icecat: add release icecat-140.8.0-2 for aramo

icecat/dom/base/nsRange.cpp

@@ -3583,6 +3583,7 @@ void nsRange::CreateOrUpdateCrossShadowBoundaryRangeIfNeeded(
   // Nodes at least needs to be in the same document.
   if (startNode && endNode &&
       startNode->GetComposedDoc() != endNode->GetComposedDoc()) {
+    ResetCrossShadowBoundaryRange();
     return;
   }
 
@@ -3597,6 +3598,13 @@ void nsRange::CreateOrUpdateCrossShadowBoundaryRangeIfNeeded(
       return false;
     }
 
+    // We don't allow ranges to span different NAC subtrees (because we don't
+    // notify when unbinding NAC roots historically). nsRange can already deal
+    // with the "same anonymous subtree" case.
+    if (aContainer->IsInNativeAnonymousSubtree()) {
+      return false;
+    }
+
     // AbstractRange::GetClosestCommonInclusiveAncestor only supports
     // Document and Content nodes.
     return aContainer->IsDocument() || aContainer->IsContent();