from ASSERTION: anonymous nodes should not be in child lists: '!aOldChild->IsRootOfAnonymousSubtree()'

Categories

(Core :: DOM: Editor, defect)

Product:
Core
Component:
DOM: Editor
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla2.0b12

People

(Reporter: philor, Assigned: ehsan)

References

Details

(Keywords: intermittent-failure)

Attachments

(1 file)

Patch (v1)
809 bytes, patch
roc
: review+
Details | Diff | Splinter Review 
http://tinderbox.mozilla.org/showlog.cgi?log=Firefox/1298312145.1298312549.30775.gz&fulltext=1Rev3 Fedora 12 mozilla-central debug test crashtest on 2011/02/21 10:15:45
s: talos-r3-fed-046

REFTEST TEST-START | file:///home/cltbld/talos-slave/test/build/reftest/tests/editor/libeditor/html/crashtests/420439.html
++DOMWINDOW == 20 (0xb3c0fec) [serial = 945] [outer = 0x97c7058]
WARNING: NS_ENSURE_TRUE(mDoneSetup) failed: file ../../../../editor/composer/src/nsEditingSession.cpp, line 566
WARNING: NS_ENSURE_SUCCESS(result, result) failed with result 0x80004005: file ../../../../editor/libeditor/base/nsEditor.cpp, line 3913
WARNING: NS_ENSURE_SUCCESS(res, res) failed with result 0x80004005: file ../../../../editor/libeditor/html/nsHTMLEditRules.cpp, line 340
WARNING: NS_ENSURE_TRUE(elem) failed: file ../../../../editor/libeditor/html/nsHTMLEditUtils.cpp, line 396
WARNING: NS_ENSURE_TRUE(inOffset) failed: file ../../../../editor/libeditor/html/nsHTMLEditor.cpp, line 4713
WARNING: NS_ENSURE_TRUE(temp) failed: file ../../../../editor/libeditor/html/nsHTMLEditor.cpp, line 4690
REFTEST TEST-PASS | file:///home/cltbld/talos-slave/test/build/reftest/tests/editor/libeditor/html/crashtests/420439.html | (LOAD ONLY)
REFTEST INFO | Loading a blank page
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: NS_ENSURE_SUCCESS(res, res) failed with result 0x80004003: file ../../../../editor/libeditor/html/nsHTMLEditor.cpp, line 5434
WARNING: NS_ENSURE_TRUE(inOffset) failed: file ../../../../editor/libeditor/html/nsHTMLEditor.cpp, line 4713
WARNING: NS_ENSURE_TRUE(node) failed: file ../../../../editor/libeditor/html/nsHTMLEditor.cpp, line 4766
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: Someone passed native anonymous content directly into frame construction.  Stop doing that!: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 6048
WARNING: NS_ENSURE_TRUE(mDisabledJSAndPlugins) failed: file ../../../../editor/composer/src/nsEditingSession.cpp, line 250
###!!! ASSERTION: anonymous nodes should not be in child lists: '!aOldChild->IsRootOfAnonymousSubtree()', file ../../../layout/base/nsCSSFrameConstructor.cpp, line 11520
nsCSSFrameConstructor::RestyleForRemove [nsCSSFrameConstructor.cpp:11522]
PresShell::ContentRemoved [nsPresShell.cpp:5163]
nsHTMLEditor::DeleteRefToAnonymousNode [nsHTMLAnonymousUtils.cpp:262]
nsHTMLEditor::HideInlineTableEditingUI [nsHTMLInlineTableEditor.cpp:140]
nsHTMLEditor::HideAnonymousEditingUIs [nsHTMLEditor.cpp:227]
nsHTMLEditor::~nsHTMLEditor [nsHTMLEditor.cpp:177]
nsEditor::Release [nsEditor.cpp:217]
nsHTMLEditor::Release [nsHTMLEditor.cpp:282]
nsCOMPtr<nsIEditor>::assign_assuming_AddRef [nsCOMPtr.h:519]
nsCOMPtr<nsIEditor>::assign_with_AddRef [nsCOMPtr.h:1205]
nsCOMPtr<nsIEditor>::operator= [nsCOMPtr.h:664]
nsDocShellEditorData::TearDownEditor [nsDocShellEditorData.cpp:82]
nsDocShellEditorData::~nsDocShellEditorData [nsDocShellEditorData.cpp:73]
nsAutoPtr<nsDocShellEditorData>::assign [nsAutoPtr.h:71]
nsAutoPtr<nsDocShellEditorData>::operator= [nsAutoPtr.h:135]
nsSHEntry::DropPresentationState [nsSHEntry.cpp:766]
nsSHEntry::SyncPresentationState [nsSHEntry.cpp:743]
nsDocShell::SetupNewViewer [nsDocShell.cpp:7719]
nsDocShell::Embed [nsDocShell.cpp:5763]
nsDocShell::CreateContentViewer [nsDocShell.cpp:7514]
nsDSURIContentListener::DoContent [nsDSURIContentListener.cpp:148]
nsDocumentOpenInfo::TryContentListener [nsURILoader.cpp:757]
nsDocumentOpenInfo::DispatchContent [nsURILoader.cpp:455]
nsDocumentOpenInfo::OnStartRequest [nsURILoader.cpp:295]
nsBaseChannel::OnStartRequest [nsBaseChannel.cpp:712]
nsInputStreamPump::OnStateStart [nsInputStreamPump.cpp:441]
nsInputStreamPump::OnInputStreamReady [nsInputStreamPump.cpp:397]
nsInputStreamReadyEvent::Run [nsStreamUtils.cpp:113]
nsThread::ProcessNextEvent [nsThread.cpp:633]
NS_ProcessNextEvent_P [nsThreadUtils.cpp:250]
mozilla::ipc::MessagePump::Run [MessagePump.cpp:110]
MessageLoop::RunInternal [message_loop.cc:220]
MessageLoop::RunHandler [message_loop.cc:203]
MessageLoop::Run [message_loop.cc:176]
nsBaseAppShell::Run [nsBaseAppShell.cpp:198]
nsAppStartup::Run [nsAppStartup.cpp:220]
XRE_main [nsAppRunner.cpp:3766]
main [nsBrowserApp.cpp:158]
libc.so.6 + 0x16bb6
###!!! ASSERTION: anonymous nodes should not be in child lists: '!aOldChild->IsRootOfAnonymousSubtree()', file ../../../layout/base/nsCSSFrameConstructor.cpp, line 11520
nsCSSFrameConstructor::RestyleForRemove [nsCSSFrameConstructor.cpp:11522]
PresShell::ContentRemoved [nsPresShell.cpp:5163]
nsHTMLEditor::DeleteRefToAnonymousNode [nsHTMLAnonymousUtils.cpp:262]
nsHTMLEditor::HideInlineTableEditingUI [nsHTMLInlineTableEditor.cpp:142]
nsHTMLEditor::HideAnonymousEditingUIs [nsHTMLEditor.cpp:227]
nsHTMLEditor::~nsHTMLEditor [nsHTMLEditor.cpp:177]
nsEditor::Release [nsEditor.cpp:217]
nsHTMLEditor::Release [nsHTMLEditor.cpp:282]
nsCOMPtr<nsIEditor>::assign_assuming_AddRef [nsCOMPtr.h:519]
nsCOMPtr<nsIEditor>::assign_with_AddRef [nsCOMPtr.h:1205]
nsCOMPtr<nsIEditor>::operator= [nsCOMPtr.h:664]
nsDocShellEditorData::TearDownEditor [nsDocShellEditorData.cpp:82]
nsDocShellEditorData::~nsDocShellEditorData [nsDocShellEditorData.cpp:73]
nsAutoPtr<nsDocShellEditorData>::assign [nsAutoPtr.h:71]
nsAutoPtr<nsDocShellEditorData>::operator= [nsAutoPtr.h:135]
nsSHEntry::DropPresentationState [nsSHEntry.cpp:766]
nsSHEntry::SyncPresentationState [nsSHEntry.cpp:743]
nsDocShell::SetupNewViewer [nsDocShell.cpp:7719]
nsDocShell::Embed [nsDocShell.cpp:5763]
nsDocShell::CreateContentViewer [nsDocShell.cpp:7514]
nsDSURIContentListener::DoContent [nsDSURIContentListener.cpp:148]
nsDocumentOpenInfo::TryContentListener [nsURILoader.cpp:757]
nsDocumentOpenInfo::DispatchContent [nsURILoader.cpp:455]
nsDocumentOpenInfo::OnStartRequest [nsURILoader.cpp:295]
nsBaseChannel::OnStartRequest [nsBaseChannel.cpp:712]
nsInputStreamPump::OnStateStart [nsInputStreamPump.cpp:441]
nsInputStreamPump::OnInputStreamReady [nsInputStreamPump.cpp:397]
nsInputStreamReadyEvent::Run [nsStreamUtils.cpp:113]
nsThread::ProcessNextEvent [nsThread.cpp:633]
NS_ProcessNextEvent_P [nsThreadUtils.cpp:250]
mozilla::ipc::MessagePump::Run [MessagePump.cpp:110]
MessageLoop::RunInternal [message_loop.cc:220]
MessageLoop::RunHandler [message_loop.cc:203]
MessageLoop::Run [message_loop.cc:176]
nsBaseAppShell::Run [nsBaseAppShell.cpp:198]
nsAppStartup::Run [nsAppStartup.cpp:220]
XRE_main [nsAppRunner.cpp:3766]
main [nsBrowserApp.cpp:158]
libc.so.6 + 0x16bb6
...
++DOMWINDOW == 21 (0xbd54074) [serial = 946] [outer = 0x97c7058]
REFTEST TEST-UNEXPECTED-FAIL | file:///home/cltbld/talos-slave/test/build/reftest/tests/editor/libeditor/html/crashtests/420439.html | assertion count 16 is more than expected 0 assertions
"ASSERTION: anonymous nodes should not be in child lists"
IIRC, that assertion is a bad sign and it can lead to nasty crashes.
(In reply to comment #2)
> "ASSERTION: anonymous nodes should not be in child lists"
> IIRC, that assertion is a bad sign and it can lead to nasty crashes.

It's bug 439258.  I don't know of any test cases which lead to crashes here, so I've tentatively chosen to work on that post 2.0...
Attached patch Patch (v1) — — Splinter Review
Assignee: nobody → ehsan
Status: NEW → ASSIGNED
Attachment #514109 - Flags: review?(roc)
http://hg.mozilla.org/mozilla-central/rev/8106f111b695
Status: ASSIGNED → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla2.0b12
Whiteboard: [orange]
You need to log in before you can comment on or make changes to this bug.