579017 - Crash [@ nsSVGAngle::NewValueSpecifiedUnits]

Status: VERIFIED FIXED

(Core :: SVG, defect)

Description

[Martijn Wargers (dead)]

Attachment: testcase

See testcase, which crashes current trunk build on load.

http://crash-stats.mozilla.com/report/index/bp-1c440876-748b-4dde-9b04-0cbbb2100715
0  	xul.dll  	nsSVGAngle::NewValueSpecifiedUnits  	 content/svg/content/src/nsSVGAngle.cpp:305
1 	xul.dll 	DOMSVGAngle::NewValueSpecifiedUnits 	content/svg/content/src/nsSVGAngle.cpp:94
2 	xul.dll 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:102
3 	xul.dll 	XPC_WN_CallMethod 	js/src/xpconnect/src/xpcwrappednativejsops.cpp:1789
4 	mozjs.dll 	js_Invoke 	js/src/jsinterp.cpp:654
5 	mozjs.dll 	js_Interpret 	js/src/jsops.cpp:2158
6 	mozjs.dll 	js_Execute 	js/src/jsinterp.cpp:854
7 	mozjs.dll 	JS_EvaluateUCScriptForPrincipals 	js/src/jsapi.cpp:4561
8 	xul.dll 	nsJSContext::EvaluateString 	dom/base/nsJSEnvironment.cpp:1786
9 	xul.dll 	nsScriptLoader::EvaluateScript 	content/base/src/nsScriptLoader.cpp:752
10 	xul.dll 	nsScriptLoader::ProcessRequest 	content/base/src/nsScriptLoader.cpp:665
11 	xul.dll 	nsCOMPtr_base::assign_with_AddRef 	obj-firefox/xpcom/build/nsCOMPtr.cpp:89
12 	xul.dll 	nsScriptLoader::ProcessScriptElement 	content/base/src/nsScriptLoader.cpp:614

Comment 1

[Robert Longson [:longsonr]]

Attachment: patch

Comment 2

[Robert Longson [:longsonr]]

pushed http://hg.mozilla.org/mozilla-central/rev/7ec1f3f79ee4

Comment 3

[Martijn Wargers (dead)]

Verified fixed, using:
Mozilla/5.0 (Windows; Windows NT 6.1; rv:2.0b3pre) Gecko/20100729 Minefield/4.0b3pre