[Webkit-unassigned] [Bug 71287] REGRESSION: SVG feColorMatrix causes crash

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Nov 1 14:30:16 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=71287


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|SVG feColorMatrix causes    |REGRESSION: SVG
                   |crash                       |feColorMatrix causes crash
             Status|UNCONFIRMED                 |NEW
           Keywords|                            |Regression
           Priority|P2                          |P1
                 CC|                            |koivisto at iki.fi,
                   |                            |timothy_horton at apple.com
     Ever Confirmed|0                           |1




--- Comment #1 from Alexey Proskuryakov <ap at webkit.org>  2011-11-01 14:30:16 PST ---
ASSERTION FAILED: i < size()
/Users/ap/Safari/OpenSource/WebKitBuild/Debug/JavaScriptCore.framework/PrivateHeaders/Vector.h(537) : float &WTF::Vector<float, 0>::at(size_t)
1   0x109d782c8 WTF::Vector<float, 0ul>::at(unsigned long)
2   0x109d6454d WTF::Vector<float, 0ul>::operator[](unsigned long)
3   0x10adaa79d WebCore::SVGAnimatedNumberListAnimator::calculateAnimatedValue(float, unsigned int, WTF::OwnPtr<WebCore::SVGAnimatedType>&, WTF::OwnPtr<WebCore::SVGAnimatedType>&, WTF::OwnPtr<WebCore::SVGAnimatedType>&)
4   0x10adb2ee3 WebCore::SVGAnimateElement::calculateAnimatedValue(float, unsigned int, WebCore::SVGSMILElement*)
5   0x10adbd610 WebCore::SVGAnimationElement::updateAnimation(float, unsigned int, WebCore::SVGSMILElement*)
6   0x10ae98bae WebCore::SVGSMILElement::progress(WebCore::SMILTime, WebCore::SVGSMILElement*)
7   0x10ad41e28 WebCore::SMILTimeContainer::updateAnimations(WebCore::SMILTime, double, WTF::String const&)
8   0x10ad417b8 WebCore::SMILTimeContainer::begin()

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list