[Webkit-unassigned] [Bug 252805] New: [DOM] ASSERTION FAILED: commonRoot
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu Feb 23 01:54:11 PST 2023
https://bugs.webkit.org/show_bug.cgi?id=252805
Bug ID: 252805
Summary: [DOM] ASSERTION FAILED: commonRoot
Product: WebKit
Version: WebKit Nightly Build
Hardware: Unspecified
OS: Unspecified
Status: NEW
Severity: Normal
Priority: P2
Component: DOM
Assignee: webkit-unassigned at lists.webkit.org
Reporter: jingye_li at apple.com
Created attachment 465129
--> https://bugs.webkit.org/attachment.cgi?id=465129&action=review
Test case
If a document fragment is extracted by range.extractContents from a document, and no further operation for the document fragment,
the cloned node in this document fragment will be released (no immediately). And the timing gap between it the document fragment is generated and released,
We still can set a new Range start and end on this document fragment, but range don’t have any ref for the commonRoot of start and end.
So if we have any operation on this new range after the commonRoot is released, the commonRoot is not found.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230223/a5bdc089/attachment.htm>
More information about the webkit-unassigned
mailing list