1545040 - SVG file found in the wild hangs all firefox tabs

Status: RESOLVED WORKSFORME

(Core :: SVG, defect, P3)

Description

[Eugenio Bruno]

Attachment: int_to_float.svg

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36

Steps to reproduce:

1. Open one of these webpages (opening the svgs locally does not appear to reliably trigger the hang):

https://github.com/Eugenio-Bruno/svg_crashing_ff/blob/master/original.svg
https://github.com/Eugenio-Bruno/svg_crashing_ff/blob/master/int_to_float.svg

Actual results:

On windows 10 x64:

Every tab, including that one, hangs, and just shows a loading wheel (even if the tab was previously correctly rendered).

On a windows 10 VM this does not happen.

I noticed that these files have a path with huge numbers (>2^50). I hacked together a script to make them smaller (hack.py), resulting in this file which seems not to hang:

https://github.com/Eugenio-Bruno/svg_crashing_ff/blob/master/smaller_nums.svg

Expected results:

Firefox should not hang.

Comment 1

[Eugenio Bruno]

Attachment: original.svg

Comment 2

[Eugenio Bruno]

Attachment: smaller_nums.svg

Comment 3

[Eugenio Bruno]

Attachment: hack.py

Comment 4

[violet.bugreport]

I couldn't reproduce on Ubuntu.

Comment 5

[Eugenio Bruno]

I forgot to mention this, but so far, I've been able to reproduce this only on a physical Windows 10 machine. I can't reproduce on a windows 10 VM, I can't reproduce on linux (I've checked on Antergos), and a friend couldn't reproduce on OSX.

Comment 6

[Robert Longson [:longsonr]]

The files in comment 0 have gone, the testcases in the bug don't hang for me.