Bug 25074

Summary: REGRESSION: ASSERT (and crash) in SVG <use> code playing space invaders.
Product: WebKit Reporter: Eric Seidel (no email) <eric>
Component: SVGAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal Keywords: NeedsReduction
Priority: P1    
Version: 528+ (Nightly build)   
Hardware: Mac   
OS: OS X 10.5   
URL: http://www.croczilla.com/svg/samples/invaders/invaders.svg
Attachments:
Description Flags
stack trace of crash none

Eric Seidel (no email)
Reported 2009-04-07 05:14:15 PDT
ASSERT in SVG <use> code playing space invaders. As far as I know, this is a regression, because last time I tried to play Space Invaders in Safari it worked just fine. I used to use space invaders as a test case all the time working on WebKit's SVG support. :) http://www.croczilla.com/svg/samples/invaders/invaders.svg ASSERTION FAILED: element->parentNode() (/Users/eseidel/Projects/WebKit/WebCore/svg/SVGUseElement.cpp:722 void WebCore::SVGUseElement::expandSymbolElementsInShadowTree(WebCore::Node*)) I've not investigated as to what revision caused this regression. Nor have I attempted to make a reduction. This was brought to my attention via: http://code.google.com/p/chromium/issues/detail?id=6869
Attachments
stack trace of crash (33.42 KB, text/plain)
2009-04-07 05:16 PDT, Eric Seidel (no email) 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Eric Seidel (no email)
Comment 1 2009-04-07 05:16:09 PDT
Created attachment 29308 [details] stack trace of crash
Eric Seidel (no email)
Comment 2 2009-04-07 05:16:55 PDT
*** This bug has been marked as a duplicate of 23586 ***
Note You need to log in before you can comment on or make changes to this bug.