SVG's tspan is no member of SVGRenderBase, this can cause crashes on filters. Another problem is, that childs of text elements don't have a boundingBox or repaintRect. So we can't use clipping masking and some other resources on tspan's.
Created attachment 49425 [details] get bounding box for tspan get bounding boxes for tspan and inline texts. We take the bounding boxes of the text root. We also need to take the repaint rect of text root to get the right results in filters. Mainly because of chapter 10.4 in the SVG spec.
Comment on attachment 49425 [details] get bounding box for tspan Great, r=me.
Comment on attachment 49425 [details] get bounding box for tspan Clearing flags on attachment: 49425 Committed r55260: <http://trac.webkit.org/changeset/55260>
All reviewed patches have been landed. Closing bug.