Bug 136037 – ASSERTION FAILED: m_keyTimes.size() > 1 in WebCore::SVGAnimationElement::calculatePercentFromKeyPoints

• Component: SVG
• Status: RESOLVED FIXED

[Renata Hodovan]

Created attachment 236754 [details]
Test case

The failing test case:

<svg xmlns="http://www.w3.org/2000/svg">
  <circle>
    <animateMotion calcMode="linear" keyPoints="0.8" keyTimes="0" by="0 3"/>
  </circle>
</svg>


Backtrace:

ASSERTION FAILED: m_keyTimes.size() > 1
../../Source/WebCore/svg/SVGAnimationElement.cpp(453) : float WebCore::SVGAnimationElement::calculatePercentFromKeyPoints(float) const

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fff97537700 (LWP 26767)]
0x00007fffee49016d in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:329
329	    *(int *)(uintptr_t)0xbbadbeef = 0;
#0  0x00007fffee49016d in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:329
#1  0x00007ffff415ec1d in WebCore::SVGAnimationElement::calculatePercentFromKeyPoints (this=0x855f80, percent=0) at ../../Source/WebCore/svg/SVGAnimationElement.cpp:453
#2  0x00007ffff415fe8e in WebCore::SVGAnimationElement::updateAnimation (this=0x855f80, percent=0, repeatCount=0, resultElement=0x855f80) at ../../Source/WebCore/svg/SVGAnimationElement.cpp:631
#3  0x00007ffff423b807 in WebCore::SVGSMILElement::progress (this=0x855f80, elapsed=..., resultElement=0x855f80, seekToTime=false) at ../../Source/WebCore/svg/animation/SVGSMILElement.cpp:1109
#4  0x00007ffff4230c31 in WebCore::SMILTimeContainer::updateAnimations (this=0x881e80, elapsed=..., seekToTime=false) at ../../Source/WebCore/svg/animation/SMILTimeContainer.cpp:295
#5  0x00007ffff423027e in WebCore::SMILTimeContainer::begin (this=0x881e80) at ../../Source/WebCore/svg/animation/SMILTimeContainer.cpp:139
#6  0x00007ffff416c05f in WebCore::SVGDocumentExtensions::startAnimations (this=0x853110) at ../../Source/WebCore/svg/SVGDocumentExtensions.cpp:100
#7  0x00007ffff3665e17 in WebCore::Document::implicitClose (this=0xafe870) at ../../Source/WebCore/dom/Document.cpp:2461
#8  0x00007ffff3abf457 in WebCore::FrameLoader::checkCallImplicitClose (this=0x7bf098) at ../../Source/WebCore/loader/FrameLoader.cpp:898
#9  0x00007ffff3abf202 in WebCore::FrameLoader::checkCompleted (this=0x7bf098) at ../../Source/WebCore/loader/FrameLoader.cpp:844
#10 0x00007ffff3abef8a in WebCore::FrameLoader::finishedParsing (this=0x7bf098) at ../../Source/WebCore/loader/FrameLoader.cpp:764
#11 0x00007ffff366d625 in WebCore::Document::finishedParsing (this=0xafe870) at ../../Source/WebCore/dom/Document.cpp:4516
#12 0x00007ffff3962bc9 in WebCore::HTMLConstructionSite::finishedParsing (this=0x7ad668) at ../../Source/WebCore/html/parser/HTMLConstructionSite.cpp:395
#13 0x00007ffff399d03d in WebCore::HTMLTreeBuilder::finished (this=0x7ad650) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:2997
#14 0x00007ffff396a764 in WebCore::HTMLDocumentParser::end (this=0x88dc80) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:451
#15 0x00007ffff396a84f in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x88dc80) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:462
#16 0x00007ffff39693bd in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x88dc80) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:165
#17 0x00007ffff396a892 in WebCore::HTMLDocumentParser::attemptToEnd (this=0x88dc80) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:474
#18 0x00007ffff396a949 in WebCore::HTMLDocumentParser::finish (this=0x88dc80) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:502
#19 0x00007ffff3ab20f9 in WebCore::DocumentWriter::end (this=0x8c5df0) at ../../Source/WebCore/loader/DocumentWriter.cpp:250
#20 0x00007ffff3a9f14b in WebCore::DocumentLoader::finishedLoading (this=0x8c5d50, finishTime=0) at ../../Source/WebCore/loader/DocumentLoader.cpp:441
#21 0x00007ffff3a9eeb4 in WebCore::DocumentLoader::notifyFinished (this=0x8c5d50, resource=0x7ba7e0) at ../../Source/WebCore/loader/DocumentLoader.cpp:375
#22 0x00007ffff3b459cb in WebCore::CachedResource::checkNotify (this=0x7ba7e0) at ../../Source/WebCore/loader/cache/CachedResource.cpp:334
#23 0x00007ffff3b45ab2 in WebCore::CachedResource::finishLoading (this=0x7ba7e0) at ../../Source/WebCore/loader/cache/CachedResource.cpp:350
#24 0x00007ffff3b42a51 in WebCore::CachedRawResource::finishLoading (this=0x7ba7e0, data=0x9742e0) at ../../Source/WebCore/loader/cache/CachedRawResource.cpp:101
#25 0x00007ffff3af9576 in WebCore::SubresourceLoader::didFinishLoading (this=0x7bad40, finishTime=0) at ../../Source/WebCore/loader/SubresourceLoader.cpp:310
#26 0x00007ffff3af5a63 in WebCore::ResourceLoader::didFinishLoading (this=0x7bad40, finishTime=0) at ../../Source/WebCore/loader/ResourceLoader.cpp:518
#27 0x00007ffff43b174f in WebCore::readCallback (asyncResult=0x9d21f0, data=0x9d07f0) at ../../Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:1302
#28 0x00007fffec4422ea in async_ready_callback_wrapper (source_object=0xa3bb30, res=0x9d21f0, user_data=0x9d07f0) at ginputstream.c:519
#29 0x00007fffec461ceb in g_task_return_now (task=0x9d21f0) at gtask.c:1108
#30 0x00007fffec461d09 in complete_in_idle_cb (task=0x9d21f0) at gtask.c:1117
#31 0x00007fffeb6b82e6 in g_main_dispatch (context=0x677bb0) at gmain.c:3065
#32 g_main_context_dispatch (context=context@entry=0x677bb0) at gmain.c:3641
#33 0x00007fffeb6b8638 in g_main_context_iterate (context=0x677bb0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3712
#34 0x00007fffeb6b8a3a in g_main_loop_run (loop=0xafe740) at gmain.c:3906
#35 0x00007ffff4a0d57e in WTF::RunLoop::run () at ../../Source/WTF/wtf/gtk/RunLoopGtk.cpp:59
#36 0x00007ffff3191890 in WebKit::ChildProcessMain<WebKit::WebProcess, WebKit::WebProcessMain> (argc=2, argv=0x7fffffffda38) at ../../Source/WebKit2/Shared/unix/ChildProcessMain.h:61
#37 0x00007ffff31916f5 in WebKit::WebProcessMainUnix (argc=2, argv=0x7fffffffda38) at ../../Source/WebKit2/WebProcess/gtk/WebProcessMainGtk.cpp:73
#38 0x000000000040080d in main (argc=2, argv=0x7fffffffda38) at ../../Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp:32

[Renata Hodovan]

Created attachment 236755 [details]
Proposed patch

[WebKit Commit Bot]

Comment on attachment 236755 [details]
Proposed patch

Clearing flags on attachment: 236755

Committed r172706: <http://trac.webkit.org/changeset/172706>

[WebKit Commit Bot]

All reviewed patches have been landed.  Closing bug.