Bug 768351 - "ABORT: Passed bad frame" with mask pointing at data: URL. r=roc.

This commit is contained in:
Jonathan Watt 2012-07-30 20:14:18 +01:00
parent ea82649c0d
commit b6ea746ee7
3 changed files with 5 additions and 1 deletions

View File

@ -305,7 +305,7 @@ nsSVGPaintingProperty::DoUpdate()
if (!mFrame)
return;
if (mFrame->IsFrameOfType(nsIFrame::eSVG)) {
if ((mFrame->GetStateBits() & NS_FRAME_SVG_LAYOUT)) {
nsSVGUtils::InvalidateBounds(mFrame);
} else {
InvalidateAllContinuations(mFrame);

View File

@ -0,0 +1,2 @@
<svg xmlns="http://www.w3.org/2000/svg" style="mask: url('data:text/plain,1#f');" />

After

Width:  |  Height:  |  Size: 86 B

View File

@ -130,3 +130,5 @@ load 740627-1.svg
load 740627-2.svg
load 757704-1.svg
load 757718-1.svg
load 768351.svg