[Webkit-unassigned] [Bug 20344] New: [GTK] Segfault when svg is embedded with an <img> tag

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=20344

           Summary: [GTK] Segfault when svg is embedded with an <img> tag
           Product: WebKit
           Version: 526+ (Nightly build)
          Platform: PC
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Critical
          Priority: P2
         Component: WebKit Gtk
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: camaradetux at gmail.com


When trying to display a page embedding an svg file with an <img> tag, webkigtk
crashes. To reproduce, the svg file can be valid or invalid, with only headers
for instance, or even with a single character.

An example page is : (yes, as simple)
  <img src="./circle.svg"/>
An example for svg is :
  <?xml version="1.0"?>
  <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.0//EN" 
              "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">
  <svg xmlns="http://www.w3.org/2000/svg">
  </svg>

When the svg file is displayed alone or with <object data="./circle.svg"/>,
there is no problem.


To check it, you can make your webkitgtk crash with 244bytes and the following
link : http://pers.yaxm.org/temp/kate


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.