113217 2013-03-25 10:18:14 -0700 ASSERT(m_type == toSVGTransform.type()) 2013-08-09 06:26:56 -0700 1 1 1 Unclassified WebKit SVG 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 116980 1 rhodovan.u-szeged rwlbuis commit-queue d-r fmalita pdr rwlbuis schenney zimmermann oldest_to_newest 862880 0 rhodovan.u-szeged 2013-03-25 10:18:14 -0700 Assertion fauilre happens in WebCore::SVGTransformDistance::SVGTransformDistance with the following test: <svg xmlns="http://www.w3.org/2000/svg"> <g transform="translate(5,0)"> <animateTransform attributeName="transform" additive="sum" type="scale" to="2"></animateTransform> </g> </svg> BACKTRACE: Program received signal SIGSEGV, Segmentation fault. 0x00007ffff4ceb7e1 in WebCore::SVGTransformDistance::SVGTransformDistance (this=0x7fffffffcc30, fromSVGTransform=..., toSVGTransform=...) at /home/reni/WebKit-git/Source/WebCore/svg/SVGTransformDistance.cpp:56 56 ASSERT(m_type == toSVGTransform.type()); (gdb) bt 15 #0 0x00007ffff4ceb7e1 in WebCore::SVGTransformDistance::SVGTransformDistance (this=0x7fffffffcc30, fromSVGTransform=..., toSVGTransform=...) at /home/reni/WebKit-git/Source/WebCore/svg/SVGTransformDistance.cpp:56 #1 0x00007ffff4c1e60e in WebCore::SVGAnimatedTransformListAnimator::calculateAnimatedValue (this=0x94b170, percentage=0, repeatCount=0, from=0x96ec40, to=0x7083a0, toAtEndOfDuration=0x7083a0, animated=0x969be0) at /home/reni/WebKit-git/Source/WebCore/svg/SVGAnimatedTransformList.cpp:120 #2 0x00007ffff4c26558 in WebCore::SVGAnimateElement::calculateAnimatedValue (this=0x9736e0, percentage=0, repeatCount=0, resultElement=0x9736e0) at /home/reni/WebKit-git/Source/WebCore/svg/SVGAnimateElement.cpp:141 #3 0x00007ffff4c2f8a7 in WebCore::SVGAnimationElement::updateAnimation (this=0x9736e0, percent=0, repeatCount=0, resultElement=0x9736e0) at /home/reni/WebKit-git/Source/WebCore/svg/SVGAnimationElement.cpp:632 #4 0x00007ffff4bd4ac1 in WebCore::SVGSMILElement::progress (this=0x9736e0, elapsed=..., resultElement=0x9736e0, seekToTime=false) at /home/reni/WebKit-git/Source/WebCore/svg/animation/SVGSMILElement.cpp:1108 #5 0x00007ffff4bca9d8 in WebCore::SMILTimeContainer::updateAnimations (this=0x948400, elapsed=..., seekToTime=false) at /home/reni/WebKit-git/Source/WebCore/svg/animation/SMILTimeContainer.cpp:296 #6 0x00007ffff4bc9e8d in WebCore::SMILTimeContainer::begin (this=0x948400) at /home/reni/WebKit-git/Source/WebCore/svg/animation/SMILTimeContainer.cpp:142 #7 0x00007ffff4beef58 in WebCore::SVGDocumentExtensions::startAnimations (this=0x94a700) at /home/reni/WebKit-git/Source/WebCore/svg/SVGDocumentExtensions.cpp:102 #8 0x00007ffff40c5bb5 in WebCore::Document::implicitClose (this=0x942800) at /home/reni/WebKit-git/Source/WebCore/dom/Document.cpp:2532 #9 0x00007ffff453ea6d in WebCore::FrameLoader::checkCallImplicitClose (this=0x7012e8) at /home/reni/WebKit-git/Source/WebCore/loader/FrameLoader.cpp:837 #10 0x00007ffff453e801 in WebCore::FrameLoader::checkCompleted (this=0x7012e8) at /home/reni/WebKit-git/Source/WebCore/loader/FrameLoader.cpp:780 #11 0x00007ffff453e566 in WebCore::FrameLoader::finishedParsing (this=0x7012e8) at /home/reni/WebKit-git/Source/WebCore/loader/FrameLoader.cpp:713 #12 0x00007ffff40ccd1f in WebCore::Document::finishedParsing (this=0x942800) at /home/reni/WebKit-git/Source/WebCore/dom/Document.cpp:4493 #13 0x00007ffff4a1f34f in WebCore::XMLDocumentParser::end (this=0x707610) at /home/reni/WebKit-git/Source/WebCore/xml/parser/XMLDocumentParser.cpp:217 #14 0x00007ffff4a1f38c in WebCore::XMLDocumentParser::finish (this=0x707610) at /home/reni/WebKit-git/Source/WebCore/xml/parser/XMLDocumentParser.cpp:229 915628 1 208377 rwlbuis 2013-08-08 15:33:12 -0700 Created attachment 208377 Patch 915673 2 208377 darin 2013-08-08 19:10:55 -0700 Comment on attachment 208377 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=208377&action=review > Source/WebCore/ChangeLog:3 > + ASSERT(m_type == toSVGTransform.type()) Not a great bug title. > Source/WebCore/ChangeLog:9 > + This matches FireFox and Opera 12 behavior. Firefox is misspelled here. 915802 3 rwlbuis 2013-08-09 06:26:56 -0700 Committed r153887: <http://trac.webkit.org/changeset/153887> 208377 2013-08-08 15:33:12 -0700 2013-08-08 19:10:55 -0700 Patch bug-113217-20130808183301.patch text/plain 5500 rwlbuis U3VidmVyc2lvbiBSZXZpc2lvbjogMTUzODQ3CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggZDI5ZTQzOGU5ZThhYTBj ZmNhMjJmN2QxNjBjMzNlZjFjNmViMzk4MS4uMDI0NjllMmViMzE5NDgxOTRhMmE0ZjZiYmQ4Zjky M2Q4NWQ1MjkyYyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSw1ICsxLDIxIEBACiAyMDEzLTA4LTA4ICBSb2Ig QnVpcyAgPHJ3bGJ1aXNAd2Via2l0Lm9yZz4KIAorICAgICAgICBBU1NFUlQobV90eXBlID09IHRv U1ZHVHJhbnNmb3JtLnR5cGUoKSkKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hv d19idWcuY2dpP2lkPTExMzIxNworCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEp LgorCisgICAgICAgIEZvciB0byBhbmltYXRpb25zIGNsZWFyIHRoZSB0cmFuc2Zvcm0gbGlzdCB3 aGlsZSBhbmltYXRpbmcgYW5kIHJlc2V0IHRvIGl0IGFmdGVyIHRoZSBhbmltYXRpb24gaXMgZG9u ZS4KKyAgICAgICAgVGhpcyBtYXRjaGVzIEZpcmVGb3ggYW5kIE9wZXJhIDEyIGJlaGF2aW9yLgor CisgICAgICAgIFRlc3RzOiBzdmcvYW5pbWF0aW9ucy9hbmltYXRlVHJhbnNmb3JtLXRvLXNjYWxl LWV4cGVjdGVkLnN2ZworICAgICAgICAgICAgICAgc3ZnL2FuaW1hdGlvbnMvYW5pbWF0ZVRyYW5z Zm9ybS10by1zY2FsZS5zdmcKKworICAgICAgICAqIHN2Zy9TVkdBbmltYXRlZFRyYW5zZm9ybUxp c3QuY3BwOgorICAgICAgICAoV2ViQ29yZTo6U1ZHQW5pbWF0ZWRUcmFuc2Zvcm1MaXN0QW5pbWF0 b3I6OmNhbGN1bGF0ZUFuaW1hdGVkVmFsdWUpOgorCisyMDEzLTA4LTA4ICBSb2IgQnVpcyAgPHJ3 bGJ1aXNAd2Via2l0Lm9yZz4KKwogICAgICAgICBBU1NFUlRfTk9UX1JFQUNIRUQoKSB0b3VjaGVk IGluIFdlYkNvcmU6OlNWR0FuaW1hdGVkU3RyaW5nQW5pbWF0b3I6OmFkZEFuaW1hdGVkVHlwZXMK ICAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTExMzIyNAog CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9zdmcvU1ZHQW5pbWF0ZWRUcmFuc2Zvcm1MaXN0 LmNwcCBiL1NvdXJjZS9XZWJDb3JlL3N2Zy9TVkdBbmltYXRlZFRyYW5zZm9ybUxpc3QuY3BwCmlu ZGV4IDQxZTIyMDVlOWUwNWY4NDRkZGUyYzM5MzA5NTc5NTIxZmEwNDVlYzQuLjcyYzBlOGUwM2Ez MWEzYjU0OTc2ZDIyMGI0ZTAwOTc0NzVhYWU4ZGEgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3Jl L3N2Zy9TVkdBbmltYXRlZFRyYW5zZm9ybUxpc3QuY3BwCisrKyBiL1NvdXJjZS9XZWJDb3JlL3N2 Zy9TVkdBbmltYXRlZFRyYW5zZm9ybUxpc3QuY3BwCkBAIC0xMDAsOCArMTAwLDcgQEAgdm9pZCBT VkdBbmltYXRlZFRyYW5zZm9ybUxpc3RBbmltYXRvcjo6Y2FsY3VsYXRlQW5pbWF0ZWRWYWx1ZShm bG9hdCBwZXJjZW50YWdlLAogICAgIC8vIFNwZWM6IFRvIGFuaW1hdGlvbnMgcHJvdmlkZSBzcGVj aWZpYyBmdW5jdGlvbmFsaXR5IHRvIGdldCBhIHNtb290aCBjaGFuZ2UgZnJvbSB0aGUgdW5kZXJs eWluZyB2YWx1ZSB0byB0aGUKICAgICAvLyDigJh0b+KAmSBhdHRyaWJ1dGUgdmFsdWUsIHdoaWNo IGNvbmZsaWN0cyBtYXRoZW1hdGljYWxseSB3aXRoIHRoZSByZXF1aXJlbWVudCBmb3IgYWRkaXRp dmUgdHJhbnNmb3JtIGFuaW1hdGlvbnMKICAgICAvLyB0byBiZSBwb3N0LW11bHRpcGxpZWQuIEFz IGEgY29uc2VxdWVuY2UsIGluIFNWRyAxLjEgdGhlIGJlaGF2aW9yIG9mIHRvIGFuaW1hdGlvbnMg Zm9yIOKAmGFuaW1hdGVUcmFuc2Zvcm3igJkgaXMgdW5kZWZpbmVkLgotICAgIC8vIEZJWE1FOiBU aGlzIGlzIG5vdCB0YWtlbiBpbnRvIGFjY291bnQgeWV0LgotICAgIGNvbnN0IFNWR1RyYW5zZm9y bUxpc3QmIGZyb21UcmFuc2Zvcm1MaXN0ID0gbV9hbmltYXRpb25FbGVtZW50LT5hbmltYXRpb25N b2RlKCkgPT0gVG9BbmltYXRpb24gPyBhbmltYXRlZC0+dHJhbnNmb3JtTGlzdCgpIDogZnJvbS0+ dHJhbnNmb3JtTGlzdCgpOworICAgIGNvbnN0IFNWR1RyYW5zZm9ybUxpc3QmIGZyb21UcmFuc2Zv cm1MaXN0ID0gZnJvbS0+dHJhbnNmb3JtTGlzdCgpOwogICAgIGNvbnN0IFNWR1RyYW5zZm9ybUxp c3QmIHRvVHJhbnNmb3JtTGlzdCA9IHRvLT50cmFuc2Zvcm1MaXN0KCk7CiAgICAgY29uc3QgU1ZH VHJhbnNmb3JtTGlzdCYgdG9BdEVuZE9mRHVyYXRpb25UcmFuc2Zvcm1MaXN0ID0gdG9BdEVuZE9m RHVyYXRpb24tPnRyYW5zZm9ybUxpc3QoKTsKICAgICBTVkdUcmFuc2Zvcm1MaXN0JiBhbmltYXRl ZFRyYW5zZm9ybUxpc3QgPSBhbmltYXRlZC0+dHJhbnNmb3JtTGlzdCgpOwpAQCAtMTExLDcgKzEx MCw3IEBAIHZvaWQgU1ZHQW5pbWF0ZWRUcmFuc2Zvcm1MaXN0QW5pbWF0b3I6OmNhbGN1bGF0ZUFu aW1hdGVkVmFsdWUoZmxvYXQgcGVyY2VudGFnZSwKICAgICAgICAgcmV0dXJuOwogCiAgICAgLy8g TmV2ZXIgcmVzaXplIHRoZSBhbmltYXRlZFRyYW5zZm9ybUxpc3QgdG8gdGhlIHRvVHJhbnNmb3Jt TGlzdCBzaXplLCBpbnN0ZWFkIGVpdGhlciBjbGVhciB0aGUgbGlzdCBvciBhcHBlbmQgdG8gaXQu Ci0gICAgaWYgKCFhbmltYXRlZFRyYW5zZm9ybUxpc3QuaXNFbXB0eSgpICYmICFtX2FuaW1hdGlv bkVsZW1lbnQtPmlzQWRkaXRpdmUoKSkKKyAgICBpZiAoIWFuaW1hdGVkVHJhbnNmb3JtTGlzdC5p c0VtcHR5KCkgJiYgKCFtX2FuaW1hdGlvbkVsZW1lbnQtPmlzQWRkaXRpdmUoKSB8fCBtX2FuaW1h dGlvbkVsZW1lbnQtPmFuaW1hdGlvbk1vZGUoKSA9PSBUb0FuaW1hdGlvbikpCiAgICAgICAgIGFu aW1hdGVkVHJhbnNmb3JtTGlzdC5jbGVhcigpOwogCiAgICAgdW5zaWduZWQgZnJvbVRyYW5zZm9y bUxpc3RTaXplID0gZnJvbVRyYW5zZm9ybUxpc3Quc2l6ZSgpOwpkaWZmIC0tZ2l0IGEvTGF5b3V0 VGVzdHMvQ2hhbmdlTG9nIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCmluZGV4IDExOTU0ZjkyZmY2 ODQyMDIxMGYyNGM5ZGE0ZDgyMGZiYTU2YjZhMWUuLmU1NDYwZDhiYTMzYzg2ODY1OGM4ZTljMmUx MGM4ZmM5YmU2MzkzZDggMTAwNjQ0Ci0tLSBhL0xheW91dFRlc3RzL0NoYW5nZUxvZworKysgYi9M YXlvdXRUZXN0cy9DaGFuZ2VMb2cKQEAgLTEsNSArMSwxNyBAQAogMjAxMy0wOC0wOCAgUm9iIEJ1 aXMgIDxyd2xidWlzQHdlYmtpdC5vcmc+CiAKKyAgICAgICAgQVNTRVJUKG1fdHlwZSA9PSB0b1NW R1RyYW5zZm9ybS50eXBlKCkpCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3df YnVnLmNnaT9pZD0xMTMyMTcKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4K KworICAgICAgICBBZGQgcmVmdGVzdCBmb3IgYWRkaXRpdmUgdG8gYW5pbWF0aW9uIHdoZXJlIGZy b20gYW5kIHRvIHRyYW5zZm9ybSB0eXBlcyBkaWZmZXIuCisKKyAgICAgICAgKiBzdmcvYW5pbWF0 aW9ucy9hbmltYXRlVHJhbnNmb3JtLXRvLXNjYWxlLWV4cGVjdGVkLnN2ZzogQWRkZWQuCisgICAg ICAgICogc3ZnL2FuaW1hdGlvbnMvYW5pbWF0ZVRyYW5zZm9ybS10by1zY2FsZS5zdmc6IEFkZGVk LgorCisyMDEzLTA4LTA4ICBSb2IgQnVpcyAgPHJ3bGJ1aXNAd2Via2l0Lm9yZz4KKwogICAgICAg ICBBU1NFUlRfTk9UX1JFQUNIRUQoKSB0b3VjaGVkIGluIFdlYkNvcmU6OlNWR0FuaW1hdGVkU3Ry aW5nQW5pbWF0b3I6OmFkZEFuaW1hdGVkVHlwZXMKICAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtp dC5vcmcvc2hvd19idWcuY2dpP2lkPTExMzIyNAogCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9z dmcvYW5pbWF0aW9ucy9hbmltYXRlVHJhbnNmb3JtLXRvLXNjYWxlLWV4cGVjdGVkLnN2ZyBiL0xh eW91dFRlc3RzL3N2Zy9hbmltYXRpb25zL2FuaW1hdGVUcmFuc2Zvcm0tdG8tc2NhbGUtZXhwZWN0 ZWQuc3ZnCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAuLmFkOGRjMjZlNTFhMGY0OGY1MjBkOWU5ZGMzNDg0ZWQwZGEzYzZl ZGYKLS0tIC9kZXYvbnVsbAorKysgYi9MYXlvdXRUZXN0cy9zdmcvYW5pbWF0aW9ucy9hbmltYXRl VHJhbnNmb3JtLXRvLXNjYWxlLWV4cGVjdGVkLnN2ZwpAQCAtMCwwICsxLDggQEAKKzw/eG1sIHZl cnNpb249IjEuMCI/PgorPHN2ZyB2aWV3Qm94PSIwIDAgNTAwIDMwMCIgb25sb2FkPSJsb2FkZWQo KSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxuczp4bGluaz0iaHR0cDov L3d3dy53My5vcmcvMTk5OS94bGluayI+Cis8cmVjdCB4PSIwIiB5PSIwIiB3aWR0aD0iNTAwIiBo ZWlnaHQ9IjMwMCIgZmlsbD0iI2ZmZiIgLz4KKworPGcgZmlsbD0iZ3JlZW4iPgorICAgIDxwYXRo IGQ9Ik0tMjUsMEMxMjAsLTQwIC04MCwtNjAgMjAsMjV6TTIwIDEwcS0xMCAtMTAgMiAtMTAiIHRy YW5zZm9ybT0idHJhbnNsYXRlKDEwMCwxMDApIi8+Cis8L2c+Cis8L3N2Zz4KZGlmZiAtLWdpdCBh L0xheW91dFRlc3RzL3N2Zy9hbmltYXRpb25zL2FuaW1hdGVUcmFuc2Zvcm0tdG8tc2NhbGUuc3Zn IGIvTGF5b3V0VGVzdHMvc3ZnL2FuaW1hdGlvbnMvYW5pbWF0ZVRyYW5zZm9ybS10by1zY2FsZS5z dmcKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMC4uNDcyYjlmYTNkNDc2OTg1OTJlNzY3ZWFiYmJiZDlmOTcwNWMyNzBiZAot LS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL3N2Zy9hbmltYXRpb25zL2FuaW1hdGVUcmFu c2Zvcm0tdG8tc2NhbGUuc3ZnCkBAIC0wLDAgKzEsMjAgQEAKKzw/eG1sIHZlcnNpb249IjEuMCI/ PgorPHN2ZyB2aWV3Qm94PSIwIDAgNTAwIDMwMCIgb25sb2FkPSJsb2FkZWQoKSIgeG1sbnM9Imh0 dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxuczp4bGluaz0iaHR0cDovL3d3dy53My5vcmcv MTk5OS94bGluayI+Cis8cmVjdCB4PSIwIiB5PSIwIiB3aWR0aD0iNTAwIiBoZWlnaHQ9IjMwMCIg ZmlsbD0iI2ZmZiIgLz4KKworPGcgZmlsbD0iZ3JlZW4iPgorICAgIDxwYXRoIGQ9Ik0tMjUsMEMx MjAsLTQwIC04MCwtNjAgMjAsMjV6TTIwIDEwcS0xMCAtMTAgMiAtMTAiIHRyYW5zZm9ybT0idHJh bnNsYXRlKDEwMCwxMDApIj4KKyAgICAgICAgPGFuaW1hdGVUcmFuc2Zvcm0gYXR0cmlidXRlTmFt ZT0idHJhbnNmb3JtIiBhZGRpdGl2ZT0ic3VtIiB0eXBlPSJzY2FsZSIgdG89IjMiIGJlZ2luPSIw cyIgZHVyPSIycyIvPgorICAgIDwvcGF0aD4KKzwvZz4KKzxzY3JpcHQ+CitpZiAod2luZG93LnRl c3RSdW5uZXIpCisgICAgdGVzdFJ1bm5lci53YWl0VW50aWxEb25lKCk7CisKK2Z1bmN0aW9uIGxv YWRlZCgpIHsKKyAgICBkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQuc2V0Q3VycmVudFRpbWUoMik7 CisgICAgaWYgKHdpbmRvdy50ZXN0UnVubmVyKQorICAgICAgICB0ZXN0UnVubmVyLm5vdGlmeURv bmUoKTsKK30KKzwvc2NyaXB0PgorPC9zdmc+Cg==