[Webkit-unassigned] [Bug 149613] New: Reproducible crash involving SVG

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=149613

            Bug ID: 149613
           Summary: Reproducible crash involving SVG
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Macintosh
                OS: Mac OS X 10.10
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: SVG
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: fraser at google.com
                CC: zimmermann at kde.org

Created attachment 262042
  --> https://bugs.webkit.org/attachment.cgi?id=262042&action=review
Minimal test case showing crash.

Open the attached file.  Click the green block.  Then click the red block.
Webkit (nightly) and Safari (8.0.8) crash.  Firefox and Chrome do not crash.

The attached file is a minimal test case.  Which is pretty hard to believe, given how many steps are required to trigger this elusive crash.  This bug was spotted in Google's Blockly and isolated from that codebase.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150929/d28317ed/attachment.html>