<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>72440</bug_id>
          
          <creation_ts>2011-11-15 16:23:10 -0800</creation_ts>
          <short_desc>Removing &lt;ul&gt;, &lt;li&gt; inside shadow DOM triggers assertion in updateListMarkerNumbers</short_desc>
          <delta_ts>2012-02-27 16:18:35 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>59802</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Dominic Cooney">dominicc</reporter>
          <assigned_to name="Hajime Morrita">morrita</assigned_to>
          <cc>hyatt</cc>
    
    <cc>inferno</cc>
    
    <cc>jchaffraix</cc>
    
    <cc>mitz</cc>
    
    <cc>morrita</cc>
    
    <cc>rniwa</cc>
    
    <cc>shinyak</cc>
    
    <cc>simon.fraser</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>503405</commentid>
    <comment_count>0</comment_count>
    <who name="Dominic Cooney">dominicc</who>
    <bug_when>2011-11-15 16:23:10 -0800</bug_when>
    <thetext>ASSERTION FAILED: listNode &amp;&amp; listNode-&gt;renderer()
/Volumes/HD2/chromium/src/third_party/WebKit/Source/WebCore/WebCore.gyp/../rendering/RenderListItem.cpp(431) : void WebCore::RenderListItem::updateListMarkerNumbers()</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>514947</commentid>
    <comment_count>1</comment_count>
    <who name="Hajime Morrita">morrita</who>
    <bug_when>2011-12-05 00:08:23 -0800</bug_when>
    <thetext>Tree reforming pushing down this to 59802</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>515011</commentid>
    <comment_count>2</comment_count>
    <who name="Hajime Morrita">morrita</who>
    <bug_when>2011-12-05 03:34:01 -0800</bug_when>
    <thetext>Hi Dominic,
Could you provide any repro for this?
I&apos;m trying to reproduce this, but I have had none.

Thanks in advance,</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>515731</commentid>
    <comment_count>3</comment_count>
    <who name="Dominic Cooney">dominicc</who>
    <bug_when>2011-12-06 01:51:07 -0800</bug_when>
    <thetext>I will work on a repro.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>517011</commentid>
    <comment_count>4</comment_count>
      <attachid>118291</attachid>
    <who name="Dominic Cooney">dominicc</who>
    <bug_when>2011-12-07 17:29:59 -0800</bug_when>
    <thetext>Created attachment 118291
Repro layout test</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>525092</commentid>
    <comment_count>5</comment_count>
    <who name="Shinya Kawanaka">shinyak</who>
    <bug_when>2011-12-20 21:48:38 -0800</bug_when>
    <thetext>I was investigating this.
UL seems destroyed twice...?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>525203</commentid>
    <comment_count>6</comment_count>
    <who name="Shinya Kawanaka">shinyak</who>
    <bug_when>2011-12-21 02:36:15 -0800</bug_when>
    <thetext>(In reply to comment #5)
&gt; I was investigating this.
&gt; UL seems destroyed twice...?

RenderObjectChildList::destroyLeftoverChildren() destroys shadow objects, and it removes a renderer. The renderer of UL is deleted here, then LI is being deleted after that.
I&apos;m not sure setting renderer 0 in the function is necessary.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>525210</commentid>
    <comment_count>7</comment_count>
      <attachid>120166</attachid>
    <who name="Shinya Kawanaka">shinyak</who>
    <bug_when>2011-12-21 03:35:58 -0800</bug_when>
    <thetext>Created attachment 120166
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>525211</commentid>
    <comment_count>8</comment_count>
    <who name="Shinya Kawanaka">shinyak</who>
    <bug_when>2011-12-21 03:36:39 -0800</bug_when>
    <thetext>(In reply to comment #7)
&gt; Created an attachment (id=120166) [details]
&gt; Patch

I&apos;m not sure this is the right way, but this patch fixes the issue.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>545264</commentid>
    <comment_count>9</comment_count>
      <attachid>120166</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2012-01-30 12:03:15 -0800</bug_when>
    <thetext>Comment on attachment 120166
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=120166&amp;action=review

&gt; Source/WebCore/rendering/RenderObjectChildList.cpp:62
&gt; -            if (firstChild()-&gt;node())
&gt; -                firstChild()-&gt;node()-&gt;setRenderer(0);
&gt; +            Node* node = firstChild()-&gt;node();
&gt;              firstChild()-&gt;destroy();
&gt; +            if (node)
&gt; +                node-&gt;setRenderer(0);

This doesn&apos;t look like a right fix.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>545266</commentid>
    <comment_count>10</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2012-01-30 12:04:05 -0800</bug_when>
    <thetext>This is renderer related so should belong &quot;Layout and Rendering&quot;.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>552199</commentid>
    <comment_count>11</comment_count>
      <attachid>120166</attachid>
    <who name="Dimitri Glazkov (Google)">dglazkov</who>
    <bug_when>2012-02-08 09:22:39 -0800</bug_when>
    <thetext>Comment on attachment 120166
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=120166&amp;action=review

&gt; Source/WebCore/ChangeLog:9
&gt; +        This patch postpones removing renderers just after children are destroyed.

Can you explain a bit more as to why this is the right solution? Why does this behave differently in a shadow DOM subtree?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>556199</commentid>
    <comment_count>12</comment_count>
    <who name="Shinya Kawanaka">shinyak</who>
    <bug_when>2012-02-14 04:00:00 -0800</bug_when>
    <thetext>(In reply to comment #11)
&gt; (From update of attachment 120166 [details])
&gt; View in context: https://bugs.webkit.org/attachment.cgi?id=120166&amp;action=review
&gt; 
&gt; &gt; Source/WebCore/ChangeLog:9
&gt; &gt; +        This patch postpones removing renderers just after children are destroyed.
&gt; 
&gt; Can you explain a bit more as to why this is the right solution? Why does this behave differently in a shadow DOM subtree?

Actually that code was written when I was a (very) newbie of rendering tree...
Let me consider more right solution (or confirm this is the right solution) later.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>565312</commentid>
    <comment_count>13</comment_count>
      <attachid>128949</attachid>
    <who name="Hajime Morrita">morrita</who>
    <bug_when>2012-02-26 21:53:53 -0800</bug_when>
    <thetext>Created attachment 128949
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>565314</commentid>
    <comment_count>14</comment_count>
    <who name="Hajime Morrita">morrita</who>
    <bug_when>2012-02-26 21:56:30 -0800</bug_when>
    <thetext>Dimitri, could you take a look?
It looks making code consistent just fixes the problem.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>565336</commentid>
    <comment_count>15</comment_count>
      <attachid>128949</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2012-02-26 22:30:50 -0800</bug_when>
    <thetext>Comment on attachment 128949
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=128949&amp;action=review

&gt; Source/WebCore/dom/Element.cpp:971
&gt; +        for (Node* child = firstChild(); child; child = child-&gt;nextSibling()) {
&gt; +            if (child-&gt;attached())
&gt; +                child-&gt;detach();
&gt; +        }

Can we call ContainerNode::detach() here instead?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>565374</commentid>
    <comment_count>16</comment_count>
      <attachid>128949</attachid>
    <who name="Shinya Kawanaka">shinyak</who>
    <bug_when>2012-02-26 23:25:50 -0800</bug_when>
    <thetext>Comment on attachment 128949
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=128949&amp;action=review

&gt;&gt; Source/WebCore/dom/Element.cpp:971
&gt;&gt; +        }
&gt; 
&gt; Can we call ContainerNode::detach() here instead?

I don&apos;t think so, because ContainerNode::detach() will call Node::detach().
Having ContainerNode::detachChildren() might be useful, because we have a lot of similar code.

&gt; Source/WebCore/dom/Element.cpp:973
&gt; +        shadowRootList()-&gt;detach();

Now that shadowRootList() has been renamed to shadowTree().</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>565382</commentid>
    <comment_count>17</comment_count>
      <attachid>128949</attachid>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2012-02-26 23:33:46 -0800</bug_when>
    <thetext>Comment on attachment 128949
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=128949&amp;action=review

Okay, I think I understand what&apos;s happening on my second look.

&gt;&gt;&gt; Source/WebCore/dom/Element.cpp:971
&gt;&gt;&gt; +        }
&gt;&gt; 
&gt;&gt; Can we call ContainerNode::detach() here instead?
&gt; 
&gt; I don&apos;t think so, because ContainerNode::detach() will call Node::detach().
&gt; Having ContainerNode::detachChildren() might be useful, because we have a lot of similar code.

Oh I see what you&apos;re saying. Yeah, adding ContainerNode::detachChildren seems like a valuable refactoring of its own. I wonder it should be inlined or not.

&gt; LayoutTests/fast/dom/shadow/shadow-ul-li.html:8
&gt; +        return;  // needs ShadowRoot

Can we output some message about needing shadowRoot? Presumably, we should be able to modify test to be able to run without DRT once shadow DOM API becomes available to DOM?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>565466</commentid>
    <comment_count>18</comment_count>
    <who name="Hajime Morrita">morrita</who>
    <bug_when>2012-02-27 01:34:26 -0800</bug_when>
    <thetext>(In reply to comment #17)
&gt; &gt; LayoutTests/fast/dom/shadow/shadow-ul-li.html:8
&gt; &gt; +        return;  // needs ShadowRoot
&gt; 
&gt; Can we output some message about needing shadowRoot? Presumably, we should be able to modify test to be able to run without DRT once shadow DOM API becomes available to DOM?
Oops. This has been there when it was an attached repro. I&apos;ll remove it and add Skipped lines.

(In reply to comment #16)
&gt; (From update of attachment 128949 [details])
&gt; View in context: https://bugs.webkit.org/attachment.cgi?id=128949&amp;action=review
&gt; &gt; Source/WebCore/dom/Element.cpp:973
&gt; &gt; +        shadowRootList()-&gt;detach();
&gt; 
&gt; Now that shadowRootList() has been renamed to shadowTree().
God catch! I&apos;ll followup shortly.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>565643</commentid>
    <comment_count>19</comment_count>
    <who name="Julien Chaffraix">jchaffraix</who>
    <bug_when>2012-02-27 07:38:02 -0800</bug_when>
    <thetext>It looks like the change was landed in http://trac.webkit.org/changeset/108980. Because the ChangeLog contained the wrong bug number, the final patch ended up in bug 79630. Morrita, could you update the ChangeLog bug URL and close this bug if I haven&apos;t missed anything?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>566080</commentid>
    <comment_count>20</comment_count>
    <who name="Hajime Morrita">morrita</who>
    <bug_when>2012-02-27 16:18:35 -0800</bug_when>
    <thetext>Good catch! Fixed http://trac.webkit.org/changeset/109037.
Thank you for pointing it out.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>118291</attachid>
            <date>2011-12-07 17:29:59 -0800</date>
            <delta_ts>2011-12-07 17:29:59 -0800</delta_ts>
            <desc>Repro layout test</desc>
            <filename>0001-Repro.patch</filename>
            <type>text/plain</type>
            <size>1690</size>
            <attacher name="Dominic Cooney">dominicc</attacher>
            
              <data encoding="base64">RnJvbSA4OWIxYjhlMTQ2YTUyMmJkMjg2NWRiNTY4ZjBkNzFiZTIwMWYxMWJjIE1vbiBTZXAgMTcg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</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>120166</attachid>
            <date>2011-12-21 03:35:58 -0800</date>
            <delta_ts>2012-02-26 21:53:47 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-72440-20111221203556.patch</filename>
            <type>text/plain</type>
            <size>3895</size>
            <attacher name="Shinya Kawanaka">shinyak</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTAzMzgzCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>128949</attachid>
            <date>2012-02-26 21:53:53 -0800</date>
            <delta_ts>2012-02-27 16:21:23 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-72440-20120227145351.patch</filename>
            <type>text/plain</type>
            <size>4167</size>
            <attacher name="Hajime Morrita">morrita</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTA4OTU1CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>
<flag name="review"
          id="131468"
          type_id="1"
          status="+"
          setter="rniwa"
    />
          </attachment>
      

    </bug>

</bugzilla>