[Webkit-unassigned] [Bug 71287] REGRESSION: SVG feColorMatrix causes crash
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Tue Nov 1 14:30:16 PDT 2011
https://bugs.webkit.org/show_bug.cgi?id=71287
Alexey Proskuryakov <ap at webkit.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|SVG feColorMatrix causes |REGRESSION: SVG
|crash |feColorMatrix causes crash
Status|UNCONFIRMED |NEW
Keywords| |Regression
Priority|P2 |P1
CC| |koivisto at iki.fi,
| |timothy_horton at apple.com
Ever Confirmed|0 |1
--- Comment #1 from Alexey Proskuryakov <ap at webkit.org> 2011-11-01 14:30:16 PST ---
ASSERTION FAILED: i < size()
/Users/ap/Safari/OpenSource/WebKitBuild/Debug/JavaScriptCore.framework/PrivateHeaders/Vector.h(537) : float &WTF::Vector<float, 0>::at(size_t)
1 0x109d782c8 WTF::Vector<float, 0ul>::at(unsigned long)
2 0x109d6454d WTF::Vector<float, 0ul>::operator[](unsigned long)
3 0x10adaa79d WebCore::SVGAnimatedNumberListAnimator::calculateAnimatedValue(float, unsigned int, WTF::OwnPtr<WebCore::SVGAnimatedType>&, WTF::OwnPtr<WebCore::SVGAnimatedType>&, WTF::OwnPtr<WebCore::SVGAnimatedType>&)
4 0x10adb2ee3 WebCore::SVGAnimateElement::calculateAnimatedValue(float, unsigned int, WebCore::SVGSMILElement*)
5 0x10adbd610 WebCore::SVGAnimationElement::updateAnimation(float, unsigned int, WebCore::SVGSMILElement*)
6 0x10ae98bae WebCore::SVGSMILElement::progress(WebCore::SMILTime, WebCore::SVGSMILElement*)
7 0x10ad41e28 WebCore::SMILTimeContainer::updateAnimations(WebCore::SMILTime, double, WTF::String const&)
8 0x10ad417b8 WebCore::SMILTimeContainer::begin()
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list