Closed Bug 842009 Opened 7 years ago Closed 7 years ago
Crashes displaying text-tref-03-b
.svg with svg .text .css-frames .enabled
###!!! ASSERTION: GetAnimatedLengthListValues on element with no length list attribs: 'info.mLengthListCount > 0', file .../nsSVGElement.cpp, line 1758 ###!!! ABORT: Bad caller: 'false', file .../nsSVGElement.cpp, line 1860
http://dev.w3.org/SVG/profiles/1.1F2/test/svg/styling-pres-02-f.svg also crashes with the same assert/abort as above.
Should be not recognising <tref> as a text content element while we don't support it.
Assignee: nobody → cam
Status: NEW → ASSIGNED
Attachment #714849 - Flags: review?(longsonr)
Attachment #714849 - Flags: review?(longsonr) → review+
Backed out: https://hg.mozilla.org/integration/mozilla-inbound/rev/3a8784560224 and relanded: https://hg.mozilla.org/integration/mozilla-inbound/rev/6693706cbd4f since I forgot to fix up the "r=" in the commit message.
Status: ASSIGNED → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla21
You need to log in before you can comment on or make changes to this bug.