[Webkit-unassigned] [Bug 39890] New: [Qt] Sporadic crash when accessing preserveAspectRatio (in JavaScript)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=39890

           Summary: [Qt] Sporadic crash when accessing preserveAspectRatio
                    (in JavaScript)
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows XP
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebKit Qt
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: alessandro.portale at nokia.com


Created an attachment (id=57349)
 --> (https://bugs.webkit.org/attachment.cgi?id=57349)
The stack trace

1) Load an svg into a web frame
2) Evaluate a JavaScript that accesses 'document.rootElement.preserveAspectRatio.baseVal.align'

When repeating the above two steps consecutively, after ~30-50 repetitions, the application will crash in 'JSValue jsSVGPreserveAspectRatioAlign()'. See attached stacktrace.txt.

This happens with the Webkit version that is used in qt/4.7 Git SHA: 00b2882349d42736f1e3f753838af27a3774eb64
It does not happen in Qt 4.6.2.

(The issue may not be Qt layer specific at all. I selected component Webkit Qt, because my attached test app is done in Qt)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.