Open Bug 1402013 Opened 3 years ago Updated 2 years ago

Assertion failure: mContent->IsAnyOfSVGElements(nsGkAtoms::svg, nsGkAtoms::symbol) || (mContent->IsSVGElement(nsGkAtoms::use) && mRect.Size() == nsSize(0,0)) || mRect.IsEqualEdges(nsRect()) (Only inner-<svg>/<use> is expected to have mRect set)

Categories

(Core :: SVG, defect, P3)

defect

Tracking

()

Tracking Status
firefox-esr52 --- wontfix
firefox55 --- wontfix
firefox56 --- wontfix
firefox57 --- wontfix
firefox58 --- wontfix
firefox59 --- ?

People

(Reporter: jkratzer, Unassigned)

References

(Blocks 2 open bugs)

Details

(Keywords: assertion, testcase)

Attachments

(2 files)

Attached file trigger.html
Testcase found while fuzzing mozilla-central rev 47f7b6c64265.
Flags: in-testsuite?
Attached file Minidump stack trace
This goes back further than mozregression can bisect (1 year).
Priority: -- → P3
You need to log in before you can comment on or make changes to this bug.