72439 2011-11-15 16:21:11 -0800 Crash when ShadowRoot content is smaller than host element 2011-12-07 18:08:05 -0800 1 1 1 Unclassified WebKit DOM 528+ (Nightly build) Unspecified Unspecified RESOLVED INVALID P2 Normal --- 72352 1 dominicc dominicc morrita oldest_to_newest 503404 0 dominicc 2011-11-15 16:21:11 -0800 When the content of a ShadowRoot is smaller than the host element, clicking in the "void" tries to create a range without an associated DOM element and causes a crash. 514957 1 morrita 2011-12-05 00:32:44 -0800 Signing up myself. 515661 2 morrita 2011-12-05 22:34:50 -0800 I cannot reproduce this: ---- <!DOCTYPE html> <html> <head> </head> <body> <pre id="console"> </pre> <div id="container"></div> <script> var container = document.getElementById("container"); var shadowHost = document.createElement("div"); shadowHost.setAttribute("style", "width: 500px; height: 500px;"); var shadowRoot = internals.ensureShadowRoot(shadowHost); content = document.createElement("p"); content.setAttribute("style", "width: 50px; height: 50px;"); shadowRoot.appendChild(content); container.appendChild(shadowHost); shadowHost.onclick = function() { console.log('clicked'); } var p = content; var x = p.offsetLeft + p.offsetWidth + 10; var y = p.offsetTop + p.offsetHeight + 10; eventSender.mouseMoveTo(x , y); eventSender.mouseDown(); eventSender.mouseUp(); </script> </body> </html> -- This printed "clicked" without any crash. 515724 3 morrita 2011-12-06 01:06:54 -0800 Unassigning for now because the crash cannot be reproduced. 515727 4 dominicc 2011-12-06 01:20:01 -0800 Let me try to reproduce it. 517061 5 dominicc 2011-12-07 18:08:05 -0800 I can not reproduce this.