| Summary: | [DOM] ASSERTION FAILED: commonRoot | ||||||
|---|---|---|---|---|---|---|---|
| Product: | WebKit | Reporter: | David Li <jingye_li> | ||||
| Component: | DOM | Assignee: | David Li <jingye_li> | ||||
| Status: | RESOLVED FIXED | ||||||
| Severity: | Normal | Keywords: | InRadar | ||||
| Priority: | P2 | ||||||
| Version: | WebKit Nightly Build | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Attachments: |
|
||||||
Pull request: https://github.com/apple/WebKit/pull/401 Pull request: https://github.com/WebKit/WebKit/pull/10252 Committed 261342@main (c20d51c646be): <https://commits.webkit.org/261342@main> Reviewed commits have been landed. Closing PR #10252 and removing active labels. |
Created attachment 465129 [details] Test case If a document fragment is extracted by range.extractContents from a document, and no further operation for the document fragment, the cloned node in this document fragment will be released (no immediately). And the timing gap between it the document fragment is generated and released, We still can set a new Range start and end on this document fragment, but range don’t have any ref for the commonRoot of start and end. So if we have any operation on this new range after the commonRoot is released, the commonRoot is not found.