Bug 768351 - "ABORT: Passed bad frame" with mask pointing at data: URL. r=roc.

--HG--
extra : rebase_source : ec2c0dd2b216a818cbe4c9526e198afb18f08c13
This commit is contained in:
Jonathan Watt 2012-07-30 20:14:18 +01:00
parent d995281e36
commit 26dfd38f11
3 changed files with 5 additions and 1 deletions

View File

@ -305,7 +305,7 @@ nsSVGPaintingProperty::DoUpdate()
if (!mFrame)
return;
if (mFrame->IsFrameOfType(nsIFrame::eSVG)) {
if (mFrame->GetStateBits() & NS_FRAME_SVG_LAYOUT) {
nsSVGUtils::InvalidateBounds(mFrame);
} else {
InvalidateAllContinuations(mFrame);

View File

@ -0,0 +1,2 @@
<svg xmlns="http://www.w3.org/2000/svg" style="mask: url('data:text/plain,1#f');" />

After

Width:  |  Height:  |  Size: 86 B

View File

@ -130,3 +130,5 @@ load 740627-1.svg
load 740627-2.svg
load 757704-1.svg
load 757718-1.svg
load 768351.svg