Bug 252805 - [DOM] ASSERTION FAILED: commonRoot
Summary: [DOM] ASSERTION FAILED: commonRoot
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: DOM (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: David Li
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2023-02-23 01:54 PST by David Li
Modified: 2023-03-07 13:45 PST (History)
0 users

See Also:

Attachments
Test case (1.12 KB, text/html)
2023-02-23 01:54 PST, David Li 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description David Li 2023-02-23 01:54:11 PST 
Created attachment 465129 [details]
Test case

If a document fragment is extracted by range.extractContents from a document, and no further operation for the document fragment,
the cloned node in this document fragment will be released (no immediately). And the timing gap between it the document fragment is generated and released,
We still can set a new Range start and end on this document fragment, but range don’t have any ref for the commonRoot of start and end.
So if we have any operation on this new range after the commonRoot is released, the commonRoot is not found.
Comment 1 David Li 2023-02-23 01:57:31 PST 
rdar://103178567
Comment 2 David Li 2023-03-03 06:49:31 PST 
Pull request: https://github.com/apple/WebKit/pull/401
Comment 3 David Li 2023-03-03 06:53:58 PST 
Pull request: https://github.com/WebKit/WebKit/pull/10252
Comment 4 EWS 2023-03-07 13:45:13 PST 
Committed 261342@main (c20d51c646be): <https://commits.webkit.org/261342@main>

Reviewed commits have been landed. Closing PR #10252 and removing active labels.