[webkit-reviews] review requested: [Bug 20400] Infinite recursion crash in WebCore::RenderSVGRoot::absoluteClippedOverflowRect on a <stop> element outside of a gradient block : [Attachment 24545] Fix the crash

[bugzilla-daemon at webkit.org]

Eric Seidel <eric at webkit.org> has asked  for review:
Bug 20400: Infinite recursion crash in
WebCore::RenderSVGRoot::absoluteClippedOverflowRect on a <stop> element outside
of a gradient block
https://bugs.webkit.org/show_bug.cgi?id=20400

Attachment 24545: Fix the crash
https://bugs.webkit.org/attachment.cgi?id=24545&action=edit

------- Additional Comments from Eric Seidel <eric at webkit.org>
 LayoutTests/ChangeLog				|   10 ++++++++++
 LayoutTests/svg/custom/stop-crash-expected.txt |    1 +
 LayoutTests/svg/custom/stop-crash.svg		|    8 ++++++++
 WebCore/ChangeLog				|   13 +++++++++++++
 WebCore/rendering/RenderSVGGradientStop.h	|   10 ++++++++--
 5 files changed, 40 insertions(+), 2 deletions(-)