Bug 14769

Summary: Reproducible ASSERTION FAILED: element->isRadioButton() in WebCore::HTMLFormElement::CheckedRadioButtons::removeButton(WebCore::HTMLGenericFormElement*)
Product: WebKit Reporter: mitz
Component: DOMAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: andersca, dev+webkit
Priority: P2 Keywords: HasReduction
Version: 523.x (Safari 3)   
Hardware: Mac   
OS: OS X 10.4   
Attachments:
Description Flags
Reduction
none
Simpler reduction none

mitz
Reported 2007-07-25 23:17:00 PDT
Closing a Bugzilla bug report I got this: ASSERTION FAILED: element->isRadioButton() (/WebKit/WebCore/html/HTMLFormElement.cpp:743 void WebCore::HTMLFormElement::CheckedRadioButtons::removeButton(WebCore::HTMLGenericFormElement*))
Attachments
Reduction (281 bytes, text/html)
2007-10-21 21:56 PDT, Matt Lilek 		no flags
Details
Simpler reduction (85 bytes, text/html)
2007-10-23 08:58 PDT, mitz 		no flags
Details
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Matt Lilek
Comment 1 2007-10-16 16:30:34 PDT
I'm hitting this reliably when submitting the quiz on http://today.msnbc.msn.com/id/21310010/.
Matt Lilek
Comment 2 2007-10-16 16:34:35 PDT
Steps to reproduce: 1. Go to <http://today.msnbc.msn.com/id/21310010/> 2. Select the first radio button for each question 3. Click submit 4. Boom.
Matt Lilek
Comment 3 2007-10-21 21:56:17 PDT
Created attachment 16781 [details] Reduction Load the file and close the tab/window, will assert in a debug build.
Matt Lilek
Comment 4 2007-10-21 21:58:10 PDT
(In reply to comment #3) > Created an attachment (id=16781) [edit] > Reduction > > Load the file and close the tab/window, will assert in a debug build. > Looks like you have to open it in a new tab/window to tickle it.
mitz
Comment 5 2007-10-23 08:58:01 PDT
Created attachment 16820 [details] Simpler reduction The button is not a descendant of its form, and after the document is destroyed, the button gets destroyed before the form is destroyed.
mitz
Comment 6 2007-11-02 16:11:39 PDT
The later bug wins because it has a patch :-) *** This bug has been marked as a duplicate of 15806 ***
Note You need to log in before you can comment on or make changes to this bug.