[Webkit-unassigned] [Bug 161083] Assertion hit: ASSERT(!m_parserScheduler) in ~HTMLDocumentParser()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=161083

--- Comment #2 from Chris Dumez <cdumez at apple.com> ---
In Document::implicitOpen(), we call in this order:
1. cancelParsing(); // Clears out m_parser
2. removeChildren(); // May cause JS execution and therefore re-populate m_parser
3. m_parser = createParser(); // Expects m_parser to be null.

Looking at the spec:
https://html.spec.whatwg.org/#dom-document-open

It says:
Remove all child nodes of the document, without firing any mutation events. (step 15)

So we should probably not fire mutation events.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160824/b10b44c8/attachment.html>