Bug 16463 – http://www.croczilla.com/svg/samples/invaders/invaders.svg crashes webkit-gtk

• Status: RESOLVED
• Resolution: WORKSFORME
• Component: SVG

[Shreyas Srinivasan]

Stack trace:

Thread 1 (Thread -1259460928 (LWP 16337)):
#0  0xb6b1c9f6 in WebCore::SVGUseElement::associateInstancesWithShadowTreeElements (this=0x826c638, target=0x826d000, targetInstance=0x826cb20)
    at ../../../WebCore/svg/SVGUseElement.cpp:697
#1  0xb6b1dd0f in WebCore::SVGUseElement::buildPendingResource (this=0x826c638) at ../../../WebCore/svg/SVGUseElement.cpp:330
#2  0xb6b1e32d in WebCore::SVGUseElement::insertedIntoDocument (this=0x826c638) at ../../../WebCore/svg/SVGUseElement.cpp:125
#3  0xb668898e in WebCore::ContainerNode::addChild (this=0x8212a50, newChild=@0xbfb7265c) at ../../../WebCore/dom/ContainerNode.cpp:577
#4  0xb66f0d22 in WebCore::XMLTokenizer::startElementNs (this=0x80bf2e8, xmlLocalName=0x80b9126 "use", xmlPrefix=0x0, 
    xmlURI=0x80b9043 "http://www.w3.org/2000/svg", nb_namespaces=0, libxmlNamespaces=0x0, nb_attributes=4, nb_defaulted=0, libxmlAttributes=0x8212898)
    at ../../../WebCore/dom/XMLTokenizer.cpp:781
#5  0xb66f0fbc in startElementNsHandler (closure=0x8208668, localname=0x80b9126 "use", prefix=0x0, uri=0x80b9043 "http://www.w3.org/2000/svg", 
    nb_namespaces=0, namespaces=0x0, nb_attributes=4, nb_defaulted=0, libxmlAttributes=0x8212898) at ../../../WebCore/dom/XMLTokenizer.cpp:1025
#6  0xb5178d6a in ?? () from /usr/lib/libxml2.so.2
#7  0x08208668 in ?? ()
#8  0x080b9126 in ?? ()
#9  0x00000000 in ?? ()

[Eric Seidel (no email)]

Strange, none of that looks like Gtk-specific code.  A reduction would be most helpful.

[Eric Seidel (no email)]

Oh, I should also note that inaders.svg does not crash the Mac build.  I have not tried loading it under libguardmalloc, but I expect it's OK.  bug 15352 is the only bug I've seen in invaders.svg.

[Eric Seidel (no email)]

Perhaps Alp can confirm this.

[Robert Blaut]

(In reply to comment #3)
> Perhaps Alp can confirm this.
> 

Alp, are you able to reproduce the problem?

[Alp Toker]

(In reply to comment #4)
> (In reply to comment #3)
> > Perhaps Alp can confirm this.
> > 
> 
> Alp, are you able to reproduce the problem?
> 

I can't reproduce this. Invaders rendering is a bit glitchy but it doesn't crash.

Can anyone still repro it?

[Marco Barisione]

I'm not able to reproduce it, I suggest to close the bug.

[Robert Blaut]

Per comment #5 and comment #6 resolved as worksforme.