Currently SVGTextLayoutEngine::beginTextPathLayout() takes a pointer to a RenderObject and run-time asserts that its non-null and assumes that it can be safely downcast to a reference to RenderSVGTextPath object. Instead we should have SVGTextLayoutEngine::beginTextPathLayout() take a reference to a RenderSVGTextPath to better catch at compile time and document the preconditions of this function.
Created attachment 250826 [details] Patch
Comment on attachment 250826 [details] Patch r=me
Comment on attachment 250826 [details] Patch Clearing flags on attachment: 250826 Committed r182864: <http://trac.webkit.org/changeset/182864>
All reviewed patches have been landed. Closing bug.