[Webkit-unassigned] [Bug 110265] New: ASSERTION FAILED: m_role != PathSegUndefinedRole in SVGPathSegWithContext::commitChange()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=110265

           Summary: ASSERTION FAILED: m_role != PathSegUndefinedRole in
                    SVGPathSegWithContext::commitChange()
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: SVG
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: fmalita at chromium.org
                CC: zimmermann at kde.org, krit at webkit.org,
                    inferno at chromium.org, pdr at google.com,
                    schenney at chromium.org


Created an attachment (id=189170)
 --> (https://bugs.webkit.org/attachment.cgi?id=189170&action=review)
Crashes on debug builds.

Setting attributes on SVGPathSegs that are not inserted into an SVGPathSegList triggers this assert:

ASSERTION FAILED: m_role != PathSegUndefinedRole
../../third_party/WebKit/Source/WebCore/svg/SVGPathSegWithContext.h(68) : void WebCore::SVGPathSegWithContext::commitChange()
Received signal 11 SEGV_MAPERR 0000bbadbeef
 [0x7fd283ff0a9e] base::debug::StackTrace::StackTrace()
 [0x7fd283ff05d5] base::debug::(anonymous namespace)::StackDumpSignalHandler()
 [0x7fd279408cb0] <unknown>
 [0x7fd2812f7981] WebCore::SVGPathSegWithContext::commitChange()
 [0x7fd28136c9d4] WebCore::SVGPathSegCurvetoCubic::setX()
 [0x7fd2813265cf] WebCore::SVGPathSegCurvetoCubicAbsV8Internal::xAttrSetter()
 [0x7fd28577441b] v8::internal::JSObject::SetPropertyWithCallback()
 [0x7fd285777cbc] v8::internal::JSObject::SetPropertyForResult()
 [0x7fd285772a02] v8::internal::JSReceiver::SetProperty()
 [0x7fd285773cb8] v8::internal::JSReceiver::SetProperty()
 [0x7fd2856e2609] v8::internal::StoreIC::Store()
 [0x7fd2856e5005] v8::internal::StoreIC_Miss()
 [0x28b0133062ee] <unknown>

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.