Bug 547333 followup: Remove FlushAnimations() call from another internal getter (nsSVGElement::GetAnimatedLengthValues), to prevent SMIL samples during frame construction. r=jwatt

content/smil/crashtests/483584-1.svg

@@ -0,0 +1,8 @@
+<svg xmlns="http://www.w3.org/2000/svg"
+     xmlns:xlink="http://www.w3.org/1999/xlink">
+  <g id="s">
+    <circle/>
+    <animateTransform attributeName="transform"/>
+  </g>
+  <use xlink:href="#s"/>
+</svg>

content/smil/crashtests/crashtests.list

@@ -1,3 +1,5 @@
+load 483584-1.svg
+load 483584-2.svg
 load 523188-1.svg
 load 525099-1.svg
 load 526536-1.svg

content/svg/content/src/nsSVGElement.cpp

@@ -1235,10 +1235,6 @@ nsSVGElement::DidAnimateLength(PRUint8 aAttrEnum)
 void
 nsSVGElement::GetAnimatedLengthValues(float *aFirst, ...)
 {
-#ifdef MOZ_SMIL
-  FlushAnimations();
-#endif
-
   LengthAttributesInfo info = GetLengthInfo();
 
   NS_ASSERTION(info.mLengthCount > 0,