75227 2011-12-26 05:35:53 -0800 NULL ptr in WebCore::SVGStyledTransformableElement::animatedLocalTransform 2012-01-03 11:33:46 -0800 1 1 1 Unclassified WebKit SVG 528+ (Nightly build) PC Windows Vista RESOLVED FIXED P1 Normal --- 1 skylined webkit-unassigned eric fmalita koivisto rwlbuis webkit.review.bot zimmermann oldest_to_newest 527201 0 120551 skylined 2011-12-26 05:35:53 -0800 Created attachment 120551 Repro Detailed report: https://cluster-fuzz.appspot.com/testcase?key=9278916 Fuzzer: Inferno_layout_test_fuzzer Crash Type: UNKNOWN Crash Address: 0x000000000008 Crash State: - crash stack - WebCore::SVGStyledTransformableElement::animatedLocalTransform non-virtual thunk to WebCore::SVGStyledTransformableElement::animatedLocalTransform WebCore::SVGStyledTransformableElement::localCoordinateSpaceTransform Regressed: https://cluster-fuzz.appspot.com/revisions?range=111368:111501 Minimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94N78HYOdgNew_8tUlyw2DHa_r16roIX-dDHZRB4s5Z_OztPlCdCILo0cxvZ_DFCtdPbRt2dr-nx69WUHMIdWymUYglOgEnz93XzDIJfxk0Esp3ZOjfcG9aiU9iCWkxZgTt0wseNEJ4NEb5j_t7NxuxBeXqCw Repro: <script> document.createElementNS("http://www.w3.org/2000/svg","g").getTransformToElement(); </script> 528812 1 120956 fmalita 2012-01-03 09:10:12 -0800 Created attachment 120956 Patch 528824 2 120956 krit 2012-01-03 09:43:15 -0800 Comment on attachment 120956 Patch LGTM. r=me 528910 3 120956 webkit.review.bot 2012-01-03 11:33:42 -0800 Comment on attachment 120956 Patch Clearing flags on attachment: 120956 Committed r103950: <http://trac.webkit.org/changeset/103950> 528911 4 webkit.review.bot 2012-01-03 11:33:46 -0800 All reviewed patches have been landed. Closing bug. 120551 2011-12-26 05:35:53 -0800 2011-12-26 05:35:53 -0800 Repro repro.html text/html 104 skylined PHNjcmlwdD4KICBkb2N1bWVudC5jcmVhdGVFbGVtZW50TlMoImh0dHA6Ly93d3cudzMub3JnLzIw MDAvc3ZnIiwiZyIpLmdldFRyYW5zZm9ybVRvRWxlbWVudCgpOwo8L3NjcmlwdD4= 120956 2012-01-03 09:10:12 -0800 2012-01-03 11:33:42 -0800 Patch bug-75227-20120103121011.patch text/plain 3529 fmalita U3VidmVyc2lvbiBSZXZpc2lvbjogMTAzOTM2CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggNDJkNDIzNTgwMGU3MDU1 NTY2NDBiNjdjZWM4NzRkN2Q4YzAzODRjOC4uMjUxMjhhMDA3ZDZiY2NhOWNkNWI5MDUyOGFhNWVm ZTBjNzMxZThkYyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE2IEBACisyMDEyLTAxLTAzICBGbG9y aW4gTWFsaXRhICA8Zm1hbGl0YUBnb29nbGUuY29tPgorCisgICAgICAgIE5VTEwgcHRyIGluIFdl YkNvcmU6OlNWR1N0eWxlZFRyYW5zZm9ybWFibGVFbGVtZW50OjphbmltYXRlZExvY2FsVHJhbnNm b3JtCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD03NTIy NworCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFRlc3Q6 IHN2Zy9jdXN0b20vd2Via2l0LXRyYW5zZm9ybS1jcmFzaC5odG1sCisKKyAgICAgICAgKiBzdmcv U1ZHU3R5bGVkVHJhbnNmb3JtYWJsZUVsZW1lbnQuY3BwOgorICAgICAgICAoV2ViQ29yZTo6U1ZH U3R5bGVkVHJhbnNmb3JtYWJsZUVsZW1lbnQ6OmFuaW1hdGVkTG9jYWxUcmFuc2Zvcm0pOgorICAg ICAgICBBZGQgYSBudWxsLXJlbmRlcmVyIGNoZWNrLgorCiAyMDEyLTAxLTAzICBDYXJsb3MgR2Fy Y2lhIENhbXBvcyAgPGNnYXJjaWFAaWdhbGlhLmNvbT4KIAogICAgICAgICBbR1RLXSBGaXggc2Ny b2xsYmFycyBzaXplIHdpdGggR1RLKyAzLngKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL3N2 Zy9TVkdTdHlsZWRUcmFuc2Zvcm1hYmxlRWxlbWVudC5jcHAgYi9Tb3VyY2UvV2ViQ29yZS9zdmcv U1ZHU3R5bGVkVHJhbnNmb3JtYWJsZUVsZW1lbnQuY3BwCmluZGV4IDdjY2ViYjljMjc2M2JkZTFm OWJmZmI0OTc0YzU2NDBkZDU2ZWZlZjUuLjRiY2M1YjkyMDE2ZGY0ZjE4Y2MyZjIxZTJiYzU5NmZk YTY0ZjQ0MWUgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL3N2Zy9TVkdTdHlsZWRUcmFuc2Zv cm1hYmxlRWxlbWVudC5jcHAKKysrIGIvU291cmNlL1dlYkNvcmUvc3ZnL1NWR1N0eWxlZFRyYW5z Zm9ybWFibGVFbGVtZW50LmNwcApAQCAtNjQsMTAgKzY0LDEwIEBAIEFmZmluZVRyYW5zZm9ybSBT VkdTdHlsZWRUcmFuc2Zvcm1hYmxlRWxlbWVudDo6Z2V0U2NyZWVuQ1RNKFN0eWxlVXBkYXRlU3Ry YXRlZ3kKIEFmZmluZVRyYW5zZm9ybSBTVkdTdHlsZWRUcmFuc2Zvcm1hYmxlRWxlbWVudDo6YW5p bWF0ZWRMb2NhbFRyYW5zZm9ybSgpIGNvbnN0CiB7CiAgICAgQWZmaW5lVHJhbnNmb3JtIG1hdHJp eDsKLSAgICBSZW5kZXJTdHlsZSogc3R5bGUgPSByZW5kZXJlcigpLT5zdHlsZSgpOworICAgIFJl bmRlclN0eWxlKiBzdHlsZSA9IHJlbmRlcmVyKCkgPyByZW5kZXJlcigpLT5zdHlsZSgpIDogMDsK IAogICAgIC8vIGlmIENTUyBwcm9wZXJ0eSB3YXMgc2V0LCB1c2UgdGhhdCwgb3RoZXJ3aXNlIGZh bGxiYWNrIHRvIGF0dHJpYnV0ZSAoaWYgc2V0KQotICAgIGlmIChzdHlsZS0+aGFzVHJhbnNmb3Jt KCkpIHsKKyAgICBpZiAoc3R5bGUgJiYgc3R5bGUtPmhhc1RyYW5zZm9ybSgpKSB7CiAgICAgICAg IFRyYW5zZm9ybWF0aW9uTWF0cml4IHQ7CiAgICAgICAgIC8vIEZvciBub3csIHRoZSB0cmFuc2Zv cm0tb3JpZ2luIGlzIG5vdCB0YWtlbiBpbnRvIGFjY291bnQKICAgICAgICAgLy8gQWxzbywgYW55 IHBlcmNlbnRhZ2UgdmFsdWVzIHdpbGwgbm90IGJlIHRha2VuIGludG8gYWNjb3VudApkaWZmIC0t Z2l0IGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nIGIvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCmluZGV4 IDUzMjNjNmE0ZjZjOTk4YTgzYzZmYjllZDE2MWQ1MzVkMGU1OTdkN2EuLjI1ZTAxZTdiYmM3MDdj OTgxODczNzBiMDM2MTBlMTcyZGFlOWViNTEgMTAwNjQ0Ci0tLSBhL0xheW91dFRlc3RzL0NoYW5n ZUxvZworKysgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKQEAgLTEsMyArMSwxMyBAQAorMjAxMi0w MS0wMyAgRmxvcmluIE1hbGl0YSAgPGZtYWxpdGFAZ29vZ2xlLmNvbT4KKworICAgICAgICBOVUxM IHB0ciBpbiBXZWJDb3JlOjpTVkdTdHlsZWRUcmFuc2Zvcm1hYmxlRWxlbWVudDo6YW5pbWF0ZWRM b2NhbFRyYW5zZm9ybQorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5j Z2k/aWQ9NzUyMjcKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAg ICAgICAqIHN2Zy9jdXN0b20vd2Via2l0LXRyYW5zZm9ybS1jcmFzaC1leHBlY3RlZC50eHQ6IEFk ZGVkLgorICAgICAgICAqIHN2Zy9jdXN0b20vd2Via2l0LXRyYW5zZm9ybS1jcmFzaC5odG1sOiBB ZGRlZC4KKwogMjAxMi0wMS0wMyAgQWxleGlzIE1lbmFyZCAgPGFsZXhpcy5tZW5hcmRAb3BlbmJv c3NhLm9yZz4KIAogICAgICAgICBnZXRDb21wdXRlZFN0eWxlIGZvciBvdXRsaW5lIGlzIG5vdCBp bXBsZW1lbnRlZC4KZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL3N2Zy9jdXN0b20vd2Via2l0LXRy YW5zZm9ybS1jcmFzaC1leHBlY3RlZC50eHQgYi9MYXlvdXRUZXN0cy9zdmcvY3VzdG9tL3dlYmtp dC10cmFuc2Zvcm0tY3Jhc2gtZXhwZWN0ZWQudHh0Cm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4 IDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAuLjdlZjIyZTlhNDMxYWQw MjcyNzEzYjcxZmRjODc5NDAxNmM4ZWYxMmYKLS0tIC9kZXYvbnVsbAorKysgYi9MYXlvdXRUZXN0 cy9zdmcvY3VzdG9tL3dlYmtpdC10cmFuc2Zvcm0tY3Jhc2gtZXhwZWN0ZWQudHh0CkBAIC0wLDAg KzEgQEAKK1BBU1MKZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL3N2Zy9jdXN0b20vd2Via2l0LXRy YW5zZm9ybS1jcmFzaC5odG1sIGIvTGF5b3V0VGVzdHMvc3ZnL2N1c3RvbS93ZWJraXQtdHJhbnNm b3JtLWNyYXNoLmh0bWwKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMC4uYTgxMGE5NGIxMTBjY2NiM2YxMDRhYmQ1YTJhNGIw NjMwYjQwMjg5MwotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL3N2Zy9jdXN0b20vd2Vi a2l0LXRyYW5zZm9ybS1jcmFzaC5odG1sCkBAIC0wLDAgKzEsMTEgQEAKKzxodG1sPjxoZWFkPgor PG1ldGEgaHR0cC1lcXVpdj0iY29udGVudC10eXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz ZXQ9VVRGLTgiPgorPCEtLSBUaGlzIHNob3VsZCBub3QgY3Jhc2ggKG51bGwgcmVuZGVyZXIpIC0t PgorPHNjcmlwdD4KKyAgZG9jdW1lbnQuY3JlYXRlRWxlbWVudE5TKCJodHRwOi8vd3d3LnczLm9y Zy8yMDAwL3N2ZyIsImciKS5nZXRUcmFuc2Zvcm1Ub0VsZW1lbnQoKTsKKyAgaWYgKHdpbmRvdy5s YXlvdXRUZXN0Q29udHJvbGxlcikKKyAgICBsYXlvdXRUZXN0Q29udHJvbGxlci5kdW1wQXNUZXh0 KCk7Cis8L3NjcmlwdD4KKzwvaGVhZD48Ym9keT4KK1BBU1MKKzwvYm9keT48L2h0bWw+Cg==