RESOLVED FIXED 182185
REGRESSiON (r226492): Crash under Element::absoluteEventBounds() on a SVGPathElement which has not been laid out yet 
https://bugs.webkit.org/show_bug.cgi?id=182185
Summary REGRESSiON (r226492): Crash under Element::absoluteEventBounds() on a SVGPath...
Simon Fraser (smfr)
Reported 2018-01-26 14:03:49 PST
REGRESSiON (r226492): Crash under Element::absoluteEventBounds() on a SVGPathElement which has not been laid out yet
Attachments
Patch (1.80 KB, patch)
2018-01-26 14:06 PST, Simon Fraser (smfr) 		no flags
DetailsFormatted DiffDiff
Patch (1.83 KB, patch)
2018-01-26 14:07 PST, Simon Fraser (smfr) 		zalan: review+
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Simon Fraser (smfr)
Comment 1 2018-01-26 14:06:14 PST
Created attachment 332414 [details] Patch
Simon Fraser (smfr)
Comment 2 2018-01-26 14:06:46 PST
rdar://problem/36836262
Simon Fraser (smfr)
Comment 3 2018-01-26 14:07:28 PST
Created attachment 332415 [details] Patch
zalan
Comment 4 2018-01-26 14:13:04 PST
Comment on attachment 332415 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=332415&action=review > Source/WebCore/svg/SVGPathElement.cpp:424 > + if (!renderer || !renderer->hasPath()) > + return { }; Please add a FIXME here that it's an invalid state.
Simon Fraser (smfr)
Comment 5 2018-01-26 14:37:49 PST Comment hidden (obsolete)
Simon Fraser (smfr)
Comment 6 2018-01-26 14:38:40 PST
https://trac.webkit.org/r227697
Note You need to log in before you can comment on or make changes to this bug.