[Webkit-unassigned] [Bug 137959] Should never be reached assertion hit in WebCore::DocumentOrderedMap::get

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Apr 14 10:30:09 PDT 2016


https://bugs.webkit.org/show_bug.cgi?id=137959

--- Comment #3 from Chris Dumez <cdumez at apple.com> ---
I added some logging and here is what I see:
addElementById(test) 0x1207bcc30
getElementById(test)
getElementById(test)
addElementById(test) 0x1207bcc98
getElementById(test)
removeElementById(test) 0x1207bcc30
getElementById(test)
SHOULD NEVER BE REACHED

So we add 2 separate elements with the id 'test' to the DocumentOrderedMap, then remove the first one, then crash when calling getElementById('test') because the map think there second element with the id 'test' but cannot find it in the tree.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160414/a9423216/attachment.html>


More information about the webkit-unassigned mailing list