Closed Bug 860378 Opened 11 years ago Closed 11 years ago

Crash with splitText, svg.text.css-frames.enabled

Categories

(Core :: SVG, defect)

Product:
Core
Component:
SVG
Version:
22 Branch
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla23
Tracking Flags:
Tracking Status
firefox21 --- unaffected
firefox22 --- affected
firefox23 --- verified

People

(Reporter: jruderman, Assigned: heycam)

References

Details

(Keywords: crash, regression, testcase)

Crash Data

Attachments

(3 files)

testcase (with pref, crashes Firefox when loaded)
433 bytes, image/svg+xml
Details
stack (gdb)
10.92 KB, text/plain
Details
patch
3.21 KB, patch
longsonr
: review+
Details | Diff | Splinter Review 
With:
  user_pref("svg.text.css-frames.enabled", true);

Crash [@ mozilla::TextNodeCorrespondenceRecorder::TraverseAndRecord]
On Windows: bp-fbbf0304-933d-495d-879f-30b702130410.
Crash Signature: [@ mozilla::TextNodeCorrespondenceRecorder::TraverseAndRecord] → [@ mozilla::TextNodeCorrespondenceRecorder::TraverseAndRecord(nsIFrame*)]
OS: Mac OS X → All
Hardware: x86_64 → All
Attached file stack (gdb) — 

    
    

    
  

      
      
      
      

        Attached patch
          
          
        patch
        — 
          — Splinter Review
      

    


  
I made a mistake when addressing https://bugzilla.mozilla.org/show_bug.cgi?id=855183#c3 by not actually passing in the new ePositioningDirtyDueToMutation value to NotifyGlyphMetricsChange().
Assignee: nobody → cam
Status: NEW → ASSIGNED

        Attachment #736071 -
        Flags: review?(longsonr)

    
  
Blocks: 855183

        Attachment #736071 -
        Flags: review?(longsonr) → review+

    
  

          status-firefox21:
          --- → unaffected

          status-firefox22:
          --- → affected

          status-firefox23:
          --- → affected
Keywords: regression
Version: Trunk → 22 Branch

    
    

    
  
https://hg.mozilla.org/mozilla-central/rev/b08b0dc81a5d
Status: ASSIGNED → RESOLVED
Closed: 11 years ago
Flags: in-testsuite+
Resolution: --- → FIXED
Target Milestone: --- → mozilla23

    
    

    
  
Verified as fixed on Firefox 23 beta 3 (also there are no crash reports in Socorro  with the signatures related to this bug).

Mozilla/5.0 (X11; Linux i686; rv:23.0) Gecko/20100101 Firefox/23.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:23.0) Gecko/20100101 Firefox/23.0
Mozilla/5.0 (Windows NT 6.1; rv:23.0) Gecko/20100101 Firefox/23.0
Build ID: 20130703181823

          status-firefox23:
          fixed → verified

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: