Created attachment 564952 [details]
testcase (asserts fatally when loaded)
###!!! ABORT: Rendering should be disabled: 'viewbox.width > 0.0f && viewbox.height > 0.0f', file content/svg/content/src/nsSVGMarkerElement.cpp, line 383
Guessing this is a regression from bug 687830, which added the assertion.
Created attachment 564954 [details]
Created attachment 564974 [details] [diff] [review]
Comment on attachment 564974 [details] [diff] [review]
Looks good, r=me.
Could you add one additional crashtest, using 0 markerWidth (instead of markerHeight)? We abort on that too, right now.