839927 - Assertion with <style scoped> in SVG

Status: RESOLVED FIXED

(Core :: CSS Parsing and Computation, defect)

Description

[Jesse Ruderman]

Attachment: testcase

###!!! ASSERTION: only call UpdateIsElementInStyleScopeFlagOnSubtree on a subtree that has IsElementInStyleScope boolean flag set: 'aElement->IsElementInStyleScope()', file content/base/src/nsStyleLinkElement.cpp, line 259

> nsStyleLinkElement::DoUpdateStyleSheet(nsIDocument*, nsICSSLoaderObserver*, bool*, bool*, bool) [obj-firefox/dist/include/nsCOMPtr.h:764]
> nsStyleLinkElement::UpdateStyleSheetInternal(nsIDocument*, bool) [content/base/src/nsStyleLinkElement.cpp:206]
> mozilla::dom::SVGStyleElement::UnbindFromTree(bool, bool) [obj-firefox/dist/include/nsCOMPtr.h:492]
> mozilla::dom::Element::UnbindFromTree(bool, bool) [content/base/src/Element.cpp:1374]
> nsDocument::cycleCollection::UnlinkImpl(void*) [content/base/src/nsDocument.cpp:1744]
> nsCycleCollector::CollectWhite(nsICycleCollectorListener*) [xpcom/base/nsCycleCollector.cpp:2401]
> nsCycleCollector::FinishCollection(nsICycleCollectorListener*) [xpcom/base/nsCycleCollector.cpp:3021]
> nsCycleCollector::Collect(bool, nsCycleCollectorResults*, unsigned int, nsICycleCollectorListener*) [xpcom/base/nsCycleCollector.cpp:2906]
> nsCycleCollector::Shutdown() [obj-firefox/dist/include/nsCOMPtr.h:492]
> nsCycleCollector_shutdown() [xpcom/base/nsCycleCollector.cpp:3391]
> mozilla::ShutdownXPCOM(nsIServiceManager*) [xpcom/glue/nsCOMPtr.h:764]
> ScopedXPCOMStartup::~ScopedXPCOMStartup() [toolkit/xre/nsAppRunner.cpp:1126]
> XREMain::XRE_main(int, char**, nsXREAppData const*) [obj-firefox/dist/include/mozilla/mozalloc.h:224]
> XRE_main [toolkit/xre/nsAppRunner.cpp:4102]
> main [browser/app/nsBrowserApp.cpp:185]

Comment 1

[Cameron McCormack (:heycam)]

Attachment: patch

Comment 2

[Boris Zbarsky [:bzbarsky]]

Comment on attachment 712788 [details] [diff] [review]
patch

r=me

Comment 3

[Cameron McCormack (:heycam)]

https://hg.mozilla.org/integration/mozilla-inbound/rev/09ddbf34dc17

Comment 4

[Ed Morley [:emorley]]

https://hg.mozilla.org/mozilla-central/rev/09ddbf34dc17