[Webkit-unassigned] [Bug 108608] New: [Qt] ASSERT(!brush.transform().isRotating()) in GraphicsContextQt

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=108608

           Summary: [Qt] ASSERT(!brush.transform().isRotating()) in
                    GraphicsContextQt
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: SVG
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: reni at webkit.org
                CC: zimmermann at kde.org, krit at webkit.org,
                    zherczeg at webkit.org, pdr at google.com,
                    fmalita at chromium.org


Assertion faulire was found during SVG fuzzing:

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff57c13b5 in WebCore::drawRepeatPattern (p=0x7fffffffbc40, pattern=..., rect=...)
    at /home/reni/repos/webkit2/Source/WebCore/platform/graphics/qt/GraphicsContextQt.cpp:679
679        ASSERT(!brush.transform().isRotating());


The test was:

<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
    <pattern id="dummyPattern" width="100" height="100" patternTransform="skewX(45)">
    </pattern>
    <rect x="0" y="0" width="50" height="30" fill="url(#dummyPattern)"></rect>
</svg>

Important note: if you move the </pattern> closing tag to the end of the previous line then everything is OK. O_o

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.