[Webkit-unassigned] [Bug 50312] Assertion failure in WebCore::HTMLFrameElementBase::insertedIntoDocument()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=50312





--- Comment #14 from Dmitry Titov <dimich at chromium.org>  2012-01-03 17:04:52 PST ---
One more bit of data: the fragment of DOM is first assembled from script, then attached to the actual document. This triggers a tree walk with insertedIntoDocument() on each element. Before the tree walk reaches the iframe, it reaches the Style element. Since the whole subtree is now InDocument(), that triggers sync style recalc on a subtree, which includes the iframe. The iframe gets a renderer. Then, during the same tree walk, the iframe gets insertedIntoDocument() and fires that ASSERT.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.