[webkit-changes] [WebKit/WebKit] 2c3e40: Avoid integer overflow in LayoutUnit's unary minus...

[Ahmad Saleem]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 2c3e402a8ea0e2b5f304e069b3ce8fd72c2fad44
      https://github.com/WebKit/WebKit/commit/2c3e402a8ea0e2b5f304e069b3ce8fd72c2fad44
  Author: Ahmad Saleem <ahmad.saleem792+github at gmail.com>
  Date:   2023-12-05 (Tue, 05 Dec 2023)

  Changed paths:
    M Source/WebCore/platform/LayoutUnit.h
    M Tools/TestWebKitAPI/Tests/WebCore/LayoutUnitTests.cpp

  Log Message:
  -----------
  Avoid integer overflow in LayoutUnit's unary minus operator

https://bugs.webkit.org/show_bug.cgi?id=265825

Reviewed by Alan Baradlay.

Merge: https://chromium.googlesource.com/chromium/src.git/+/ef6bea224f0266018c3b4fc63262769020b9a4c2

This PR fixes potential 'integer overflow' leading to crashes (in debug or fuzzer)
environments.

* Source/WebCore/platform/LayoutUnit.h:
(operator-):
* Tools/TestWebKitAPI/Tests/WebCore/LayoutUnitTests.cpp: Add Test Case 'LayoutUnitUnaryMinus'

Canonical link: https://commits.webkit.org/271550@main