From 88f56acfe2ace196c592587e64370ddc82fcdf6d Mon Sep 17 00:00:00 2001
From: William Chen <wchen@mozilla.com>
Date: Mon, 7 Jul 2014 18:09:39 -0700
Subject: [PATCH] Bug 1032654 - Remove invalid assertion from HTML parser.
 r=smaug

---
 content/html/content/crashtests/1032654.html    | 1 +
 content/html/content/crashtests/crashtests.list | 1 +
 parser/html/nsHtml5TreeOperation.cpp            | 1 -
 3 files changed, 2 insertions(+), 1 deletion(-)
 create mode 100644 content/html/content/crashtests/1032654.html

diff --git a/content/html/content/crashtests/1032654.html b/content/html/content/crashtests/1032654.html
new file mode 100644
index 00000000000..3067e107702
--- /dev/null
+++ b/content/html/content/crashtests/1032654.html
@@ -0,0 +1 @@
+<template>&#x000d;#
diff --git a/content/html/content/crashtests/crashtests.list b/content/html/content/crashtests/crashtests.list
index 14a739b2b1e..9238f441446 100644
--- a/content/html/content/crashtests/crashtests.list
+++ b/content/html/content/crashtests/crashtests.list
@@ -55,3 +55,4 @@ load 877910.html
 load 903106.html
 load 916322-1.html
 load 916322-2.html
+load 1032654.html
diff --git a/parser/html/nsHtml5TreeOperation.cpp b/parser/html/nsHtml5TreeOperation.cpp
index da68596fdfc..b75c2bb13ce 100644
--- a/parser/html/nsHtml5TreeOperation.cpp
+++ b/parser/html/nsHtml5TreeOperation.cpp
@@ -124,7 +124,6 @@ nsHtml5TreeOperation::AppendTextToTextNode(const char16_t* aBuffer,
 {
   NS_PRECONDITION(aTextNode, "Got null text node.");
   MOZ_ASSERT(aBuilder);
-  MOZ_ASSERT(aBuilder->GetDocument() == aTextNode->OwnerDoc());
   MOZ_ASSERT(aBuilder->IsInDocUpdate());
   uint32_t oldLength = aTextNode->TextLength();
   CharacterDataChangeInfo info = {