Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-10-11 04:15:43 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 541297 - SVG SMIL: Fix abort on sampling re-attached animation node, r=roc

Browse Source 
--HG--
extra : rebase_source : 1f228522d818b31d336558f6a238660c2972b770
This commit is contained in:
Brian Birtles 2010-05-25 09:38:25 +09:00
parent f6a92bb73a
commit f2d7637c45
3 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
content/smil/crashtests/541297-1.svg Normal file
View File

@ -0,0 +1,22 @@
<?xml version="1.0" encoding="UTF-8"?>
<svg xmlns="http://www.w3.org/2000/svg"><svg id="w"><animate/></svg><script type="text/javascript">
<![CDATA[
function boom()
{
anim = document.createElementNS("http://www.w3.org/2000/svg", "animate");
document.documentElement.appendChild(anim);
document.documentElement.removeChild(anim);
setTimeout(t, 0);
function t()
{
document.getElementById("w").appendChild(anim);
}
}
window.addEventListener("load", boom, false);
]]>
</script></svg>
Side by Side

After

Width:  |  Height:  |  Size: 507 B

1
content/smil/crashtests/crashtests.list
View File

@ -7,6 +7,7 @@ load 526875-1.svg
load 526875-2.svg
load 529387-1.xhtml
load 537157-1.svg
load 541297-1.svg
load 547333-1.svg
load 548899-1.svg
load 554141-1.svg

4
content/smil/nsSMILTimedElement.cpp
View File

@ -972,6 +972,10 @@ nsSMILTimedElement::BindToTree(nsIContent* aContextNode)
endSpec->ResolveReferences(aContextNode);
}
// Clear any previous milestone since it might be been processed whilst we
// were not bound to the tree.
mPrevRegisteredMilestone = sMaxMilestone;
RegisterMilestone();
}