Bug 49065 – [GTK] svg/animations/animate-path-nested-transforms.html crashes

• Component: SVG
• Status: RESOLVED DUPLICATE

[Philippe Normand]

http://webkit-bots.igalia.com/amd64/svn_71355.core-when_1288905576-_-who_DumpRenderTree-_-why_11.trace.html

Program terminated with signal 11, Segmentation fault.
#0  0x00002b023651de09 in WebCore::SVGSMILElement::progress (this=0x54685e0, elapsed=..., resultElement=0x54685e0) at ../../WebCore/svg/animation/SVGSMILElement.cpp:860
860	        ASSERT(m_activeState != Active);

thread 1 (Thread 767):
#0  0x00002b023651de09 in WebCore::SVGSMILElement::progress (this=0x54685e0, elapsed=..., resultElement=0x54685e0) at ../../WebCore/svg/animation/SVGSMILElement.cpp:860
#1  0x00002b0236510f08 in WebCore::SMILTimeContainer::updateAnimations (this=0x546b900, elapsed=...) at ../../WebCore/svg/animation/SMILTimeContainer.cpp:285
#2  0x00002b0236510a4e in WebCore::SMILTimeContainer::sampleAnimationAtTime (this=0x546b900, elementId=..., newTime=0.01) at ../../WebCore/svg/animation/SMILTimeContainer.cpp:222
#3  0x00002b0236542191 in WebCore::SVGDocumentExtensions::sampleAnimationAtTime (this=0x546a040, elementId=..., element=0x54685e0, time=0.01) at ../../WebCore/svg/SVGDocumentExtensions.cpp:129
#4  0x00002b02366a25c4 in webkit_web_frame_pause_svg_animation (frame=0x1b40760, animationId=0x52ebd30 "animation", time=0.01, elementId=0x53c4730 "rect") at ../../WebKit/gtk/webkit/webkitwebframe.cpp:1027
#5  0x000000000041f060 in LayoutTestController::sampleSVGAnimationForElementAtTime (this=0x50ba460, animationId=0x5217090, time=0.01, elementId=0x54157d0) at ../../WebKitTools/DumpRenderTree/gtk/LayoutTestControllerGtk.cpp:645
#6  0x000000000041122d in sampleSVGAnimationForElementAtTimeCallback (context=0x2b02cbe420f8, function=0x2b02cc280640, thisObject=0x2b02cc288100, argumentCount=3, arguments=0x7fffee58b188, exception=0x7fffee58b228) at ../../WebKitTools/DumpRenderTree/LayoutTestController.cpp:1581
#7  0x00002b0236a13658 in JSC::JSCallbackFunction::call (exec=0x2b02cbe420f8) at ../../JavaScriptCore/API/JSCallbackFunction.cpp:66
#8  0x00002b0236ab6abb in JSC::cti_op_call_NotJSFunction (args=0x7fffee58b370) at ../../JavaScriptCore/jit/JITStubs.cpp:2195
#9  0x00002b0236ab1c33 in JSC::JITThunks::tryCacheGetByID (callFrame=0x2b02cbe42080, codeBlock=0x1ee58b370, returnAddress=..., baseValue=..., propertyName=..., slot=..., stubInfo=0x1bfd190) at ../../JavaScriptCore/jit/JITStubs.cpp:975
#10 0x00002b0236a853f7 in JSC::JITCode::execute (this=0x5437f18, registerFile=0x1bffe28, callFrame=0x2b02cbe42038, globalData=0x1bfd190) at ../../JavaScriptCore/jit/JITCode.h:77
#11 0x00002b0236a822de in JSC::Interpreter::executeCall (this=0x1bffe10, callFrame=0x3c06ec8, function=0x2b02cc28a240, callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at ../../JavaScriptCore/interpreter/Interpreter.cpp:830
#12 0x00002b0236b10e2f in JSC::call (exec=0x3c06ec8, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at ../../JavaScriptCore/runtime/CallData.cpp:38
#13 0x00002b0235c8a59d in WebCore::JSMainThreadExecState::call (exec=0x3c06ec8, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at ../../WebCore/bindings/js/JSMainThreadExecState.h:48
#14 0x00002b0235cf2a6b in WebCore::ScheduledAction::executeFunctionInContext (this=0x53b9e00, globalObject=0x2b02cc285200, thisValue=..., context=0x543b1b8) at ../../WebCore/bindings/js/ScheduledAction.cpp:106
#15 0x00002b0235cf2c56 in WebCore::ScheduledAction::execute (this=0x53b9e00, document=0x543b150) at ../../WebCore/bindings/js/ScheduledAction.cpp:128
#16 0x00002b0235cf2832 in WebCore::ScheduledAction::execute (this=0x53b9e00, context=0x543b1b8) at ../../WebCore/bindings/js/ScheduledAction.cpp:76
#17 0x00002b02361ec193 in WebCore::DOMTimer::fired (this=0x53b1580) at ../../WebCore/page/DOMTimer.cpp:131
#18 0x00002b02362f9c40 in WebCore::ThreadTimers::sharedTimerFiredInternal (this=0x1bb2850) at ../../WebCore/platform/ThreadTimers.cpp:112
#19 0x00002b02362f9b73 in WebCore::ThreadTimers::sharedTimerFired () at ../../WebCore/platform/ThreadTimers.cpp:90
#20 0x00002b023664e556 in WebCore::timeout_cb () at ../../WebCore/platform/gtk/SharedTimerGtk.cpp:49
#21 0x00002b023bef1e9b in g_timeout_dispatch (source=0x542d230, callback=0, user_data=0x2b023d3d3e00) at /tmp/buildd/glib2.0-2.24.1/glib/gmain.c:3396
#22 0x00002b023bef16c2 in g_main_dispatch (context=0xffff000000000002) at /tmp/buildd/glib2.0-2.24.1/glib/gmain.c:1960
#23 IA__g_main_context_dispatch (context=0xffff000000000002) at /tmp/buildd/glib2.0-2.24.1/glib/gmain.c:2513
#24 0x00002b023bef5538 in g_main_context_iterate (context=0x1a9d1e0, block=<value optimized out>, dispatch=<value optimized out>, self=<value optimized out>) at /tmp/buildd/glib2.0-2.24.1/glib/gmain.c:2591
#25 0x00002b023bef5a45 in IA__g_main_loop_run (loop=0x53b9f40) at /tmp/buildd/glib2.0-2.24.1/glib/gmain.c:2799
#26 0x00002b0239efb657 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#27 0x0000000000419d22 in runTest (testPathOrURL=...) at ../../WebKitTools/DumpRenderTree/gtk/DumpRenderTree.cpp:660
#28 0x0000000000419414 in runTestingServerLoop () at ../../WebKitTools/DumpRenderTree/gtk/DumpRenderTree.cpp:470
#29 0x000000000041b2fd in main (argc=2, argv=0x7fffee58c598) at ../../WebKitTools/DumpRenderTree/gtk/DumpRenderTree.cpp:1104

[Philippe Normand]

Skipped as of http://trac.webkit.org/changeset/71407

[Shane Stephens]

This bug is a duplicate of https://bugs.webkit.org/show_bug.cgi?id=49045.

[Martin Robinson]

*** This bug has been marked as a duplicate of bug 49045 ***