Closed Bug 842009 Opened 7 years ago Closed 7 years ago

Crashes displaying text-tref-03-b.svg with svg.text.css-frames.enabled

Categories

(Core :: SVG, defect)

x86
Windows Vista
defect
Not set

Tracking

()

VERIFIED FIXED
mozilla21

People

(Reporter: longsonr, Assigned: heycam)

References

()

Details

Attachments

(1 file)

###!!! ASSERTION: GetAnimatedLengthListValues on element with no length list attribs: 'info.mLengthListCount > 0', file .../nsSVGElement.cpp, line 1758
###!!! ABORT: Bad caller: 'false', file .../nsSVGElement.cpp, line 1860
http://dev.w3.org/SVG/profiles/1.1F2/test/svg/styling-pres-02-f.svg also crashes with the same assert/abort as above.
Blocks: svgtext
Attached patch patchSplinter Review
Should be not recognising <tref> as a text content element while we don't support it.
Assignee: nobody → cam
Status: NEW → ASSIGNED
Attachment #714849 - Flags: review?(longsonr)
Attachment #714849 - Flags: review?(longsonr) → review+
https://hg.mozilla.org/mozilla-central/rev/6693706cbd4f
Status: ASSIGNED → RESOLVED
Closed: 7 years ago
Flags: in-testsuite+
Resolution: --- → FIXED
Target Milestone: --- → mozilla21
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.