<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>21293</bug_id>
          
          <creation_ts>2008-10-01 21:41:48 -0700</creation_ts>
          <short_desc>REGRESSION: Crash beneath RenderSVGViewportContainer::viewportTransform() during SVGSVGElement destruction</short_desc>
          <delta_ts>2008-10-01 21:57:48 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>SVG</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Mac</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>LayoutTestFailure, Regression</keywords>
          <priority>P1</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>mitz</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>93659</commentid>
    <comment_count>0</comment_count>
    <who name="">mitz</who>
    <bug_when>2008-10-01 21:41:48 -0700</bug_when>
    <thetext>svg/custom/use-modify-target-symbol.svg crashes beneath RenderSVGViewportContainer::viewportTransform() due to calling an SVGSVGElement method on a half-destructed object.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>93661</commentid>
    <comment_count>1</comment_count>
      <attachid>24005</attachid>
    <who name="">mitz</who>
    <bug_when>2008-10-01 21:48:57 -0700</bug_when>
    <thetext>Created attachment 24005
Step around the problem by calling detach() earlier</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>93663</commentid>
    <comment_count>2</comment_count>
    <who name="">mitz</who>
    <bug_when>2008-10-01 21:54:18 -0700</bug_when>
    <thetext>Fixed in &lt;http://trac.webkit.org/changeset/37180&gt;.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>24005</attachid>
            <date>2008-10-01 21:48:57 -0700</date>
            <delta_ts>2008-10-01 21:57:48 -0700</delta_ts>
            <desc>Step around the problem by calling detach() earlier</desc>
            <filename>21293_r1.diff</filename>
            <type>text/plain</type>
            <size>2524</size>
            <attacher>mitz</attacher>
            
              <data encoding="base64">SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="10852"
          type_id="1"
          status="+"
          setter="mrowe"
    />
          </attachment>
      

    </bug>

</bugzilla>