85202 2012-04-30 09:22:04 -0700 WebCore::SVGAnimateMotionElement::applyResultsToTarget crash 2012-05-01 09:10:08 -0700 1 1 1 Unclassified WebKit SVG 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 pdr webkit-unassigned webkit.review.bot zimmermann oldest_to_newest 612687 0 139461 pdr 2012-04-30 09:22:04 -0700 Created attachment 139461 Repro case As the title says, we can crash in WebCore::SVGAnimateMotionElement::applyResultsToTarget. See the attached svg file for a repro. Original bug: crbug.com/124575 612726 1 139471 pdr 2012-04-30 10:28:36 -0700 Created attachment 139471 Skip building instance tree for disallowed target My first foray into the shadow tree :) 613381 2 139471 zimmermann 2012-05-01 07:41:41 -0700 Comment on attachment 139471 Skip building instance tree for disallowed target Ah great, r=me. 613433 3 139471 webkit.review.bot 2012-05-01 09:09:54 -0700 Comment on attachment 139471 Skip building instance tree for disallowed target Clearing flags on attachment: 139471 Committed r115730: <http://trac.webkit.org/changeset/115730> 613434 4 webkit.review.bot 2012-05-01 09:10:08 -0700 All reviewed patches have been landed. Closing bug. 139461 2012-04-30 09:22:04 -0700 2012-04-30 09:22:04 -0700 Repro case crash.svg image/svg+xml 222 pdr PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRw Oi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIj4KPG1hc2sgaWQ9Im1hc2siPjxhIGlkPSJmb28iLz48 L21hc2s+CjxhbmltYXRlTW90aW9uIHhsaW5rOmhyZWY9IiNmb28iLz4KPHVzZSB4bGluazpocmVm PSIjbWFzayIgaWQ9InVzZSIvPgo8dXNlIHhsaW5rOmhyZWY9IiN1c2UiLz4KPC9zdmc+ 139471 2012-04-30 10:28:36 -0700 2012-05-01 09:09:54 -0700 Skip building instance tree for disallowed target 85202.1.patch text/plain 7300 pdr SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDExNTY0OCkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE5IEBACisyMDEyLTA0LTMwICBQaGlsaXAg Um9nZXJzICA8cGRyQGdvb2dsZS5jb20+CisKKyAgICAgICAgU2tpcCBidWlsZGluZyBpbnN0YW5j ZSB0cmVlIGZvciBkaXNhbGxvd2VkIHRhcmdldAorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0 Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9ODUyMDIKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkg KE9PUFMhKS4KKworICAgICAgICBXaGVuIHRoZSB0YXJnZXQgb2YgYSB1c2UgaXMgZGlzYWxsb3dl ZCAoZS5nLiwgYSBtYXNrIGVsZW1lbnQpIHdlIGNhbgorICAgICAgICBza2lwIGJ1aWxkaW5nIHRo ZSBpbnN0YW5jZSB0cmVlIGJlY2F1c2UgdGhlIHNoYWRvdyB0cmVlIHdpbGwgYmUKKyAgICAgICAg c2tpcHBlZCBhcyB3ZWxsLgorCisgICAgICAgIFRlc3Q6IHN2Zy9jdXN0b20vYW5pbWF0ZS1kaXNh bGxvd2VkLW1hc2stZWxlbWVudC5zdmcKKworICAgICAgICAqIHN2Zy9TVkdVc2VFbGVtZW50LmNw cDoKKyAgICAgICAgKFdlYkNvcmU6OlNWR1VzZUVsZW1lbnQ6OmJ1aWxkSW5zdGFuY2VUcmVlKToK KwogMjAxMi0wNC0yOCAgRW1pbCBBIEVrbHVuZCAgPGVhZUBjaHJvbWl1bS5vcmc+IGFuZCBMZXZp IFdlaW50cmF1YiAgPGxldml3QGNocm9taXVtLm9yZz4KIAogICAgICAgICBBZGQgRU5BQkxFX1NV QlBJWEVMX0xBWU9VVCBjb250cm9sbGluZyBGcmFjdGlvbmFsTGF5b3V0VW5pdCBkZW5vbWluYXRv cgpJbmRleDogU291cmNlL1dlYkNvcmUvc3ZnL1NWR1VzZUVsZW1lbnQuY3BwCj09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0K LS0tIFNvdXJjZS9XZWJDb3JlL3N2Zy9TVkdVc2VFbGVtZW50LmNwcAkocmV2aXNpb24gMTE1NjQ0 KQorKysgU291cmNlL1dlYkNvcmUvc3ZnL1NWR1VzZUVsZW1lbnQuY3BwCSh3b3JraW5nIGNvcHkp CkBAIC01OTUsNiArNTk1LDkgQEAgdm9pZCBTVkdVc2VFbGVtZW50OjpidWlsZEluc3RhbmNlVHJl ZShTVgogICAgICAgICBmb3VuZFByb2JsZW0gPSBoYXNDeWNsZVVzZVJlZmVyZW5jaW5nKHN0YXRp Y19jYXN0PFNWR1VzZUVsZW1lbnQqPih0YXJnZXQpLCB0YXJnZXRJbnN0YW5jZSwgbmV3VGFyZ2V0 KTsKICAgICAgICAgaWYgKGZvdW5kUHJvYmxlbSkKICAgICAgICAgICAgIHJldHVybjsKKyAgICB9 IGVsc2UgaWYgKGlzRGlzYWxsb3dlZEVsZW1lbnQodGFyZ2V0KSkgeworICAgICAgICBmb3VuZFBy b2JsZW0gPSB0cnVlOworICAgICAgICByZXR1cm47CiAgICAgfQogCiAgICAgLy8gQSBnZW5lcmFs IGRlc2NyaXB0aW9uIGZyb20gdGhlIFNWRyBzcGVjLCBkZXNjcmliaW5nIHdoYXQgYnVpbGRJbnN0 YW5jZVRyZWUoKSBhY3R1YWxseSBkb2VzLgpJbmRleDogTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCj09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT0KLS0tIExheW91dFRlc3RzL0NoYW5nZUxvZwkocmV2aXNpb24gMTE1NjQ4KQorKysg TGF5b3V0VGVzdHMvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDMgKzEsMTcgQEAKKzIw MTItMDQtMzAgIFBoaWxpcCBSb2dlcnMgIDxwZHJAZ29vZ2xlLmNvbT4KKworICAgICAgICBTa2lw IGJ1aWxkaW5nIGluc3RhbmNlIHRyZWUgZm9yIGRpc2FsbG93ZWQgdGFyZ2V0CisgICAgICAgIGh0 dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD04NTIwMgorCisgICAgICAgIFJl dmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgICogcGxhdGZvcm0vY2hyb21pdW0t d2luL3N2Zy9jdXN0b20vdXNlLW9uLWRpc2FsbG93ZWQtZm9yZWlnbi1vYmplY3QtMy1leHBlY3Rl ZC50eHQ6CisgICAgICAgICogcGxhdGZvcm0vZ3RrL3N2Zy9jdXN0b20vdXNlLW9uLWRpc2FsbG93 ZWQtZm9yZWlnbi1vYmplY3QtMy1leHBlY3RlZC50eHQ6CisgICAgICAgICogcGxhdGZvcm0vbWFj L3N2Zy9jdXN0b20vdXNlLW9uLWRpc2FsbG93ZWQtZm9yZWlnbi1vYmplY3QtMy1leHBlY3RlZC50 eHQ6CisgICAgICAgICogcGxhdGZvcm0vcXQvc3ZnL2N1c3RvbS91c2Utb24tZGlzYWxsb3dlZC1m b3JlaWduLW9iamVjdC0zLWV4cGVjdGVkLnR4dDoKKyAgICAgICAgKiBzdmcvY3VzdG9tL2FuaW1h dGUtZGlzYWxsb3dlZC1tYXNrLWVsZW1lbnQtZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAg KiBzdmcvY3VzdG9tL2FuaW1hdGUtZGlzYWxsb3dlZC1tYXNrLWVsZW1lbnQuc3ZnOiBBZGRlZC4K KwogMjAxMi0wNC0zMCAgSnVzdGluIFNjaHVoICA8anNjaHVoQGNocm9taXVtLm9yZz4KIAogICAg ICAgICBsb2FkT3JSZWRpcmVjdFN1YmZyYW1lIHNob3VsZCByZXR1cm4gdGhlIG93bmVyIGVsZW1l bnQncyBmcmFtZQpJbmRleDogTGF5b3V0VGVzdHMvcGxhdGZvcm0vY2hyb21pdW0td2luL3N2Zy9j dXN0b20vdXNlLW9uLWRpc2FsbG93ZWQtZm9yZWlnbi1vYmplY3QtMy1leHBlY3RlZC50eHQKPT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PQotLS0gTGF5b3V0VGVzdHMvcGxhdGZvcm0vY2hyb21pdW0td2luL3N2Zy9jdXN0b20v dXNlLW9uLWRpc2FsbG93ZWQtZm9yZWlnbi1vYmplY3QtMy1leHBlY3RlZC50eHQJKHJldmlzaW9u IDExNTY0NCkKKysrIExheW91dFRlc3RzL3BsYXRmb3JtL2Nocm9taXVtLXdpbi9zdmcvY3VzdG9t L3VzZS1vbi1kaXNhbGxvd2VkLWZvcmVpZ24tb2JqZWN0LTMtZXhwZWN0ZWQudHh0CSh3b3JraW5n IGNvcHkpCkBAIC04LDQgKzgsMyBAQCBsYXllciBhdCAoMCwwKSBzaXplIDgwMHg2MDAKICAgICAg ICAgICB0ZXh0IHJ1biBhdCAoMCwwKSB3aWR0aCAyMzA6ICJZb3Ugc2hvdWxkIG9ubHkgc2VlIHRo aXMgc3RyaW5nIE9OQ0UiCiAgICAgUmVuZGVyU1ZHQ29udGFpbmVyIHt1c2V9IGF0ICgwLDApIHNp emUgMHgwIFt0cmFuc2Zvcm09e209KCgwLjcxLDAuNzEpKC0wLjcxLDAuNzEpKSB0PSgyNTAuMDAs LTM1Ljg2KX1dCiAgICAgUmVuZGVyU1ZHQ29udGFpbmVyIHt1c2V9IGF0ICgwLDApIHNpemUgMHgw IFt0cmFuc2Zvcm09e209KCgwLjcxLDAuNzEpKC0wLjcxLDAuNzEpKSB0PSgyNTAuMDAsLTM1Ljg2 KX1dCi0gICAgICBSZW5kZXJTVkdDb250YWluZXIge2d9IGF0ICgwLDApIHNpemUgMHgwIFt0cmFu c2Zvcm09e209KCgwLjcxLDAuNzEpKC0wLjcxLDAuNzEpKSB0PSgyNTAuMDAsLTM1Ljg2KX1dCklu ZGV4OiBMYXlvdXRUZXN0cy9wbGF0Zm9ybS9ndGsvc3ZnL2N1c3RvbS91c2Utb24tZGlzYWxsb3dl ZC1mb3JlaWduLW9iamVjdC0zLWV4cGVjdGVkLnR4dAo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0 cy9wbGF0Zm9ybS9ndGsvc3ZnL2N1c3RvbS91c2Utb24tZGlzYWxsb3dlZC1mb3JlaWduLW9iamVj dC0zLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMTE1NjQ0KQorKysgTGF5b3V0VGVzdHMvcGxhdGZv cm0vZ3RrL3N2Zy9jdXN0b20vdXNlLW9uLWRpc2FsbG93ZWQtZm9yZWlnbi1vYmplY3QtMy1leHBl Y3RlZC50eHQJKHdvcmtpbmcgY29weSkKQEAgLTgsNCArOCwzIEBAIGxheWVyIGF0ICgwLDApIHNp emUgODAweDYwMAogICAgICAgICAgIHRleHQgcnVuIGF0ICgwLDApIHdpZHRoIDI0NDogIllvdSBz aG91bGQgb25seSBzZWUgdGhpcyBzdHJpbmcgT05DRSIKICAgICBSZW5kZXJTVkdDb250YWluZXIg e3VzZX0gYXQgKDAsMCkgc2l6ZSAweDAgW3RyYW5zZm9ybT17bT0oKDAuNzEsMC43MSkoLTAuNzEs MC43MSkpIHQ9KDI1MC4wMCwtMzUuODYpfV0KICAgICBSZW5kZXJTVkdDb250YWluZXIge3VzZX0g YXQgKDAsMCkgc2l6ZSAweDAgW3RyYW5zZm9ybT17bT0oKDAuNzEsMC43MSkoLTAuNzEsMC43MSkp IHQ9KDI1MC4wMCwtMzUuODYpfV0KLSAgICAgIFJlbmRlclNWR0NvbnRhaW5lciB7Z30gYXQgKDAs MCkgc2l6ZSAweDAgW3RyYW5zZm9ybT17bT0oKDAuNzEsMC43MSkoLTAuNzEsMC43MSkpIHQ9KDI1 MC4wMCwtMzUuODYpfV0KSW5kZXg6IExheW91dFRlc3RzL3BsYXRmb3JtL21hYy9zdmcvY3VzdG9t L3VzZS1vbi1kaXNhbGxvd2VkLWZvcmVpZ24tb2JqZWN0LTMtZXhwZWN0ZWQudHh0Cj09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT0KLS0tIExheW91dFRlc3RzL3BsYXRmb3JtL21hYy9zdmcvY3VzdG9tL3VzZS1vbi1kaXNhbGxv d2VkLWZvcmVpZ24tb2JqZWN0LTMtZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAxMTU2NDQpCisrKyBM YXlvdXRUZXN0cy9wbGF0Zm9ybS9tYWMvc3ZnL2N1c3RvbS91c2Utb24tZGlzYWxsb3dlZC1mb3Jl aWduLW9iamVjdC0zLWV4cGVjdGVkLnR4dAkod29ya2luZyBjb3B5KQpAQCAtOCw0ICs4LDMgQEAg bGF5ZXIgYXQgKDAsMCkgc2l6ZSA4MDB4NjAwCiAgICAgICAgICAgdGV4dCBydW4gYXQgKDAsMCkg d2lkdGggMjQ0OiAiWW91IHNob3VsZCBvbmx5IHNlZSB0aGlzIHN0cmluZyBPTkNFIgogICAgIFJl bmRlclNWR0NvbnRhaW5lciB7dXNlfSBhdCAoMCwwKSBzaXplIDB4MCBbdHJhbnNmb3JtPXttPSgo MC43MSwwLjcxKSgtMC43MSwwLjcxKSkgdD0oMjUwLjAwLC0zNS44Nil9XQogICAgIFJlbmRlclNW R0NvbnRhaW5lciB7dXNlfSBhdCAoMCwwKSBzaXplIDB4MCBbdHJhbnNmb3JtPXttPSgoMC43MSww LjcxKSgtMC43MSwwLjcxKSkgdD0oMjUwLjAwLC0zNS44Nil9XQotICAgICAgUmVuZGVyU1ZHQ29u dGFpbmVyIHtnfSBhdCAoMCwwKSBzaXplIDB4MCBbdHJhbnNmb3JtPXttPSgoMC43MSwwLjcxKSgt MC43MSwwLjcxKSkgdD0oMjUwLjAwLC0zNS44Nil9XQpJbmRleDogTGF5b3V0VGVzdHMvcGxhdGZv cm0vcXQvc3ZnL2N1c3RvbS91c2Utb24tZGlzYWxsb3dlZC1mb3JlaWduLW9iamVjdC0zLWV4cGVj dGVkLnR4dAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9wbGF0Zm9ybS9xdC9zdmcvY3VzdG9t L3VzZS1vbi1kaXNhbGxvd2VkLWZvcmVpZ24tb2JqZWN0LTMtZXhwZWN0ZWQudHh0CShyZXZpc2lv biAxMTU2NDQpCisrKyBMYXlvdXRUZXN0cy9wbGF0Zm9ybS9xdC9zdmcvY3VzdG9tL3VzZS1vbi1k aXNhbGxvd2VkLWZvcmVpZ24tb2JqZWN0LTMtZXhwZWN0ZWQudHh0CSh3b3JraW5nIGNvcHkpCkBA IC04LDQgKzgsMyBAQCBsYXllciBhdCAoMCwwKSBzaXplIDgwMHg2MDAKICAgICAgICAgICB0ZXh0 IHJ1biBhdCAoMCwwKSB3aWR0aCAyNjg6ICJZb3Ugc2hvdWxkIG9ubHkgc2VlIHRoaXMgc3RyaW5n IE9OQ0UiCiAgICAgUmVuZGVyU1ZHQ29udGFpbmVyIHt1c2V9IGF0ICgwLDApIHNpemUgMHgwIFt0 cmFuc2Zvcm09e209KCgwLjcxLDAuNzEpKC0wLjcxLDAuNzEpKSB0PSgyNTAuMDAsLTM1Ljg2KX1d CiAgICAgUmVuZGVyU1ZHQ29udGFpbmVyIHt1c2V9IGF0ICgwLDApIHNpemUgMHgwIFt0cmFuc2Zv cm09e209KCgwLjcxLDAuNzEpKC0wLjcxLDAuNzEpKSB0PSgyNTAuMDAsLTM1Ljg2KX1dCi0gICAg ICBSZW5kZXJTVkdDb250YWluZXIge2d9IGF0ICgwLDApIHNpemUgMHgwIFt0cmFuc2Zvcm09e209 KCgwLjcxLDAuNzEpKC0wLjcxLDAuNzEpKSB0PSgyNTAuMDAsLTM1Ljg2KX1dCkluZGV4OiBMYXlv dXRUZXN0cy9zdmcvY3VzdG9tL2FuaW1hdGUtZGlzYWxsb3dlZC1tYXNrLWVsZW1lbnQtZXhwZWN0 ZWQudHh0Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL3N2Zy9jdXN0b20vYW5pbWF0ZS1kaXNh bGxvd2VkLW1hc2stZWxlbWVudC1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCisrKyBMYXlvdXRU ZXN0cy9zdmcvY3VzdG9tL2FuaW1hdGUtZGlzYWxsb3dlZC1tYXNrLWVsZW1lbnQtZXhwZWN0ZWQu dHh0CShyZXZpc2lvbiAwKQpAQCAtMCwwICsxIEBACitQQVNTOiBBbmltYXRpbmcgcHJ1bmVkIHNo YWRvdyB0cmVlIGRpZCBub3QgY2F1c2UgYSBjcmFzaC4KSW5kZXg6IExheW91dFRlc3RzL3N2Zy9j dXN0b20vYW5pbWF0ZS1kaXNhbGxvd2VkLW1hc2stZWxlbWVudC5zdmcKPT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0g TGF5b3V0VGVzdHMvc3ZnL2N1c3RvbS9hbmltYXRlLWRpc2FsbG93ZWQtbWFzay1lbGVtZW50LnN2 ZwkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL3N2Zy9jdXN0b20vYW5pbWF0ZS1kaXNhbGxv d2VkLW1hc2stZWxlbWVudC5zdmcJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEsMTcgQEAKKzxzdmcg eG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxuczp4bGluaz0iaHR0cDovL3d3 dy53My5vcmcvMTk5OS94bGluayI+CisgICAgPCEtLSBUZXN0IGZvciB3a2J1Zy5jb20vODUyMDI6 IFBhc3NlcyBpZiBhIGNyYXNoIGRvZXMgbm90IG9jY3VyLiAtLT4KKyAgICA8c2NyaXB0PgorICAg ICAgICB3aW5kb3cub25sb2FkID0gZnVuY3Rpb24oKSB7CisgICAgICAgICAgICBpZiAod2luZG93 LmxheW91dFRlc3RDb250cm9sbGVyKSB7CisgICAgICAgICAgICAgICAgbGF5b3V0VGVzdENvbnRy b2xsZXIuZHVtcEFzVGV4dCgpOworICAgICAgICAgICAgICAgIGxheW91dFRlc3RDb250cm9sbGVy LndhaXRVbnRpbERvbmUoKTsKKyAgICAgICAgICAgICAgICBzZXRUaW1lb3V0KGZ1bmN0aW9uKCl7 IGxheW91dFRlc3RDb250cm9sbGVyLm5vdGlmeURvbmUoKSB9LCAwKTsKKyAgICAgICAgICAgIH0K KyAgICAgICAgfQorICAgIDwvc2NyaXB0PgorICAgIDxtYXNrIGlkPSJtYXNrIj48YSBpZD0iZm9v Ii8+PC9tYXNrPgorICAgIDxhbmltYXRlTW90aW9uIHhsaW5rOmhyZWY9IiNmb28iLz4KKyAgICA8 dXNlIHhsaW5rOmhyZWY9IiNtYXNrIiBpZD0idXNlIi8+CisgICAgPHVzZSB4bGluazpocmVmPSIj dXNlIi8+CisgICAgPHRleHQgeD0iMjAiIHk9IjIwIiBmaWxsPSJncmVlbiI+UEFTUzogQW5pbWF0 aW5nIHBydW5lZCBzaGFkb3cgdHJlZSBkaWQgbm90IGNhdXNlIGEgY3Jhc2guPC90ZXh0PgorPC9z dmc+Cg==