Closed
Bug 402408
Opened 18 years ago
Closed 18 years ago
SVG gradient crash [@ nsSVGUtils::RemoveObserver] [@ nsSVGGeometryFrame::SetupCairoFill]
Categories
(Core :: SVG, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: jruderman, Assigned: longsonr)
References
Details
(Keywords: crash, testcase)
Crash Data
Attachments
(2 files)
|
703 bytes,
image/svg+xml
|
Details | |
|
853 bytes,
patch
|
tor
:
review+
tor
:
superreview+
tor
:
approval1.9+
|
Details | Diff | Splinter Review |
testcase (crashes Firefox when closed)
Closing the testcase (e.g. by reloading it) causes a crash with one of the following signatures:
* [@ nsSVGUtils::RemoveObserver]
* [@ nsSVGGeometryFrame::SetupCairoFill]
|
Assignee | |
Comment 1•18 years ago
|
||
Get nested will/do modify calls and the inner mod_die is then ignored.
Assignee: nobody → longsonr
Status: NEW → ASSIGNED
Attachment #287318 -
Flags: superreview?(tor)
Attachment #287318 -
Flags: review?(tor)
Attachment #287318 -
Flags: superreview?(tor)
Attachment #287318 -
Flags: superreview+
Attachment #287318 -
Flags: review?(tor)
Attachment #287318 -
Flags: review+
|
|
Assignee | |
Updated•18 years ago
|
Attachment #287318 -
Flags: approval1.9?
Attachment #287318 -
Flags: approval1.9? → approval1.9+
|
|
Assignee | |
Comment 2•18 years ago
|
||
checked in.
This same patch could go on the 1.8.1 branch as the code is the same there.
Status: ASSIGNED → RESOLVED
Closed: 18 years ago
Resolution: --- → FIXED
|
||
Updated•14 years ago
|
Crash Signature: [@ nsSVGUtils::RemoveObserver]
[@ nsSVGGeometryFrame::SetupCairoFill]
You need to log in
before you can comment on or make changes to this bug.
Description
•