712521 - ASSERTION: Want to fire DOMNodeRemoved event, but it's not safe: 'aChild->IsNodeOfType(nsINode::eCONTENT) && static_cast<nsIContent*>(aChild)-> IsInNativeAnonymousSubtree() || IsSafeToRunScript() || sDOMNodeRemovedSuppressCount' (browser_aboutHome.js)

Status: RESOLVED WORKSFORME

(Core :: XBL, defect)

Description

[Mats Palmgren (inactive)]

This is possibly just side-effect of the problem in bug 712520.

STEPS TO REPRODUCE
1. using a clean profile,
   install "nectar_search_toolbar.xpi" attached in bug 711794
2. restart Fx
3. wait for the "first run" dialog that the add-on displays

ACTUAL RESULTS
###!!! ASSERTION: Want to fire DOMNodeRemoved event, but it's not safe: 'aChild->IsNodeOfType(nsINode::eCONTENT) && static_cast<nsIContent*>(aChild)-> IsInNativeAnonymousSubtree() || IsSafeToRunScript() || sDOMNodeRemovedSuppressCount', file content/base/src/nsContentUtils.cpp, line 3351

PLATFORMS AND BUILDS TESTED
Bug occurs in Fx9 debug build on OS X 10.7
Bug occurs in a recent mozilla-inbound debug build on OS X 10.7
Bug occurs in todays mozilla-inbound debug build on Linux x86-64

Comment 1

[Mats Palmgren (inactive)]

Attachment: stack

stack leading up to the assertion on Linux (the assertion in bug 712520
occurs first)

Comment 2

[David Teller [:Yoric] - still alive but not very active]

I encounter the same issue reproducibly with browser_aboutHome.js on current m-c (that's FF26).

Comment 3

[Olli Pettay [:smaug][[e-mail]]]

Blake, William, I think you've touched XBL lately.

Comment 4

[Blake Kaplan (:mrbkap) (inactive)]

David, browser_aboutHome is (sort of) being tracked by bug 724307.

Olli, can you reproduce this? I hit an assertion in nsParser.cpp about trying to pump data into about:blank and then bug 712520.

Comment 5

[Olli Pettay [:smaug][[e-mail]]]

The assertion from browser_aboutHome.js gives quite different stack.
That one is about reporting error in parsing, and error reporting removing existing nodes from 
a fragment.
The error reporting should be moved to higher up in the stack.

Anyhow, the assertion just means that there is a bug somewhere doing dom mutations.

Comment 6

[Ed Morley [:emorley]]

https://tbpl.mozilla.org/php/getParsedLog.php?id=34908890&tree=Mozilla-Central

Comment 7

[Ed Morley [:emorley]]

Inactive; closing (see bug 1180138).