[Webkit-unassigned] [Bug 108603] New: ASSERT(m_transparencyCount > 0) in GraphicsContext

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=108603

           Summary: ASSERT(m_transparencyCount > 0) in GraphicsContext
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: SVG
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: reni at webkit.org
                CC: zimmermann at kde.org, zherczeg at webkit.org,
                    scherkus at chromium.org, pdr at google.com,
                    fmalita at chromium.org


Assertion fauilre was found during SVG fuzzing:

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff5425878 in WebCore::GraphicsContext::endTransparencyLayer (this=0x7fffffffba10)
    at /home/reni/repos/webkit2/Source/WebCore/platform/graphics/GraphicsContext.cpp:356
356        ASSERT(m_transparencyCount > 0);


The test:

<svg xmlns="http://www.w3.org/2000/svg">
    <mask id="mask2">
        <rect x="50" y="50" width="100" height="100"></rect>
    </mask>
    <rect x="120" y="120" width="100" height="100" fill="lime" mask="url(#mask2)" opacity=".4"></rect>
</svg>

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.