Closed Bug 467323 Opened 11 years ago Closed 11 years ago
Crash [@ ns
SVGFEDisplacement Map Element::Filter]
###!!! ASSERTION: stride mismatch: 'input->mImage.mImage->Stride() == primitive->mImage.mImage->Stride()', file /Users/jruderman/central/layout/svg/base/src/nsSVGFilterInstance.cpp, line 492 Bug 448243 also triggers this assertion. This testcase not only triggers the assertion, but also makes Firefox draw random pixels and/or dereference bogus addresses [@ nsSVGFEDisplacementMapElement::Filter]. The testcase is simply layout/reftests/svg/filters/feDisplacementMap-2.svg with one less element.
Flags: blocking1.9.1? → blocking1.9.1+
Priority: -- → P2
Seems to have been fixed by the checkin for bug 448243.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Depends on: 448243
Whiteboard: [depends on 448243]
...which is now fixed on 1.9.1 as well.
verified fixed using Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1b3pre) Gecko/20081230 Shiretoko/3.1b3pre. Updating keyword. verified fixed on the trunk as well using Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2a1pre) Gecko/20081230 Minefield/3.2a1pre
Want this for 1.9.0; not needed for 1.8 which doesn't have svg filters.
Whiteboard: [depends on 448243] → [sg:moderate][depends on 448243]
Assigning this to roc since he owns bug 448243, which this bug is fixed by.
Assignee: nobody → roc
I don't crash with this testcase in 184.108.40.206pre, looks like we don't need this.
Flags: in-testsuite? → in-testsuite+
Crash Signature: [@ nsSVGFEDisplacementMapElement::Filter]
You need to log in before you can comment on or make changes to this bug.