[webkit-reviews] review requested: [Bug 12365] Reproducible crash in WebCore::SVGPreserveAspectRatio::parsePreserveAspectRatio in svg/W3C-SVG-1.1/animate-elem-40-t.svg under guard malloc : [Attachment 12661] patch to fix buffer overrun, including a new test and change log

[bugzilla-request-daemon at macosforge.org]

Darin Adler <darin at apple.com> has asked  for review:
Bug 12365: Reproducible crash in
WebCore::SVGPreserveAspectRatio::parsePreserveAspectRatio in
svg/W3C-SVG-1.1/animate-elem-40-t.svg under guard malloc
http://bugs.webkit.org/show_bug.cgi?id=12365

Attachment 12661: patch to fix buffer overrun, including a new test and change
log
http://bugs.webkit.org/attachment.cgi?id=12661&action=edit