This website requires JavaScript.
Explore
Help
Sign In
nephele
/
haikuwebkit
Watch
1
Star
0
Fork
You've already forked haikuwebkit
0
Code
Issues
Releases
Activity
haiku
haikuwebkit
/
LayoutTests
/
svg
/
animations
/
smil-element-target-crash-m...
2 lines
5 B
Plaintext
Raw
Permalink
Normal View
History
Unescape
Escape
Crash in WebCore::SVGDocumentExtensions::removeAnimationElementFromTarget https://bugs.webkit.org/show_bug.cgi?id=79831 Patch by Stephen Chenney <schenney@chromium.org> on 2012-03-01 Reviewed by Eric Seidel. Out-of-order operations in the SVGSMILElement::removedFromDocument method caused its target to be removed and then re-added due to a later call. This led to the target being set on the animation while the target element itself was unaware. At deletion time, this caused a crash (or assert in debug builds). Thanks to Abhishek Arya for help with the layout test. Source/WebCore: Test: svg/animations/smil-element-target-crash-main.html * svg/animation/SVGSMILElement.cpp: (WebCore::SVGSMILElement::removedFromDocument): LayoutTests: * svg/animations/resources/smil-element-target-crash.svg: Added. * svg/animations/smil-element-target-crash-main-expected.txt: Added. * svg/animations/smil-element-target-crash-main.html: Added. Canonical link: https://commits.webkit.org/97094@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@109345 268f45cc-cd09-0410-ab3c-d52691b4dbfc
2012-03-01 15:04:36 +00:00
PASS