Created attachment 639769 [details] testcase Assertion failure: node, at content/base/src/nsRange.cpp:1457 This assertion is part of ValidateCurrentNode, a function added in bug 766426.
Created attachment 640054 [details] [diff] [review] Patch This turns out not to have anything to do with fullscreen. What CutContents does in this case is: 1) Create an iterator and call Last() 2) Save the current node in a local variable 3) Call Prev() on iterator so that if we delete the local variable, the iterator points to the next node we should delete 4) Delete the node 5) Call ValidateCurrentNode() on the iterator The problem is that if any mutation occurs in step (4), and the node we just removed is the last one, the iterator will be done. Then ValidateCurrentNode() will try to get the current node, which will be null. Then it will assert. In this case, we should just say it's valid. Try: https://tbpl.mozilla.org/?tree=Try&rev=09c3dfd3d7ce