790185 - crash when zooming svg with viewbox

Status: RESOLVED DUPLICATE of bug 767056

(Core :: SVG, defect)

Description

[Steve Horsley]

Attachment: Un-zoomable svg file

On linux (Xubuntu 12.04), view attached file then menu View > Zoom > Zoom In.
CPU usage climbs to 100% for a few seconds, then firefox crashes, segfault.
No such problems on FF-14 or earlier.
Removing the viewBox="0 0 600 600" from the file fixes the problem.

Comment 1

[Robert Longson [:longsonr]]

Is this still a problem with Aurora, Beta or a nightly?

Comment 2

[Steve Horsley]

I just downloaded firefox-16.0b2.tar.bz2, and it's still a problem there.

Comment 3

[Robert Longson [:longsonr]]

What does about:buildconfig say is the built from link for that build?

Comment 4

[Steve Horsley]

Built from http://hg.mozilla.org/releases/mozilla-beta/rev/cad589192f3c

Comment 5

[Steve Horsley]

I notice that in chromium, the attached file doesn't behave properly without the doctype declaration. It doesn't seem to affect this bug, but here is the doctype that was at the top of the file before I stripped all the clutter out:
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.0//EN"
    "http://www.w3.org/TR/2001/PR-SVG-20010719/DTD/svg10.dtd">

Comment 6

[Scoobidiver (away)]

Does it happen in Safe Mode (see https://support.mozilla.org/kb/troubleshoot-firefox-issues-using-safe-mode)?
Can you provide a stack trace (see https://developer.mozilla.org/docs/How_to_get_a_stacktrace_for_a_bug_report)?

Comment 7

[Robert Longson [:longsonr]]

bug 767056 doesn't seem to have fixed this since that landed before http://hg.mozilla.org/releases/mozilla-beta/rev/cad589192f3c

Doesn't seem to crash on Windows FWIW.

Comment 8

[Scoobidiver (away)]

(In reply to Robert Longson from comment #7)
> bug 767056 doesn't seem to have fixed this since that landed before
> http://hg.mozilla.org/releases/mozilla-beta/rev/cad589192f3c
Bug 767056 will land in 16.0b3: http://hg.mozilla.org/releases/mozilla-beta/graph

Comment 9

[Robert Longson [:longsonr]]

Ahh in that case can you test with a nightly please Steve?

Comment 10

[Steve Horsley]

Aha! The nightly works fine - zooms in and out beautifully.
Built from http://hg.mozilla.org/mozilla-central/rev/96287ad60bef


Extra info: on v15 and v16b the crash does occur in safe mode, and also if I remove all my settings by renaming ~/.mozilla. I'm not sure how to get a stack trace.

Comment 11

[Alice0775 White]

Regression window
Good:
http://hg.mozilla.org/mozilla-central/rev/762e95608da3
Mozilla/5.0 (X11; Linux i686; rv:15.0) Gecko/15 Firefox/15.0a1 ID:20120517030523
Bad 100% CPU:
http://hg.mozilla.org/mozilla-central/rev/e794cef56df6
Mozilla/5.0 (X11; Linux i686; rv:15.0) Gecko/15 Firefox/15.0a1 ID:20120518030516
Pushlog:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=762e95608da3&tochange=e794cef56df6
Triggered by:
05a339620439	Jonathan Watt — Bug 734082 - Compute and store bounds and visual overflow bounds for both SVG leaf and container frames. r=roc.


Fixed window(m-c):
Bad:
http://hg.mozilla.org/mozilla-central/rev/b772555c0fcc
Mozilla/5.0 (X11; Linux i686; rv:18.0) Gecko/18 Firefox/18.0a1 ID:20120831101517
Fixed:
http://hg.mozilla.org/mozilla-central/rev/a21fd4d085ad
Mozilla/5.0 (X11; Linux i686; rv:18.0) Gecko/18 Firefox/18.0a1 ID:20120901030528
Pushlog:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=b772555c0fcc&tochange=a21fd4d085ad

Fixed window(m-i):
Bad:
http://hg.mozilla.org/integration/mozilla-inbound/rev/7c5550c63a24
Mozilla/5.0 (X11; Linux i686; rv:18.0) Gecko/18 Firefox/18.0a1 ID:20120831073151
Fixed:
http://hg.mozilla.org/integration/mozilla-inbound/rev/bb5225ea88ba
Mozilla/5.0 (X11; Linux i686; rv:18.0) Gecko/18 Firefox/18.0a1 ID:20120831073350
Pushlog:
http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=7c5550c63a24&tochange=bb5225ea88ba
Fixed by: Bug 767056

Comment 12

[Robert Longson [:longsonr]]

Thanks Alice

Comment 13

[Jonathan Watt [:jwatt]]

Thanks for the bug report, Steve, and your willingness to narrow in on the cause.