612736 - "ASSERTION: failed to track whether we're in our referenced element's observer list"

Status: RESOLVED WORKSFORME

(Core :: SVG, defect)

Description

[Jesse Ruderman]

Attachment: testcase

###!!! ASSERTION: failed to track whether we're in our referenced element's observer list!: 'inObserverList == mInObserverList', 
file layout/svg/base/src/nsSVGEffects.cpp, line 138

Comment 1

[Jesse Ruderman]

Attachment: stack trace

Comment 2

[Daniel Holbert [:dholbert]]

Attachment: testcase 2

Confirmed on my linux box.  Looks like the scripting isn't actually involved here -- I can remove it and Jesse's testcase still triggers the assertion.

Here's the same testcase, with the scripting removed (as a simplification), and also with the path made visible & with different letters in the two <textPath> elements.

FWIW, everything seems to paint correctly here.

Comment 3

[Robert Longson [:longsonr]]

Doesn't seem to occur any more.

Comment 4

[Daniel Holbert [:dholbert]]

Attachment: crashtests patch

This patch adds the original testcase (w/ reftest-wait) and testcase 2 as crashtests.

Comment 5

[Daniel Holbert [:dholbert]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/d8711e947ce9

Comment 6

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/d8711e947ce9