[Webkit-unassigned] [Bug 47759] Crash while processing ill-formed <textPath> ouside of <text>

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Nov 29 10:41:55 PST 2010


https://bugs.webkit.org/show_bug.cgi?id=47759





--- Comment #3 from Nikolas Zimmermann <zimmermann at kde.org>  2010-11-29 10:41:54 PST ---
(In reply to comment #2)
> Created an attachment (id=74958)
 --> (https://bugs.webkit.org/attachment.cgi?id=74958&action=review) [details]
> Fix and layout test
> 
> There is one thing that isn't exactly done as stated in the content model spec:
> SVGTextPathElement::childShouldCreateRenderer allows <textPath> inside <textPath>. (SVGTextPathElement::rendererIsNeeded is fine, however.)
> This is to accommodate <textPath><a><textpath>Text</textPath></a></textPath>, which is tested in svg/custom/text-linking.svg

I guess the testcase is wrong, can you compare to Opera?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list