"ASSERTION: Wrong root"

RESOLVED FIXED in mozilla10

Status

()

Core
DOM: Core & HTML
--
minor
RESOLVED FIXED
6 years ago
4 years ago

People

(Reporter: Jesse Ruderman, Assigned: mats)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Trunk
mozilla10
assertion, testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [inbound])

Attachments

(4 attachments, 1 obsolete attachment)

(Reporter)

Description

6 years ago
Created attachment 562257 [details]
testcase

###!!! ASSERTION: Wrong root: '!aRoot || aNotInsertedYet || (nsContentUtils::ContentIsDescendantOf(aStartN, aRoot) && nsContentUtils::ContentIsDescendantOf(aEndN, aRoot) && aRoot == IsValidBoundary(aStartN) && aRoot == IsValidBoundary(aEndN))', file content/base/src/nsRange.cpp, line 524

Maybe a regression from bug 682463?
(Reporter)

Comment 1

6 years ago
Created attachment 562259 [details]
stack trace
(Assignee)

Updated

6 years ago
Assignee: nobody → matspal
Blocks: 682463
Severity: normal → minor
OS: Mac OS X → All
Hardware: x86_64 → All
(Assignee)

Comment 2

6 years ago
Created attachment 566411 [details]
Simpler testcase
Attachment #562257 - Attachment is obsolete: true
(Assignee)

Comment 3

6 years ago
Created attachment 566412 [details]
Another test that triggers the same range update using splitText()
(Assignee)

Comment 4

6 years ago
Created attachment 566414 [details] [diff] [review]
fix+tests, v1

Just need to avoid this assertion for newStartNode with null parent too.
Added the attached testcases as crashtests and the splitText() version
to the "splitText-normalize" reftest.

Try server results pending...
Attachment #566414 - Flags: review?(Olli.Pettay)

Updated

6 years ago
Attachment #566414 - Flags: review?(Olli.Pettay) → review+
(Assignee)

Comment 5

6 years ago
https://hg.mozilla.org/integration/mozilla-inbound/rev/3d5eee785f85
Flags: in-testsuite+
Whiteboard: [inbound]
Target Milestone: --- → mozilla10
https://hg.mozilla.org/mozilla-central/rev/3d5eee785f85
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
Component: DOM: Traversal-Range → DOM: Core & HTML
Product: Core → Core
You need to log in before you can comment on or make changes to this bug.