tree 5ceb1ad74c9f0c3f596f5e16b75f9cf3523b4338
parent e2a30dde95270677d4910d31213d8bb41c192bf9
author Philip Rogers <pdr@chromium.org> 1559855927 -0700
committer Blink WPT Bot <blink-w3c-test-autoroller@chromium.org> 1559856579 -0400

Do not collect GraphicsLayers under svg defs

The <defs> SVG element creates a hidden subtree that is never directly
rendered or hit test. This subtree has its property tree state rooted at
the root property tree state, and we will crash trying to render content
with this property tree state.

This patch stops collecting GraphicsLayers under hidden subtrees. This
mirrors code added in https://crrev.com/544756 to not paint
GraphicsLayers under hidden subtrees. It is not simple to prevent
GraphicsLayers for PaintLayers in hidden subtrees because we do
not determine the |IsUnderSVGHiddenContainer| bit until PrePaint, which
is after the compositing lifecycle step.

Bug: 969311
Change-Id: I67f81e70dfd046c3fa30f687936e9bbfcf14af7e
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1648279
Reviewed-by: Chris Harrelson <chrishtr@chromium.org>
Commit-Queue: Philip Rogers <pdr@chromium.org>
Cr-Commit-Position: refs/heads/master@{#666864}