[Webkit-unassigned] [Bug 46427] Crash below CGContextShowGlyphsWithAdvances due to invalid viewBox

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=46427





--- Comment #22 from Ryosuke Niwa <rniwa at webkit.org>  2012-04-26 13:35:35 PST ---
Current stack trace:


#0    0x7fff814f70b6 in __kill
#1    0x7fff815979f6 in abort
#2    0x7fff815849bc in __assert_rtn
#3    0x7fff883718a5 in crossing_count
#4    0x7fff8837150b in path_evaluate_level
#5    0x7fff88371375 in path_get_expected_outside_orientation
#6    0x7fff88371329 in path_fix_orientation
#7    0x7fff88370daa in CGPathCreateByNormalizingGlyphPath
#8    0x7fff88370ba2 in CGFontCreateGlyphPath
#9    0x7fff838f7b17 in ripc_DrawGlyphs
#10    0x7fff8831b967 in draw_glyphs
#11    0x7fff8831b26e in CGContextShowGlyphsWithAdvances
#12    0x1029ef0cc in WebCore::showGlyphsWithAdvances at FontMac.mm:120
#13    0x1029efb2a in WebCore::Font::drawGlyphs at FontMac.mm:250
#14    0x1029eb326 in WebCore::Font::drawGlyphBuffer at FontFastPath.cpp:422
#15    0x1029eb426 in WebCore::Font::drawSimpleText at FontFastPath.cpp:366
#16    0x1029d94d5 in WebCore::Font::drawText at Font.cpp:152
#17    0x10212dd05 in WebCore::SVGInlineTextBox::paintTextWithShadows at SVGInlineTextBox.cpp:649
#18    0x102131d33 in WebCore::SVGInlineTextBox::paintText at SVGInlineTextBox.cpp:683
#19    0x102132536 in WebCore::SVGInlineTextBox::paint at SVGInlineTextBox.cpp:326
#20    0x10211b253 in WebCore::SVGRootInlineBox::paint at SVGRootInlineBox.cpp:66
#21    0x10331de9a in WebCore::RenderLineBoxList::paint at RenderLineBoxList.cpp:262
#22    0x10324b1a9 in WebCore::RenderBlock::paintContents at RenderBlock.cpp:2715
#23    0x103252125 in WebCore::RenderBlock::paintObject at RenderBlock.cpp:2825
#24    0x10324c084 in WebCore::RenderBlock::paint at RenderBlock.cpp:2571
#25    0x10211c971 in WebCore::RenderSVGText::paint at RenderSVGText.cpp:336
#26    0x10211d6a3 in WebCore::RenderSVGContainer::paint at RenderSVGContainer.cpp:128
#27    0x10328c92c in WebCore::RenderBox::paint at RenderBox.cpp:935
#28    0x10211e919 in WebCore::RenderSVGRoot::paintReplaced at RenderSVGRoot.cpp:302
#29    0x1020a98f8 in WebCore::RenderReplaced::paint at RenderReplaced.cpp:153
#30    0x103303993 in WebCore::RenderLayer::paintLayerContents at RenderLayer.cpp:3102
#31    0x10330406b in WebCore::RenderLayer::paintLayerContentsAndReflection at RenderLayer.cpp:2974
#32    0x10330455d in WebCore::RenderLayer::paintLayer at RenderLayer.cpp:2955
#33    0x103304ed1 in WebCore::RenderLayer::paintList at RenderLayer.cpp:3183
#34    0x103303c03 in WebCore::RenderLayer::paintLayerContents at RenderLayer.cpp:3125
#35    0x10330406b in WebCore::RenderLayer::paintLayerContentsAndReflection at RenderLayer.cpp:2974
#36    0x10330455d in WebCore::RenderLayer::paintLayer at RenderLayer.cpp:2955
#37    0x103305076 in WebCore::RenderLayer::paint at RenderLayer.cpp:2772
#38    0x102a35026 in WebCore::FrameView::paintContents at FrameView.cpp:3102
#39    0x100d1dd87 in -[WebFrame(WebInternal) _drawRect:contentsOnly:] at WebFrame.mm:571

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.