[Webkit-unassigned] [Bug 85797] REGRESSION (Safari 5.1.5 - ToT): Crash in RenderSVGRoot::computeReplacedLogicalWidth

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=85797


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|WebCore::RenderSVGRoot::com |REGRESSION (Safari 5.1.5 -
                   |puteReplacedLogicalWidth    |ToT): Crash in
                   |crash                       |RenderSVGRoot::computeRepla
                   |                            |cedLogicalWidth
           Keywords|                            |Regression
           Priority|P2                          |P1
                 CC|                            |ap at webkit.org,
                   |                            |timothy_horton at apple.com




--- Comment #1 from Alexey Proskuryakov <ap at webkit.org>  2012-05-07 10:13:22 PST ---
Crashes ToT, but not Safari 5.1.5 for me. Release build stack trace:

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                 0x000000010c31ee38 WebCore::RenderSVGRoot::computeReplacedLogicalWidth(bool) const + 344
1   com.apple.WebCore                 0x000000010cb53295 WebCore::RenderBox::computeLogicalWidthInRegion(WebCore::RenderRegion*, WebCore::FractionalLayoutUnit) + 485
2   com.apple.WebCore                 0x000000010c1b2c0a WebCore::RenderBox::computeLogicalWidth() + 26
3   com.apple.WebCore                 0x000000010c31eb09 WebCore::RenderSVGRoot::layout() + 169
4   com.apple.WebCore                 0x000000010cb4c461 WebCore::RenderBlock::layoutInlineChildren(bool, WebCore::FractionalLayoutUnit&, WebCore::FractionalLayoutUnit&) + 913
...

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.