WebKit crashes with SEGFAULT on WebCore::RenderLineBoxList::appendLineBox(WebCore::InlineFlowBox*) () after visiting the site above. Will add a detailed bt later.
Created attachment 51947 [details] backtrace
Reduced the test case: <svg xmlns="http://www.w3.org/2000/svg"> <defs> <foreignObject> <svg> <text>Hello</text> </svg> </foreignObject> </defs> </svg> The text element breaks the SVG. This doesn't happen for <rect..
(In reply to comment #2) > Reduced the test case: > > <svg xmlns="http://www.w3.org/2000/svg"> > <defs> > <foreignObject> > <svg> > <text>Hello</text> > </svg> > </foreignObject> > </defs> > </svg> > > The text element breaks the SVG. This doesn't happen for <rect.. It even breaks without the <defs>-element. <svg xmlns="http://www.w3.org/2000/svg"> <foreignObject> <svg> <text>Hello</text> </svg> </foreignObject> </svg>
That problem is long-outstanding. SVG text demands a SVGRootInlineBox, which is not present in that foreignObject sub-tree IIRC, would need to dive into text again to be check that.
I think this works nowadays? Cheers, Rob.
yes, I couldn't see this crash either.