[Webkit-unassigned] [Bug 63646] Crash in SVGUseElement::updateContainerOffsets on <use> with no parent

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=63646





--- Comment #3 from Tim Horton <timothy_horton at apple.com>  2011-06-30 10:10:48 PST ---
(In reply to comment #2)
> > Created an attachment (id=99126)
 --> (https://bugs.webkit.org/attachment.cgi?id=99126&action=review) [details] [details]
> > test case
> > 
> > The attached SVG crashes WebKit in SVGUseElement::updateContainerOffsets.
> Excellent catch. Tim, where have you been all the years? :-) Your work is highly appreciated.
> 
> > 
> > In a debug build, we get an ASSERTion failure saying that the <use> element doesn't have a parentNode.
> That's not correct, the <use> has a parentNode - it's shadow tree root element (living in the <use> renderer) lost its parent.

Alright, that makes a lot more sense.

> Do you feel like debugging? :-)

Now that you've explained it correctly, I think it'll be easier to figure it out, so sure! (I couldn't make my explanation make any sense given what was actually going on in the document, but I figured someone else would have some insight, and you did!)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.