Bug 837450 - Leak with getTransformToElement. r=jwatt, a=akeybl
authorRobert Longson <longsonr@gmail.com>
Mon, 04 Feb 2013 20:50:24 -0500
changeset 127413 89432f14d306a42e192ab3e5f3accbbd5274bf8a
parent 127412 2924132cf5eca4a85000c113d9c35f83128dd5e7
child 127414 ed6e1f9f2243e7092682cd6dc2556b851d5a26ba
push id2151
push userlsblakk@mozilla.com
push dateTue, 19 Feb 2013 18:06:57 +0000
treeherdermozilla-beta@4952e88741ec [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersjwatt, akeybl
bugs837450
milestone20.0a2
Bug 837450 - Leak with getTransformToElement. r=jwatt, a=akeybl
content/svg/content/src/SVGLocatableElement.cpp
content/svg/content/src/crashtests/837450-1.svg
content/svg/content/src/crashtests/crashtests.list
--- a/content/svg/content/src/SVGLocatableElement.cpp
+++ b/content/svg/content/src/SVGLocatableElement.cpp
@@ -158,15 +158,15 @@ SVGLocatableElement::GetTransformToEleme
   target->GetScreenCTM(getter_AddRefs(targetScreenCTM));
   if (!ourScreenCTM || !targetScreenCTM) {
     rv.Throw(NS_ERROR_DOM_INVALID_STATE_ERR);
     return nullptr;
   }
   nsCOMPtr<DOMSVGMatrix> tmp = targetScreenCTM->Inverse(rv);
   if (rv.Failed()) return nullptr;
 
-  nsCOMPtr<DOMSVGMatrix> mat = tmp->Multiply(*ourScreenCTM).get();
+  nsCOMPtr<DOMSVGMatrix> mat = tmp->Multiply(*ourScreenCTM);
   return mat.forget();
 }
 
 } // namespace dom
 } // namespace mozilla
 
new file mode 100644
--- /dev/null
+++ b/content/svg/content/src/crashtests/837450-1.svg
@@ -0,0 +1,10 @@
+<svg xmlns="http://www.w3.org/2000/svg">
+
+<script>
+
+var root = document.documentElement;
+root.getTransformToElement(root);
+
+</script>
+
+</svg>
--- a/content/svg/content/src/crashtests/crashtests.list
+++ b/content/svg/content/src/crashtests/crashtests.list
@@ -56,8 +56,9 @@ load 601251-1.html
 load 601406-1.svg
 load 603145-1.svg
 load 613899-1.svg
 load 613899-2.svg
 load zero-size-image.svg
 load 723441-1.html
 load 751515-1.svg
 load 761507-1.svg
+load 837450-1.svg