732786 - "ASSERTION: Only expecting ignoreViewportScrolling for root frames and for image documents." with svg:foreignObject + drawWindow

Status: NEW

(Core :: SVG, defect)

Description

[Jesse Ruderman]

Attachment: testcase

###!!! ASSERTION: Only expecting ignoreViewportScrolling for root frames and for image documents.: '!aFrame->GetParent() || (doc && doc->IsBeingUsedAsImage())', file layout/base/nsLayoutUtils.cpp, line 1656

The assertion introduced/modified in http://hg.mozilla.org/mozilla-central/rev/762e8424548c

Comment 1

[Jesse Ruderman]

Attachment: stack trace

Comment 2

[Daniel Holbert [:dholbert]]

Which fuzzer XPI do I need to install for fuzzPriv.callDrawWindow()?
(I tried https://www.squarefree.com/extensions/domFuzzLite2.xpi but it still said "fuzzPriv.callDrawWindow is not a function")

Comment 3

[Daniel Holbert [:dholbert]]

(In reply to Jesse Ruderman from comment #0)
> The assertion introduced/modified in
> http://hg.mozilla.org/mozilla-central/rev/762e8424548c

For the record -- that cset sofened an existing assertion. ("must have root frame")

If there's a fuzzer XPI that works (and supports fuzzPriv.callDrawWindow) in builds from a year ago (before that cset), I'll bet the attached testcase would trigger that original assertion in those builds.

Comment 4

[Jesse Ruderman]

I uploaded a new version of https://www.squarefree.com/extensions/domFuzzLite3.xpi that includes the callDrawWindow function.