Closed Bug 307470 Opened 19 years ago Closed 19 years ago

SVG/DOM infinite-recursion crash involving <svg:marker> and <svg:path>

Categories

(Core :: SVG, defect)

PowerPC
macOS
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: jruderman, Assigned: tor)

References

Details

(Keywords: crash, verified1.8)

Attachments

(3 files)

Testcase crashes:
* Trunk hourly build from September 7 on Mac OS X.
* Branch nightly respin build from September 7 on Mac OS X.

Similar to bug 299204?
Attachment #196242 - Flags: review?(scootermorris)
Attachment #196242 - Flags: review?(scootermorris) → review+
Checked in on trunk.
Attachment #196242 - Flags: approval1.8b5?
Status: NEW → RESOLVED
Closed: 19 years ago
Flags: blocking1.8b5+
Resolution: --- → FIXED
Comment on attachment 196242 [details] [diff] [review]
prevent infinite loops

Approved for 1.8b5 per bug meeting
Attachment #196242 - Flags: approval1.8b5? → approval1.8b5+
Checked in on branch:

Checking in nsSVGMarkerFrame.cpp;
/cvsroot/mozilla/layout/svg/base/src/nsSVGMarkerFrame.cpp,v  <-- 
nsSVGMarkerFrame.cpp
new revision: 1.11.2.1; previous revision: 1.11
done
Checking in nsSVGMarkerFrame.h;
/cvsroot/mozilla/layout/svg/base/src/nsSVGMarkerFrame.h,v  <--  nsSVGMarkerFrame.h
new revision: 1.6.6.1; previous revision: 1.6
done
Checking in nsSVGPathGeometryFrame.cpp;
/cvsroot/mozilla/layout/svg/base/src/nsSVGPathGeometryFrame.cpp,v  <-- 
nsSVGPathGeometryFrame.cpp
new revision: 1.27.2.1; previous revision: 1.27
done
Keywords: fixed1.8
Keywords: fixed1.8verified1.8
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: