Closed Bug 860378 Opened 8 years ago Closed 8 years ago

Crash with splitText, svg.text.css-frames.enabled

Categories

(Core :: SVG, defect)

22 Branch
defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla23
Tracking Status
firefox21 --- unaffected
firefox22 --- affected
firefox23 --- verified

People

(Reporter: jruderman, Assigned: heycam)

References

(Blocks 1 open bug)

Details

(Keywords: crash, regression, testcase)

Crash Data

Attachments

(3 files)

With:
  user_pref("svg.text.css-frames.enabled", true);

Crash [@ mozilla::TextNodeCorrespondenceRecorder::TraverseAndRecord]
On Windows: bp-fbbf0304-933d-495d-879f-30b702130410.
Crash Signature: [@ mozilla::TextNodeCorrespondenceRecorder::TraverseAndRecord] → [@ mozilla::TextNodeCorrespondenceRecorder::TraverseAndRecord(nsIFrame*)]
OS: Mac OS X → All
Hardware: x86_64 → All
Attached file stack (gdb)
Attached patch patchSplinter Review
I made a mistake when addressing https://bugzilla.mozilla.org/show_bug.cgi?id=855183#c3 by not actually passing in the new ePositioningDirtyDueToMutation value to NotifyGlyphMetricsChange().
Assignee: nobody → cam
Status: NEW → ASSIGNED
Attachment #736071 - Flags: review?(longsonr)
Attachment #736071 - Flags: review?(longsonr) → review+
Keywords: regression
Version: Trunk → 22 Branch
https://hg.mozilla.org/mozilla-central/rev/b08b0dc81a5d
Status: ASSIGNED → RESOLVED
Closed: 8 years ago
Flags: in-testsuite+
Resolution: --- → FIXED
Target Milestone: --- → mozilla23
Verified as fixed on Firefox 23 beta 3 (also there are no crash reports in Socorro  with the signatures related to this bug).

Mozilla/5.0 (X11; Linux i686; rv:23.0) Gecko/20100101 Firefox/23.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:23.0) Gecko/20100101 Firefox/23.0
Mozilla/5.0 (Windows NT 6.1; rv:23.0) Gecko/20100101 Firefox/23.0
Build ID: 20130703181823
You need to log in before you can comment on or make changes to this bug.