Bug 78978 - SVG assert in SkGeometry::SkChopCubicAt
Summary: SVG assert in SkGeometry::SkChopCubicAt
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: SVG (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-02-18 16:10 PST by Philip Rogers
Modified: 2012-02-29 13:42 PST (History)
2 users (show)

See Also:

Attachments
Test case (157 bytes, image/svg+xml)
2012-02-18 16:10 PST, Philip Rogers 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Philip Rogers 2012-02-18 16:10:32 PST 
Created attachment 127718 [details]
Test case

The following will hit an assert in SkChopCubicAt:
<svg xmlns="http://www.w3.org/2000/svg" width="100" height="100">
<path stroke="#202020" d="M0,0 C0,0 1,1 2190,5130 C2190,5070 2220,5010 2205,4980" />
</svg>

Assert details and backtrace:
[1878:1878:17647143826:FATAL:SkGeometry.cpp(625)] ../../third_party/skia/src/core/SkGeometry.cpp:625: failed assertion "tValues[i] < tValues[i+1]"
Backtrace:
	base::debug::StackTrace::StackTrace() [0x15af9c6]
	logging::LogMessage::~LogMessage() [0x15daabc]
	SkDebugf_FileLine() [0x2e817bf]
	SkChopCubicAt() [0x2ec5137]
	SkChopCubicAtMaxCurvature() [0x2ec5f82]
	SkPathStroker::cubicTo() [0x2e1c3a9]
	SkStroke::strokePath() [0x2e1cb96]
	SkPaint::getFillPath() [0x2de793c]
	WebCore::Path::strokeBoundingRect() [0x318dc2e]
	WebCore::RenderSVGShape::inflateWithStrokeAndMarkerBounds() [0x22a1967]
	WebCore::RenderSVGShape::updateCachedBoundaries() [0x22a1816]
	WebCore::RenderSVGShape::layout() [0x22a0482]
        [ ... snip ... ]
Comment 1 Philip Rogers 2012-02-29 13:42:07 PST 
This has been fixed upstream by reed@google.com. Thank you!