550355 - "ASSERTION: Not going to invalidate the correct area" with tweak to SVG filter & very large 'y'

Status: RESOLVED WORKSFORME

(Core :: SVG, defect)

Description

[Jesse Ruderman]

Attachment: testcase

###!!! ASSERTION: Not going to invalidate the correct area: 'Not Reached', file /Users/jruderman/mozilla-central/layout/svg/base/src/nsSVGUtils.cpp, line 641

Comment 1

[Daniel Holbert [:dholbert]]

Attachment: testcase 2 (reduced value)

Same as original testcase, except I:
 - added whitespace for readability
 - reduced the very-large 'y' value to the lowest integer value that reproduces the issue.

That minimal "bad" y-value is 2147483584, which happens to be 2^31 - 64.

So, this looks like this bug depends on us overflowing nscoord_MAX somewhere.

Comment 2

[Daniel Holbert [:dholbert]]

Attachment: testcase 3 (no SMIL)

This testcase has no SMIL -- instead, it uses js to tweak the filter's "x" value.  This triggers a single instance of the assertion. (for the single tweak)

The setTimeout() in this testcase is required -- we only seem to trigger this issue if the tweak happens *after* our initial paint.  (If I remove the setTimeout call, or reduce the timeout to 0, then I don't hit the assertion.)

Comment 3

[:Cykesiopka]

Bug 738192 removed the assertion:
https://hg.mozilla.org/mozilla-central/diff/5c26b1320e1a/layout/svg/base/src/nsSVGUtils.cpp