[Webkit-unassigned] [Bug 63646] Crash in SVGUseElement::updateContainerOffsets on <use> with no parent

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=63646





--- Comment #2 from Nikolas Zimmermann <zimmermann at kde.org>  2011-06-30 01:31:00 PST ---
> Created an attachment (id=99126)
 --> (https://bugs.webkit.org/attachment.cgi?id=99126&action=review) [details]
> test case
> 
> The attached SVG crashes WebKit in SVGUseElement::updateContainerOffsets.
Excellent catch. Tim, where have you been all the years? :-) Your work is highly appreciated.

> 
> In a debug build, we get an ASSERTion failure saying that the <use> element doesn't have a parentNode.
That's not correct, the <use> has a parentNode - it's shadow tree root element (living in the <use> renderer) lost its parent.

Do you feel like debugging? :-)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.