nephele/haikuwebkit - haikuwebkit - GryphNode

nephele

/

haikuwebkit

2 lines

27 B

Plaintext

Raw Permalink Normal View History

Crash in WebCore::RenderSVGModelObject::checkIntersection https://bugs.webkit.org/show_bug.cgi?id=89059 Reviewed by Rob Buis. Source/WebCore: getElementCTM updates layout causing the renderer to be destroyed. We get the new renderer by storing the element pointer and later accessing it using the element pointer. Test: svg/custom/intersection-list-crash.svg * rendering/svg/RenderSVGModelObject.cpp: (WebCore::RenderSVGModelObject::checkIntersection): (WebCore::RenderSVGModelObject::checkEnclosure): LayoutTests: * svg/custom/intersection-list-crash-expected.txt: Added. * svg/custom/intersection-list-crash.svg: Added. Canonical link: https://commits.webkit.org/107338@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@120731 268f45cc-cd09-0410-ab3c-d52691b4dbfc

2012-06-19 17:43:22 +00:00

PASS. WebKit didn't crash.