[Webkit-unassigned] [Bug 175023] New: REGRESSION: Custom data attribute objects are lost randomly, maybe due to garbage collection

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Aug 1 08:00:43 PDT 2017


https://bugs.webkit.org/show_bug.cgi?id=175023

            Bug ID: 175023
           Summary: REGRESSION: Custom data attribute objects are lost
                    randomly, maybe due to garbage collection
           Product: WebKit
           Version: Safari Technology Preview
          Hardware: Macintosh
               URL: http://live.yworks.com/yfiles-for-html/2.0/view/graphe
                    ditor/index.html
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: SVG
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: fabian.schwarzkopf at yworks.com
                CC: zimmermann at kde.org

Created attachment 316854

  --> https://bugs.webkit.org/attachment.cgi?id=316854&action=review

Reproduction of lost data attributes on SVG

We noticed in the Safari Technology Preview Release 36 (macOS Sierra, 10.12.6) that the demos of our product did not work as expected anymore (e.g. see http://live.yworks.com/yfiles-for-html/2.0/view/grapheditor/index.html).

The transform that is applied to the SVG is often not applied at all or it works for some time but then gets broken randomly (try zooming or select all with CMD+A and then zoom). For optimization reasons, we cache the transformable on the SVG element (as custom attribute) and subsequently only update the cached transformable.

It seems that sometimes this attribute is lost or is not the same anymore as the one that was attached initially. Please find attached to this bug report is a small repro to demonstrate the issue.

Steps to reproduce:
* Open the index.html
* Start zooming in and out with the mousewheel
* At one time the cached instance is not the same anymore and changing its values won't transform the SVG (this is indicated by the green bar turning to red once the issue triggers)

We were able to trigger the problem more often when creating more dummy nodes in the code (see index.html). Supposedly, this triggers the garbage collector which then breaks the cached transformable.

Note: Comparing the repro with the current Chrome implementation shows, that the instance seems to change too, but the transform can still be changed by manipulating the attached object.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170801/623758e4/attachment-0001.html>


More information about the webkit-unassigned mailing list