[Webkit-unassigned] [Bug 252805] New: [DOM] ASSERTION FAILED: commonRoot

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Feb 23 01:54:11 PST 2023


https://bugs.webkit.org/show_bug.cgi?id=252805

            Bug ID: 252805
           Summary: [DOM] ASSERTION FAILED: commonRoot
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: DOM
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: jingye_li at apple.com

Created attachment 465129

  --> https://bugs.webkit.org/attachment.cgi?id=465129&action=review

Test case

If a document fragment is extracted by range.extractContents from a document, and no further operation for the document fragment,
the cloned node in this document fragment will be released (no immediately). And the timing gap between it the document fragment is generated and released,
We still can set a new Range start and end on this document fragment, but range don’t have any ref for the commonRoot of start and end.
So if we have any operation on this new range after the commonRoot is released, the commonRoot is not found.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230223/a5bdc089/attachment.htm>


More information about the webkit-unassigned mailing list