Bug 877029 - Add a crashtest for calling nsSVGMarkerFrame::GetCanvasTM() inappropriately. r=longsonr

This commit is contained in:
Cameron McCormack 2013-05-30 17:48:15 +10:00
parent 2cbbdfd717
commit fcf5c02af5
2 changed files with 11 additions and 0 deletions

View File

@ -0,0 +1,10 @@
<!--
Check that we don't crash due to an nsSVGMarkerFrame having a null
mMarkedFrame and incorrectly calling GetCanvasTM() on the nsSVGMarkerFrame.
-->
<svg xmlns="http://www.w3.org/2000/svg">
<marker><text>a</text></marker>
<script>
document.querySelector("text").getComputedTextLength();
</script>
</svg>

After

Width:  |  Height:  |  Size: 323 B

View File

@ -163,3 +163,4 @@ load 849688-1.svg
load 849688-2.svg
load 860378-1.svg
load 868904-1.svg
load 877029-1.svg