Summary: | Reproducible assertion failure running svg/custom/acid3-test-77.html multiple times under guard malloc | ||||||
---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Mark Rowe (bdash) <mrowe> | ||||
Component: | SVG | Assignee: | mitz | ||||
Status: | RESOLVED FIXED | ||||||
Severity: | Normal | CC: | hyatt, mjs, mrowe, zimmermann | ||||
Priority: | P2 | Keywords: | InRadar, NeedsReduction | ||||
Version: | 528+ (Nightly build) | ||||||
Hardware: | Mac | ||||||
OS: | OS X 10.5 | ||||||
Attachments: |
|
Description
Mark Rowe (bdash)
2008-09-19 17:24:49 PDT
Assertion failure is in SVGFont-related code, which looks to have been written by Nikolas, but touched recently by Dave, Maciej and Dan. In particular <http://trac.webkit.org/changeset/31836> touched SVGTextRunWalker::walk, which looks to be where things start going obviously wrong. Good catch. *** This bug has been marked as a duplicate of 18830 *** Looks like the root cause in this case is different from that of bug 18830 after all, and this one is easy to fix. Created attachment 23608 [details]
Fix an off-by-one error
Comment on attachment 23608 [details]
Fix an off-by-one error
Seems this should be pulled out into a nicely named local variable, possibly with a comment explaining why it does not include the first char (or maybe that's obvious from the code).
int remainingCharsInRun = end - it;
or similar. I would like to see a local variable used when you land, but I don't need to see the patch again.
Fixed in <http://trac.webkit.org/changeset/36723>. |