[webkit-changes] [WebKit/WebKit] 89b563: Crash in SVGGeometryElement::isPointInFill

[Alex Christensen]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 89b5637b58e30a61844041786aa09249b4e95d8f
      https://github.com/WebKit/WebKit/commit/89b5637b58e30a61844041786aa09249b4e95d8f
  Author: Alex Christensen <achristensen at apple.com>
  Date:   2024-01-25 (Thu, 25 Jan 2024)

  Changed paths:
    A LayoutTests/fast/svg/isPointInFill-without-path-expected.txt
    A LayoutTests/fast/svg/isPointInFill-without-path.html
    M Source/WebCore/rendering/svg/RenderSVGRect.cpp
    M Source/WebCore/rendering/svg/legacy/LegacyRenderSVGRect.cpp

  Log Message:
  -----------
  Crash in SVGGeometryElement::isPointInFill
https://bugs.webkit.org/show_bug.cgi?id=265802
rdar://119142303

Reviewed by Ryosuke Niwa.

Check for empty objects.

* LayoutTests/fast/svg/isPointInFill-without-path-expected.txt: Added.
* LayoutTests/fast/svg/isPointInFill-without-path.html: Added.
* Source/WebCore/rendering/svg/legacy/LegacyRenderSVGShape.cpp:
(WebCore::LegacyRenderSVGShape::shapeDependentFillContains const):

Canonical link: https://commits.webkit.org/273494@main