44750 2010-08-26 23:36:43 -0700 [Crash] <animateMotion> element directly inside <symbol> element causes crash when referenced by <use> 2011-01-18 22:13:15 -0800 1 1 1 Unclassified WebKit SVG 528+ (Nightly build) PC Linux RESOLVED FIXED P2 Normal --- 0 shanestephens shanestephens commit-queue eric noel.gordon ojan zimmermann oldest_to_newest 270336 0 65680 shanestephens 2010-08-26 23:36:43 -0700 Created attachment 65680 SVG that causes webkit to crash (See http://code.google.com/p/chromium/issues/detail?id=50820) The attached SVG causes a crash inside webkit when loaded. 271290 1 65876 shanestephens 2010-08-29 21:51:33 -0700 Created attachment 65876 Proposed patch 274651 2 65876 dglazkov 2010-09-06 08:41:33 -0700 Comment on attachment 65876 Proposed patch ok. 274676 3 65876 commit-queue 2010-09-06 09:52:02 -0700 Comment on attachment 65876 Proposed patch Clearing flags on attachment: 65876 Committed r66836: <http://trac.webkit.org/changeset/66836> 274677 4 commit-queue 2010-09-06 09:52:08 -0700 All reviewed patches have been landed. Closing bug. 65680 2010-08-26 23:36:43 -0700 2010-08-26 23:36:43 -0700 SVG that causes webkit to crash animateMotionCrash.svg image/svg+xml 274 shanestephens PD94bWwgdmVyc2lvbj0iMS4wIiBzdGFuZGFsb25lPSJubyI/Pgo8c3ZnIHdpZHRoPSIxMDAlIiBo ZWlnaHQ9IjEwMCUiICB2ZXJzaW9uPSIxLjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAw L3N2ZyIgeG1sbnM6eGxpbms9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGxpbmsiPgogIDx1c2Ug eGxpbms6aHJlZj0iI2NyYXNoIi8+CiAgPGEgaWQ9ImNyYXNoIj4KICAgIDxzeW1ib2w+CiAgICAg IDxhbmltYXRlTW90aW9uLz4KICAgIDwvc3ltYm9sPgogIDwvYT4KPC9zdmc+Cg== 65876 2010-08-29 21:51:33 -0700 2010-09-06 09:52:02 -0700 Proposed patch 44750-patch.txt text/plain 3975 shanestephens SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n CShyZXZpc2lvbiA2NjM1NCkKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMTggQEAKKzIwMTAtMDgtMjkgIFNoYW5lIFN0ZXBoZW5zICA8c2hhbmVzdGVwaGVu c0Bnb29nbGUuY29tPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisg ICAgICAgIFtDcmFzaF0gPGFuaW1hdGVNb3Rpb24+IGVsZW1lbnQgZGlyZWN0bHkgaW5zaWRlIDxz eW1ib2w+IGVsZW1lbnQgY2F1c2VzIGNyYXNoIHdoZW4gcmVmZXJlbmNlZCBieSA8dXNlPgorICAg ICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9NDQ3NTAKKworICAg ICAgICBGaXhlcyBjcmFzaCBieSBjaGVja2luZyBmb3IgbnVsbCB0cmFuc2Zvcm1zIGFuZCBza2lw cGluZyB1cGRhdGUgc3RlcAorICAgICAgICB3aGVuIGFwcHJvcHJpYXRlLgorCisgICAgICAgIFRl c3Q6IHN2Zy9kb20vc3ltYm9sLWVtYmVkZGVkQW5pbWF0aW9uLnN2ZworCisgICAgICAgICogc3Zn L1NWR0FuaW1hdGVNb3Rpb25FbGVtZW50LmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OlNWR0FuaW1h dGVNb3Rpb25FbGVtZW50OjphcHBseVJlc3VsdHNUb1RhcmdldCk6CisKIDIwMTAtMDgtMjkgIEt3 YW5nIFl1bCBTZW8gIDxza3l1bEBjb21wYW55MTAwLm5ldD4KIAogICAgICAgICBSZXZpZXdlZCBi eSBLZW50IFRhbXVyYS4KSW5kZXg6IFdlYkNvcmUvc3ZnL1NWR0FuaW1hdGVNb3Rpb25FbGVtZW50 LmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09Ci0tLSBXZWJDb3JlL3N2Zy9TVkdBbmltYXRlTW90aW9uRWxlbWVudC5j cHAJKHJldmlzaW9uIDY2MzUzKQorKysgV2ViQ29yZS9zdmcvU1ZHQW5pbWF0ZU1vdGlvbkVsZW1l bnQuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC0yMjEsNiArMjIxLDEwIEBAIHZvaWQgU1ZHQW5pbWF0 ZU1vdGlvbkVsZW1lbnQ6OmFwcGx5UmVzdWwKICAgICBpZiAoUmVuZGVyT2JqZWN0KiByZW5kZXJl ciA9IHRhcmdldEVsZW1lbnQtPnJlbmRlcmVyKCkpCiAgICAgICAgIFJlbmRlclNWR1Jlc291cmNl OjptYXJrRm9yTGF5b3V0QW5kUGFyZW50UmVzb3VyY2VJbnZhbGlkYXRpb24ocmVuZGVyZXIpOwog CisgICAgQWZmaW5lVHJhbnNmb3JtKiB0ID0gdGFyZ2V0RWxlbWVudC0+c3VwcGxlbWVudGFsVHJh bnNmb3JtKCk7CisgICAgaWYgKCF0KQorICAgICAgICByZXR1cm47CisKICAgICAvLyAuLi5leGNl cHQgaW4gY2FzZSB3aGVyZSB3ZSBoYXZlIGFkZGl0aW9uYWwgaW5zdGFuY2VzIGluIDx1c2U+IHRy ZWVzLgogICAgIGNvbnN0IEhhc2hTZXQ8U1ZHRWxlbWVudEluc3RhbmNlKj4mIGluc3RhbmNlcyA9 IHRhcmdldEVsZW1lbnQtPmluc3RhbmNlc0ZvckVsZW1lbnQoKTsKICAgICBjb25zdCBIYXNoU2V0 PFNWR0VsZW1lbnRJbnN0YW5jZSo+Ojpjb25zdF9pdGVyYXRvciBlbmQgPSBpbnN0YW5jZXMuZW5k KCk7CkBAIC0yMjgsNyArMjMyLDggQEAgdm9pZCBTVkdBbmltYXRlTW90aW9uRWxlbWVudDo6YXBw bHlSZXN1bAogICAgICAgICBTVkdFbGVtZW50KiBzaGFkb3dUcmVlRWxlbWVudCA9ICgqaXQpLT5z aGFkb3dUcmVlRWxlbWVudCgpOwogICAgICAgICBBU1NFUlQoc2hhZG93VHJlZUVsZW1lbnQpOwog ICAgICAgICBBZmZpbmVUcmFuc2Zvcm0qIHRyYW5zZm9ybSA9IHNoYWRvd1RyZWVFbGVtZW50LT5z dXBwbGVtZW50YWxUcmFuc2Zvcm0oKTsKLSAgICAgICAgQWZmaW5lVHJhbnNmb3JtKiB0ID0gdGFy Z2V0RWxlbWVudC0+c3VwcGxlbWVudGFsVHJhbnNmb3JtKCk7CisgICAgICAgIGlmICghdHJhbnNm b3JtKQorICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgIHRyYW5zZm9ybS0+c2V0TWF0cml4 KHQtPmEoKSwgdC0+YigpLCB0LT5jKCksIHQtPmQoKSwgdC0+ZSgpLCB0LT5mKCkpOwogICAgICAg ICBpZiAoUmVuZGVyT2JqZWN0KiByZW5kZXJlciA9IHNoYWRvd1RyZWVFbGVtZW50LT5yZW5kZXJl cigpKSB7CiAgICAgICAgICAgICByZW5kZXJlci0+c2V0TmVlZHNUcmFuc2Zvcm1VcGRhdGUoKTsK SW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9D aGFuZ2VMb2cJKHJldmlzaW9uIDY2MzU0KQorKysgTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCSh3b3Jr aW5nIGNvcHkpCkBAIC0xLDMgKzEsMTUgQEAKKzIwMTAtMDgtMjkgIFNoYW5lIFN0ZXBoZW5zICA8 c2hhbmVzdGVwaGVuc0Bnb29nbGUuY29tPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAo T09QUyEpLgorCisgICAgICAgIFtDcmFzaF0gPGFuaW1hdGVNb3Rpb24+IGVsZW1lbnQgZGlyZWN0 bHkgaW5zaWRlIDxzeW1ib2w+IGVsZW1lbnQgY2F1c2VzIGNyYXNoIHdoZW4gcmVmZXJlbmNlZCBi eSA8dXNlPgorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9 NDQ3NTAKKworICAgICAgICBBZGRlZCB0ZXN0IGNhc2UgdG8gZGVtb25zdHJhdGUgY3Jhc2ggYnVn LgorCisgICAgICAgICogc3ZnL2RvbS9zeW1ib2wtZW1iZWRkZWRBbmltYXRpb24tZXhwZWN0ZWQu dHh0OiBBZGRlZC4KKyAgICAgICAgKiBzdmcvZG9tL3N5bWJvbC1lbWJlZGRlZEFuaW1hdGlvbi5z dmc6IEFkZGVkLgorCiAyMDEwLTA4LTI5ICBZdXpvIEZ1amlzaGltYSAgPHl1em9AZ29vZ2xlLmNv bT4KIAogICAgICAgICBVbnJldmlld2VkIENocm9taXVtIHRlc3QgZXhwZWN0YXRpb24gY2hhbmdl IGZvciByNjYyOTYuCkluZGV4OiBMYXlvdXRUZXN0cy9zdmcvZG9tL3N5bWJvbC1lbWJlZGRlZEFu aW1hdGlvbi1leHBlY3RlZC50eHQKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvc3ZnL2RvbS9z eW1ib2wtZW1iZWRkZWRBbmltYXRpb24tZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAwKQorKysgTGF5 b3V0VGVzdHMvc3ZnL2RvbS9zeW1ib2wtZW1iZWRkZWRBbmltYXRpb24tZXhwZWN0ZWQudHh0CShy ZXZpc2lvbiAwKQpAQCAtMCwwICsxIEBACitTdXJ2aXZlZCB0aGUgY3Jhc2ghCkluZGV4OiBMYXlv dXRUZXN0cy9zdmcvZG9tL3N5bWJvbC1lbWJlZGRlZEFuaW1hdGlvbi5zdmcKPT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQot LS0gTGF5b3V0VGVzdHMvc3ZnL2RvbS9zeW1ib2wtZW1iZWRkZWRBbmltYXRpb24uc3ZnCShyZXZp c2lvbiAwKQorKysgTGF5b3V0VGVzdHMvc3ZnL2RvbS9zeW1ib2wtZW1iZWRkZWRBbmltYXRpb24u c3ZnCShyZXZpc2lvbiAwKQpAQCAtMCwwICsxLDE2IEBACis8P3htbCB2ZXJzaW9uPSIxLjAiIHN0 YW5kYWxvbmU9Im5vIj8+Cis8c3ZnIHZlcnNpb249IjEuMSIgeG1sbnM9Imh0dHA6Ly93d3cudzMu b3JnLzIwMDAvc3ZnIiB4bWxuczp4bGluaz0iaHR0cDovL3d3dy53My5vcmcvMTk5OS94bGluayI+ CisgIDwhLS0gdXNlIG9mIGFuaW1hdGVNb3Rpb24gaW5zaWRlIHN5bWJvbCB0YWcgc2hvdWxkIG5v dCBjcmFzaCAtLT4KKyAgPHVzZSB4bGluazpocmVmPSIjY3Jhc2giLz4KKyAgPGEgaWQ9ImNyYXNo Ij4KKyAgICA8c3ltYm9sPgorICAgICAgPGFuaW1hdGVNb3Rpb24vPgorICAgIDwvc3ltYm9sPgor ICA8L2E+CisKKyAgPHRleHQ+U3Vydml2ZWQgdGhlIGNyYXNoITwvdGV4dD4KKyAgPHNjcmlwdD4K KyAgaWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcikKKyAgICAgIGxheW91dFRlc3RDb250 cm9sbGVyLmR1bXBBc1RleHQoKTsKKyAgPC9zY3JpcHQ+Cis8L3N2Zz4K