Created attachment 584236 [details] testcase (crashes Firefox when loaded) ###!!! ASSERTION: null nsSVGPathGeometry frame: 'mMarkedFrame', file layout/svg/base/src/nsSVGMarkerFrame.cpp, line 104 Crash [@ nsSVGMarkerFrame::GetCanvasTM]
Created attachment 584335 [details] [diff] [review] patch
Assignee: nobody → longsonr
Attachment #584335 - Flags: review?(dholbert)
Comment on attachment 584335 [details] [diff] [review] patch Makes sense. It'd be nice to have a comment explaining this chunk, e.g. > // No need to invalidate on first reflow - that will happen elsewhere. > // (Moreover, we don't know our bounds yet, so we don't know what to invalidate.) (assuming that that's true)
Attachment #584335 - Flags: review?(dholbert) → review+
er, s/on first reflow/before first reflow/
Target Milestone: --- → mozilla12
Note: I've backed out the patch that regressed this from aurora (in bug 708155 comment 12), so now mozilla12 (current trunk) is the only version to be affected by this bug. (and it'll be fixed there once comment 5 is merged to m-c)
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → FIXED
Crash Signature: [@ nsSVGMarkerFrame::GetCanvasTM] → [@ nsSVGMarkerFrame::GetCanvasTM] [@ nsSVGMarkerFrame::GetCanvasTM()]
Verified using today's (19.4) beta debug build on Ubuntu 11.10. No crash/assertion occurred when loading the testcase from comment 0.
status-firefox12: fixed → verified
You need to log in before you can comment on or make changes to this bug.