Bug 71264

Summary:

ASSERT(!m_inBeforeLoadEventHandler) triggered when forcing a layout in a beforeload listener.

Product:

WebKit

Reporter:

Andy Estes <aestes>

Component:

DOM

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED CONFIGURATION CHANGED

Severity:

Major

CC:

abucur, aestes, ahmad.saleem792, rniwa

Priority:

Keywords:

InRadar

Version:

528+ (Nightly build)

Hardware:

All

OS:

All

Attachments:

Description	Flags
Test case	none

Andy Estes

Reported 2011-10-31 21:48:28 PDT

Created attachment 113125 [details] Test case Since HTMLObjectElement::updateWidget() is called during layout, we can do certain things in a beforeload listener that would trigger a reentrant layout and hence a re-entrant call to HTMLObjectElement::updateWidget(). A simple case would be calling event.target.offsetWidth in the listener for an object's beforeload event. See the attached test case. While this triggers an assertion in debug builds, it has no release symptom that I'm aware of.

Attachments
Test case (170 bytes, text/html) 2011-10-31 21:48 PDT, Andy Estes	no flags	Details
View All Add attachment proposed patch, testcase, etc.

Andy Estes

Comment 1 2011-10-31 21:48:51 PDT

<rdar://problem/9319618>

Ahmad Saleem

Comment 2 2023-01-20 10:06:47 PST

I am not able to reproduce this assert in Debug WK2 MiniBrowser using build based of 259136@main on attached test case. Anything else required or any better step to reproduce beside loading this test case in debug build? Thanks!

Note You need to log in before you can comment on or make changes to this bug.