Bug 47682 – SVG: Assert in invalidateResourcesOfChildren() (SVGRenderSupport.cpp)

• Status: RESOLVED
• Resolution: FIXED
• Component: SVG

[Andreas Kling]

Created attachment 70768 [details]
SVG document that triggers the assert

I came across this assertion on Microsoft's "Browser Hunt" demo game at http://ie.microsoft.com/testdrive/Performance/BrowserHunt/Default.xhtml

Attaching a reduction.

[Nikolas Zimmermann]

Sure?

I see:

ASSERTION FAILED: !fixed
(/Users/nikolaszimmermann/Coding/WebKit/WebCore/rendering/RenderSVGRoot.cpp:312 virtual void WebCore::RenderSVGRoot::mapLocalToContainer(WebCore::RenderBoxModelObject*, bool, bool, WebCore::TransformState&) const)

[Andreas Kling]

(In reply to comment #1)
> ASSERTION FAILED: !fixed
> (/Users/nikolaszimmermann/Coding/WebKit/WebCore/rendering/RenderSVGRoot.cpp:312 virtual void WebCore::RenderSVGRoot::mapLocalToContainer(WebCore::RenderBoxModelObject*, bool, bool, WebCore::TransformState&) const)

Yes, that one hits first but was already reported in bug 31278 (not for this particular page though.)

This one came up while I was stripping the page to debug a clipping problem.

[Rob Buis]

*** Bug 49866 has been marked as a duplicate of this bug. ***

[Rob Buis]

A more reduced testcase that hits the assert:

<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<rect id="rect" x="0" y="100" width="50" height="50" fill="white" mask="url(#mask4)"/> 
<defs>
     <mask id="mask4">
    </mask>
</defs>
</svg>

[Philip Rogers]

This has been fixed.