[Webkit-unassigned] [Bug 20400] Infinite recursion crash in WebCore::RenderSVGRoot::absoluteClippedOverflowRect on a <stop> element outside of a gradient block

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=20400


mrowe at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mrowe at apple.com
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1
           Keywords|                            |HasReduction, NeedsRadar,
                   |                            |ReviewedForRadar




------- Comment #2 from mrowe at apple.com  2008-08-15 08:28 PDT -------
[... snip ...]
#149625 0x02765064 in WebCore::RenderObject::absoluteClippedOverflowRect
(this=0x19b0f7dc) at WebCore/rendering/RenderObject.cpp:1991
#149626 0x0277f83f in WebCore::RenderSVGRoot::absoluteClippedOverflowRect
(this=0x19b0f69c) at WebCore/rendering/RenderSVGRoot.cpp:232
#149627 0x02765064 in WebCore::RenderObject::absoluteClippedOverflowRect
(this=0x19b0f7dc) at WebCore/rendering/RenderObject.cpp:1991
#149628 0x0277f83f in WebCore::RenderSVGRoot::absoluteClippedOverflowRect
(this=0x19b0f69c) at WebCore/rendering/RenderSVGRoot.cpp:232
#149629 0x02765064 in WebCore::RenderObject::absoluteClippedOverflowRect
(this=0x19b0f7dc) at WebCore/rendering/RenderObject.cpp:1991
#149630 0x0277f83f in WebCore::RenderSVGRoot::absoluteClippedOverflowRect
(this=0x19b0f69c) at WebCore/rendering/RenderSVGRoot.cpp:232
#149631 0x02780417 in WebCore::RenderSVGRoot::layout (this=0x19b0f69c) at
WebCore/rendering/RenderSVGRoot.cpp:96
#149632 0x02715897 in WebCore::RenderBlock::layoutBlockChildren
(this=0x19b0f0bc, relayoutChildren=true, maxFloatBottom=@0xbfffde1c) at
WebCore/rendering/RenderBlock.cpp:1281
#149633 0x02717625 in WebCore::RenderBlock::layoutBlock (this=0x19b0f0bc,
relayoutChildren=true) at WebCore/rendering/RenderBlock.cpp:627
#149634 0x02705a3c in WebCore::RenderBlock::layout (this=0x19b0f0bc) at
WebCore/rendering/RenderBlock.cpp:536
#149635 0x027b1db8 in WebCore::RenderView::layout (this=0x19b0f0bc) at
WebCore/rendering/RenderView.cpp:118
#149636 0x024ea52b in WebCore::FrameView::layout (this=0x19b455b0,
allowSubtree=true) at WebCore/page/FrameView.cpp:486
#149637 0x02439c1e in WebCore::Document::implicitClose (this=0x4978400) at
WebCore/dom/Document.cpp:1591


Confirmed with TOT.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.