Bug 32712 – WebKit crashes on svg font-face-uri element with empty href

• Status: RESOLVED
• Resolution: DUPLICATE
• Component: SVG

[Chang Shu]

Either DumpRenderTree or any browsers will crash running the following svg page.

<?xml version="1.0"?>
<?xml-stylesheet href="data:text/css,text%7Bfont-family%3AACID3svgfont%7D"?>
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="100" height="100">
        
    <font-face font-family="ACID3svgfont">
        <font-face-src>
            <font-face-uri xlink:href=""/>
        </font-face-src>
    </font-face>
    <text>X</text>
</svg>

[Chang Shu]

Created attachment 45149 [details]
fix patch

I didn't add a layout test for this crash. I feel the layout tests are growing too big if we add test cases for this type of code change. But if the reviewers prefer the other way, I can add it real quick.

[Darin Adler]

(In reply to comment #1)
> I didn't add a layout test for this crash. I feel the layout tests are growing
> too big if we add test cases for this type of code change.

I do not agree. We do want a test for this kind of crash.

[Darin Adler]

Comment on attachment 45149 [details]
fix patch

Please add a test case.

This was filed as bug 32357 and fixed about 10 hours ago.

*** This bug has been marked as a duplicate of bug 32357 ***