Closed
Bug 722003
Opened 12 years ago
Closed 12 years ago
"ASSERTION: null nsSVGPathGeometry frame" and crash
Categories
(Core :: SVG, defect)
Core
SVG
Tracking
()
RESOLVED
FIXED
mozilla12
People
(Reporter: jruderman, Assigned: longsonr)
References
Details
(4 keywords)
Crash Data
Attachments
(3 files)
###!!! ASSERTION: null nsSVGPathGeometry frame: 'mMarkedFrame', file layout/svg/base/src/nsSVGMarkerFrame.cpp, line 104 (Similar symptoms to bug 713413.)
Reporter | ||
Comment 1•12 years ago
|
||
Comment 2•12 years ago
|
||
Confirmed on Windows with 32-bit and 64-bit builds.
Crash Signature: [@ nsSVGMarkerFrame::GetCanvasTM]
[@ nsSVGMarkerFrame::GetCanvasTM()]
OS: Mac OS X → All
Hardware: x86_64 → All
Comment 3•12 years ago
|
||
Confirmed on 32-bit Linux, too. Doesn't crash with a nightly from 2011-07-30, so this appears to be a regression since then.
Keywords: regression
Comment 4•12 years ago
|
||
ON MOZILLA-CENTRAL: Last good nightly: 2011-12-30 First bad nightly: 2011-12-31 Pushlog: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=1d0a814ebf12&tochange=f268da52217d ON MOZILLA-INBOUND: Last good nightly: 2011-12-29 First bad nightly: 2011-12-30 Pushlog: http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=6d443ec0dda1&tochange=26acd30cab90
Comment 5•12 years ago
|
||
There were two bugs that day that mention SVG foreignObject (which this bug's testcase uses) in their commit messages:
> baa4388f9cea Robert O'Callahan — Bug 591718. Make getClientRects/getBoundingClientRect take transforms into account, and not treat SVG <foreignObject> as establishing a new viewport. r=mats
> 29b864db2073 Robert Longson — Bug 713413 - Fix crash when dynamically adding foreignObject as a child of non-displayed element. r=dholbert
Looks like a regression from one of those.
Assignee | ||
Comment 6•12 years ago
|
||
It's bug 591718. Can't call GetCanvasTMForChildren if (GetStateBits() & NS_STATE_SVG_NONDISPLAY_CHILD) not sure what to return in that case though.
Depends on: 591718
an all-zero matrix perhaps?
Assignee | ||
Comment 8•12 years ago
|
||
Assignee: nobody → longsonr
Attachment #592397 -
Flags: review?(roc)
Comment on attachment 592397 [details] [diff] [review] patch Review of attachment 592397 [details] [diff] [review]: ----------------------------------------------------------------- thanks!
Attachment #592397 -
Flags: review?(roc) → review+
Assignee | ||
Comment 10•12 years ago
|
||
pushed https://hg.mozilla.org/integration/mozilla-inbound/rev/8b7bae91f349
Flags: in-testsuite+
Target Milestone: --- → mozilla12
Comment 11•12 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/8b7bae91f349
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•