398903 - Crash [@ nsSVGEnum::SetBaseValue] setting orient attribute on a marker

Status: RESOLVED FIXED

(Core :: SVG, defect)

Description

[Rob Marshall [tH]]

Attachment: testcase

I can only reproduce this in non-libxul builds. Since the checkin for bug 383685 (2007-09-25), an svg:marker element with an orient attribute (any value) causes an access violation in gklayout.
From what I understand, it's because SetAttr calls mOrientType.SetBaseValue, which expects all nsSVGEnum to have mappings, and orientType doesn't.

>	gklayout.dll!nsSVGEnum::SetBaseValue(unsigned short aValue=1, nsSVGElement * aSVGElement=0x02c8ed78, int aDoSetAttr=0)  Line 105 + 0x9	C++
 	gklayout.dll!nsSVGMarkerElement::SetAttr(int aNameSpaceID=0, nsIAtom * aName=0x014efb58, nsIAtom * aPrefix=0x00000000, const nsAString_internal & aValue={...}, int aNotify=0)  Line 306	C++
 	gklayout.dll!nsXMLContentSink::AddAttributes(const unsigned short * * aAtts=0x00000000, nsIContent * aContent=0x014efb58)  Line 1500 + 0x32	C++
 	gklayout.dll!nsXMLContentSink::HandleStartElement(const unsigned short * aName=0x00000000, const unsigned short * * aAtts=0x0207cf90, unsigned int aAttsCount=2, int aIndex=-1, unsigned int aLineNumber=1, int aInterruptable=1)  Line 1058	C++
...

Comment 1

[Robert Longson [:longsonr]]

This is fixed by the patch for bug 397749

Comment 2

[Robert Longson [:longsonr]]

patch in bug 397749 checked in.