[Webkit-unassigned] [Bug 173566] New: svgPath.getTotalLength() crashes webkit

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Jun 19 14:54:54 PDT 2017


https://bugs.webkit.org/show_bug.cgi?id=173566

            Bug ID: 173566
           Summary: svgPath.getTotalLength() crashes webkit
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: All
                OS: All
            Status: NEW
          Severity: Blocker
          Priority: P2
         Component: SVG
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: xerxesnoble at gmail.com
                CC: zimmermann at kde.org

Browser simply just chokes and crashes while evaluating the total length of a specific path. I've tried to remove certain points from the path to try and break down the issue. It works on every other browser I've tested so far. Refactored my code to avoid using getTotalLength(). 

My guess is an infinite loop. 

Stack overflow example here: https://stackoverflow.com/questions/44055554/svgpath-gettotallength-crashes-safari-on-particular-path


Example code:


var myPath = document.getElementById("word");
var length = myPath.getTotalLength();
alert(length);

<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 5000 5000" xml:space="preserve">
  <path id="word" stroke="#000000" fill="none" stroke-width="20" d="M3045.44,2522.588c-0.73,0.432-1.927,0.575-2.438,0.568 c-1.12-0.01-4.15-0.989-5.847-0.917c-0.543,0.021,0.176-0.286,0.355-0.343c1.537-0.473,5.494-1.193,7.539-0.701 C3046.408,2521.523,3046.107,2522.196,3045.44,2522.588z"/>
</svg>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170619/d765b44b/attachment.html>


More information about the webkit-unassigned mailing list