[Webkit-unassigned] [Bug 13611] Crash in setAttributeNS setting href of SVG <use> to nonexistent symbol

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=13611





------- Comment #2 from macdome at opendarwin.org  2007-05-08 04:06 PDT -------
Ok, well this is a brute-force fix:

Index: ksvg2/svg/SVGUseElement.cpp
===================================================================
--- ksvg2/svg/SVGUseElement.cpp (revision 21299)
+++ ksvg2/svg/SVGUseElement.cpp (working copy)
@@ -142,10 +142,14 @@
     if (!attached())
        return;

+    // do a complete rebuild of the renderer if the target changed.
+    if (attr->name().matches(XLinkNames::hrefAttr)) {
+        detach();
+        attach();
+    }
     // Only update the tree if x/y/width/height or xlink:href changed.
-    if (attr->name() == SVGNames::xAttr || attr->name() == SVGNames::yAttr ||
-        attr->name() == SVGNames::widthAttr || attr->name() ==
SVGNames::heightAttr ||
-        attr->name().matches(XLinkNames::hrefAttr))
+    else if (attr->name() == SVGNames::xAttr || attr->name() ==
SVGNames::yAttr ||
+        attr->name() == SVGNames::widthAttr || attr->name() ==
SVGNames::heightAttr)
         buildPendingResource();
     else if (m_shadowTreeRootElement)
         m_shadowTreeRootElement->setChanged();


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.