[Webkit-unassigned] [Bug 40955] New: Reproducible crash in com.apple.WebCore 0x01f0a94c WebCore::RenderSVGResource::fillPaintingResource(WebCore::RenderObject const*, WebCore::RenderStyle const*) + 540

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=40955

           Summary: Reproducible crash in com.apple.WebCore 0x01f0a94c
                    WebCore::RenderSVGResource::fillPaintingResource(WebCo
                    re::RenderObject const*, WebCore::RenderStyle const*)
                    + 540
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh PowerPC
               URL: http://dev.w3.org/SVG/profiles/1.1F2/test/harness/html
                    Object/animate-elem-39-t.html
        OS/Version: Mac OS X 10.4
            Status: NEW
          Severity: Critical
          Priority: P2
         Component: SVG
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: lars.sonchocky-helldorf at hamburg.de


I get a reproducible crash when visiting http://dev.w3.org/SVG/profiles/1.1F2/test/harness/htmlObject/animate-elem-39-t.html with the current WebKit Nightly (Safari Version 4.1 (4533.16, r61502) on Mac OS X 10.4.11 PowerPC G4)

Date/Time:      2010-06-22 01:35:19.862 +0200
OS Version:     10.4.11 (Build 8S165)
Report Version: 4

Command: Safari
Path:    /Applications/Safari.app/Contents/MacOS/Safari
Parent:  WindowServer [60]

Version: r61502 (61502)

PID:    5509
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000028

Thread 0 Crashed:
0   com.apple.WebCore            0x01f0a94c WebCore::RenderSVGResource::fillPaintingResource(WebCore::RenderObject const*, WebCore::RenderStyle const*) + 540
1   com.apple.WebCore            0x0205df0c WebCore::SVGInlineTextBox::acquirePaintingResource(WebCore::GraphicsContext*&, WebCore::RenderStyle*) + 60
2   com.apple.WebCore            0x0205e050 WebCore::SVGInlineTextBox::prepareGraphicsContextForTextPainting(WebCore::GraphicsContext*&, WebCore::TextRun&, WebCore::RenderStyle*) + 32
3   com.apple.WebCore            0x0205e5a0 WebCore::SVGInlineTextBox::paintText(WebCore::GraphicsContext*, WebCore::FloatPoint const&, WebCore::RenderStyle*, WebCore::RenderStyle*, bool) + 176
4   com.apple.WebCore            0x0205f008 WebCore::SVGInlineTextBox::paint(WebCore::RenderObject::PaintInfo&, int, int) + 648
5   com.apple.WebCore            0x02095ce4 WebCore::SVGRootInlineBox::paint(WebCore::RenderObject::PaintInfo&, int, int) + 196
6   com.apple.WebCore            0x01ed40fc WebCore::RenderLineBoxList::paint(WebCore::RenderBoxModelObject*, WebCore::RenderObject::PaintInfo&, int, int) const + 1580
7   com.apple.WebCore            0x01e72fd4 WebCore::RenderBlock::paintObject(WebCore::RenderObject::PaintInfo&, int, int) + 372
8   com.apple.WebCore            0x01e67b7c WebCore::RenderBlock::paint(WebCore::RenderObject::PaintInfo&, int, int) + 460
9   com.apple.WebCore            0x01f1a104 WebCore::RenderSVGText::paint(WebCore::RenderObject::PaintInfo&, int, int) + 148
10  com.apple.WebCore            0x01f07914 WebCore::RenderSVGContainer::paint(WebCore::RenderObject::PaintInfo&, int, int) + 452
11  com.apple.WebCore            0x01f07914 WebCore::RenderSVGContainer::paint(WebCore::RenderObject::PaintInfo&, int, int) + 452
12  com.apple.WebCore            0x01f07914 WebCore::RenderSVGContainer::paint(WebCore::RenderObject::PaintInfo&, int, int) + 452
13  com.apple.WebCore            0x01f07914 WebCore::RenderSVGContainer::paint(WebCore::RenderObject::PaintInfo&, int, int) + 452
14  com.apple.WebCore            0x01e8df64 WebCore::RenderBox::paint(WebCore::RenderObject::PaintInfo&, int, int) + 164

see attached crash log

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.