[Webkit-unassigned] [Bug 87964] Lonely stop crashes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=87964


Stephen Chenney <schenney at chromium.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|webkit-unassigned at lists.web |schenney at chromium.org
                   |kit.org                     |
                 CC|                            |schenney at chromium.org




--- Comment #3 from Stephen Chenney <schenney at chromium.org>  2012-07-09 12:26:23 PST ---
This is also a top crasher in Chrome, on pages containing the Meebo bar, that has the following stack. The only real potential cause is a null renderer or null style. I will post a fix in an effort to get this crash addressed, while waiting for Bug 86941 and 87373 to be fixed.

Thread 0 *CRASHED* ( EXC_BAD_ACCESS / KERN_PROTECTION_FAILURE @ 0x00000004 )

0x7b6bc17c     [Google Chrome Framework]     - ../../WTF/wtf/RefPtr.h:58]    
WebCore::SVGStopElement::stopColorIncludingOpacity
0x7b6831ac     [Google Chrome Framework]     - SVGGradientElement.cpp:150    
WebCore::SVGGradientElement::buildStops
0x7b68cedd     [Google Chrome Framework]     - SVGLinearGradientElement.cpp:150    
WebCore::SVGLinearGradientElement::collectGradientAttributes
0x7b6066c6     [Google Chrome Framework]     - RenderSVGResourceLinearGradient.cpp:45    
WebCore::RenderSVGResourceLinearGradient::collectGradientAttributes
0x7b6059ad     [Google Chrome Framework]     - RenderSVGResourceGradient.cpp:131    
WebCore::RenderSVGResourceGradient::applyResource
0x7b605db0     [Google Chrome Framework]     + 0x01e78db0]    
non-virtual thunk to WebCore::RenderSVGResourceGradient::applyResource(WebCore::RenderObject*, WebCore::RenderStyle*, WebCore::GraphicsContext*&, unsigned short)
0x7b60e27b     [Google Chrome Framework]     - RenderSVGShape.cpp:254    
WebCore::RenderSVGShape::fillShape
0x7b60e4a0     [Google Chrome Framework]     - RenderSVGShape.cpp:291    
WebCore::RenderSVGShape::fillAndStrokePath
0x7b60e857     [Google Chrome Framework]     - RenderSVGShape.cpp:339    
WebCore::RenderSVGShape::paint

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.