RESOLVED DUPLICATE of bug 15806 14769
Reproducible ASSERTION FAILED: element->isRadioButton() in WebCore::HTMLFormElement::CheckedRadioButtons::removeButton(WebCore::HTMLGenericFormElement*)
https://bugs.webkit.org/show_bug.cgi?id=14769
Summary Reproducible ASSERTION FAILED: element->isRadioButton() in WebCore::HTMLFormE...
mitz
Reported 2007-07-25 23:17:00 PDT
Closing a Bugzilla bug report I got this: ASSERTION FAILED: element->isRadioButton() (/WebKit/WebCore/html/HTMLFormElement.cpp:743 void WebCore::HTMLFormElement::CheckedRadioButtons::removeButton(WebCore::HTMLGenericFormElement*))
Attachments
Reduction (281 bytes, text/html)
2007-10-21 21:56 PDT, Matt Lilek
no flags
Simpler reduction (85 bytes, text/html)
2007-10-23 08:58 PDT, mitz
no flags
Matt Lilek
Comment 1 2007-10-16 16:30:34 PDT
I'm hitting this reliably when submitting the quiz on http://today.msnbc.msn.com/id/21310010/.
Matt Lilek
Comment 2 2007-10-16 16:34:35 PDT
Steps to reproduce: 1. Go to <http://today.msnbc.msn.com/id/21310010/> 2. Select the first radio button for each question 3. Click submit 4. Boom.
Matt Lilek
Comment 3 2007-10-21 21:56:17 PDT
Created attachment 16781 [details] Reduction Load the file and close the tab/window, will assert in a debug build.
Matt Lilek
Comment 4 2007-10-21 21:58:10 PDT
(In reply to comment #3) > Created an attachment (id=16781) [edit] > Reduction > > Load the file and close the tab/window, will assert in a debug build. > Looks like you have to open it in a new tab/window to tickle it.
mitz
Comment 5 2007-10-23 08:58:01 PDT
Created attachment 16820 [details] Simpler reduction The button is not a descendant of its form, and after the document is destroyed, the button gets destroyed before the form is destroyed.
mitz
Comment 6 2007-11-02 16:11:39 PDT
The later bug wins because it has a patch :-) *** This bug has been marked as a duplicate of 15806 ***
Note You need to log in before you can comment on or make changes to this bug.