[Webkit-unassigned] [Bug 121694] Assertion failure in Range::nodeWillBeRemoved

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Jan 14 05:21:59 PST 2014


https://bugs.webkit.org/show_bug.cgi?id=121694


László Langó <llango.u-szeged at partner.samsung.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |llango.u-szeged at partner.sam
                   |                            |sung.com




--- Comment #3 from László Langó <llango.u-szeged at partner.samsung.com>  2014-01-14 05:19:37 PST ---
(In reply to comment #2)
> (From update of attachment 220625 [details])
> View in context: https://bugs.webkit.org/attachment.cgi?id=220625&action=review
> 
> Were you able to reproduce the assertion failure in WebKit without the fix?
> 

Yes, i got the assertion in EFL debug build.

> This is a wrong fix. The problem here is that we're calling child.document().nodeWillBeRemoved after the node had already been removed in willRemoveChild (ContainerNode.cpp). What we need to do instead is for every call site of dispatchChildRemovalEvents to check whether the mutation events had removed the parent, and avoid calling Document::nodeWillBeRemoved if they did.

I'm trying to fix this in that way.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the webkit-unassigned mailing list