[Webkit-unassigned] [Bug 13801] New: Crash when loading nonexisting symbol

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon May 21 15:08:55 PDT 2007


           Summary: Crash when loading nonexisting symbol
           Product: WebKit
           Version: 522+ (nightly)
          Platform: Macintosh
        OS/Version: Mac OS X 10.4
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: SVG
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: gera.weiss at gmail.com

The following SVG crashes Webkit:

<?xml version="1.0"?>
<svg xmlns="http://www.w3.org/2000/svg"
 xmlns:xlink="http://www.w3.org/1999/xlink" onload="init()">
 var flag=1;
 var c;

 function init() {
        c= document.getElementById("use")

 function loop() {
        flag= (flag+1) % 3;

<symbol shape-rendering="optimizeSpeed" id="rec0" viewBox="0 0 64 64">
    <rect width="59" height="59" x="5" y="5" fill="blue" />
    <text x="17" y="56" font-size="60" click="none" > A </text>

<symbol shape-rendering="optimizeSpeed" id="rec1" viewBox="0 0 64 64">
    <rect width="59" height="59" x="5" y="5" fill="magenta" />
    <text x="17" y="56" font-size="60" click="none" > B </text>

<use id="use" xlink:href="#rec0"/> 


Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list