20550 2008-08-27 13:40:15 -0700 SVGUseElement.setAttribute crashes Safari 2008-10-08 19:59:40 -0700 1 1 1 Unclassified WebKit SVG 528+ (Nightly build) PC Windows XP RESOLVED DUPLICATE 15413 HasReduction, InRadar P1 Critical --- 1 tuom.larsen webkit-unassigned mrowe oldest_to_newest 89523 0 tuom.larsen 2008-08-27 13:40:15 -0700 Define a "symbol" with transform attribute and "use" instance of that symbol with some "fill". Change fill of "use", then change transform of "symbol". This crashes Safari 3.1 and latest 4 beta here. 89524 1 mrowe 2008-08-27 13:54:16 -0700 Can you please attach an SVG file that demonstrates the problem? 89539 2 tuom.larsen 2008-08-27 15:55:01 -0700 @#$%^!! It took me three hours to isolate it... Anyway, please, look at the attachment and double click inside that circle. 89540 3 23043 tuom.larsen 2008-08-27 15:56:34 -0700 Created attachment 23043 test case 89542 4 mrowe 2008-08-27 15:58:30 -0700 <rdar://problem/6181015> 89543 5 mrowe 2008-08-27 15:58:50 -0700 Thanks for taking the time to make a reduction! 89550 6 tuom.larsen 2008-08-27 16:11:56 -0700 No problem. And please, is it crashing for you or is it just here? 89555 7 mrowe 2008-08-27 16:19:51 -0700 Yes, it crashes for me on Mac OS X. 92057 8 zimmermann 2008-09-21 18:54:07 -0700 I've got a fix, uploading in the next days. 93774 9 eric 2008-10-02 12:49:16 -0700 I guess the fix was forgotten? 94464 10 eric 2008-10-07 16:23:28 -0700 This no longer seems to crash with tip of tree, so I'm assuming this is fixed. Please verify using a nightly build: http://nightly.webkit.org 94554 11 tuom.larsen 2008-10-08 08:48:00 -0700 (In reply to comment #10) > This no longer seems to crash with tip of tree, so I'm assuming this is fixed. > > Please verify using a nightly build: > http://nightly.webkit.org > r37382 on Win still crashes. May I reopen the bug? 94687 12 zimmermann 2008-10-08 19:59:40 -0700 *** This bug has been marked as a duplicate of 15413 *** 23043 2008-08-27 15:56:34 -0700 2008-08-27 15:56:34 -0700 test case symbol-safari.xhtml application/xhtml+xml 1448 tuom.larsen PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4NCjwhRE9DVFlQRSBodG1sIFBV QkxJQyAiLS8vVzNDLy9EVEQgWEhUTUwgMS4xIHBsdXMgTWF0aE1MIDIuMCBwbHVzIFNWRyAxLjEv L0VOIiAiaHR0cDovL3d3dy53My5vcmcvMjAwMi8wNC94aHRtbC1tYXRoLXN2Zy94aHRtbC1tYXRo LXN2Zy5kdGQiPg0KPGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGh0bWwiIHht bG5zOnN2Zz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8v d3d3LnczLm9yZy8xOTk5L3hsaW5rIj48aGVhZD48c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlw dCI+PCFbQ0RBVEFbDQoNCnN0YXRlID0gdHJ1ZTsNCg0KZnVuY3Rpb24gdGVzdCgpIHsNCglpZiAo c3RhdGUpIHsNCgkJdmFyIHN2ZyA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdzdmcnKTsNCgkJ dmFyIGNpcmNsZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdjaXJjbGUnKTsNCgkJdmFyIHVz ZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd1c2UnKTsNCgkJdXNlLnNldEF0dHJpYnV0ZSgn ZmlsbCcsICcjZjAwJyk7DQoJCXN2Zy5zZXRBdHRyaWJ1dGUoJ3dpZHRoJywgMjAwKTsNCgkJc3Zn LnNldEF0dHJpYnV0ZSgnaGVpZ2h0JywgMjAwKTsNCgkJY2lyY2xlLnNldEF0dHJpYnV0ZSgndHJh bnNmb3JtJywgJ3NjYWxlKCcgKyAxMCArICcpJyk7DQoJfSBlbHNlIHsNCgkJdmFyIHN2ZyA9IGRv Y3VtZW50LmdldEVsZW1lbnRCeUlkKCdzdmcnKTsNCgkJdmFyIGNpcmNsZSA9IGRvY3VtZW50Lmdl dEVsZW1lbnRCeUlkKCdjaXJjbGUnKTsNCgkJdmFyIHVzZSA9IGRvY3VtZW50LmdldEVsZW1lbnRC eUlkKCd1c2UnKTsNCgkJdXNlLnNldEF0dHJpYnV0ZSgnZmlsbCcsICcjZmZmJyk7DQoJCXN2Zy5z ZXRBdHRyaWJ1dGUoJ3dpZHRoJywgMTAwKTsNCgkJc3ZnLnNldEF0dHJpYnV0ZSgnaGVpZ2h0Jywg MTAwKTsNCgkJY2lyY2xlLnNldEF0dHJpYnV0ZSgndHJhbnNmb3JtJywgJ3NjYWxlKCcgKyAyICsg JyknKTsNCgl9DQoJc3RhdGUgPSAhc3RhdGU7DQp9DQoNCl1dPjwvc2NyaXB0Pg0KDQo8dGl0bGU+ dGVzdDwvdGl0bGU+DQoNCjwvaGVhZD4NCjxib2R5IG9uY2xpY2s9InRlc3QoKTsiPg0KPHN2Zzpz dmcgaWQ9InN2ZyIgd2lkdGg9IjEwMCIgaGVpZ2h0PSIxMDAiPg0KPHN2ZzpkZWZzPg0KPHN2Zzpz eW1ib2wgaWQ9InN5bWJvbCIgb3ZlcmZsb3c9InZpc2libGUiPg0KPHN2ZzpjaXJjbGUgaWQ9ImNp cmNsZSIgY3g9IjAiIGN5PSIwIiByPSIyIiBzdHJva2U9IiMwMDAiIHRyYW5zZm9ybT0ic2NhbGUo MikiIC8+DQo8L3N2ZzpzeW1ib2w+DQo8L3N2ZzpkZWZzPg0KPHN2Zzp1c2UgaWQ9InVzZSIgeD0i NTAiIHk9IjUwIiBmaWxsPSIjZmZmIiB4bGluazpocmVmPSIjc3ltYm9sIiAvPg0KPC9zdmc6c3Zn Pg0KPC9ib2R5Pg0KPC9odG1sPg0KDQo=