Bug 377892 - Simple clipPath asserting and crashing. r+sr=tor

layout/svg/base/src/nsSVGClipPathFrame.cpp

@@ -97,6 +97,7 @@ nsSVGClipPathFrame::InitSVG()
     return rv;
 
   mClipParentMatrix = NULL;
+  mInUse = PR_FALSE;
 
   return NS_OK;
 }

layout/svg/base/src/nsSVGClipPathFrame.h

@@ -87,7 +87,8 @@ class nsSVGClipPathFrame : public nsSVGClipPathFrameBase
   class AutoClipPathReferencer
   {
   public:
-    AutoClipPathReferencer(nsSVGClipPathFrame *aFrame) {
+    AutoClipPathReferencer(nsSVGClipPathFrame *aFrame)
+       : mFrame(aFrame) {
       NS_ASSERTION(mFrame->mInUse == PR_FALSE, "reference loop!");
       mFrame->mInUse = PR_TRUE;
     }