[Webkit-unassigned] [Bug 20457] Canvas: createPattern crashes WebKit with a 1D pattern

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=20457


ap at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|New Bugs                    |HTML DOM
           Priority|P2                          |P1




------- Comment #1 from ap at webkit.org  2008-08-20 06:33 PDT -------
Reproducible crash -> P1.

Thread 0 Crashed:
0   com.apple.WebCore                   0x0322d99d
WTF::RefPtr<WebCore::Image>::operator!() const + 9 (RefPtr.h:63)
1   com.apple.WebCore                   0x034aaa81
WebCore::ImageBuffer::image() const + 27 (ImageBufferCG.cpp:99)
2   com.apple.WebCore                   0x032340f7
WebCore::CanvasRenderingContext2D::createPattern(WebCore::HTMLCanvasElement*,
WebCore::String const&, int&) + 135 (CanvasRenderingContext2D.cpp:1154)
3   com.apple.WebCore                   0x034f431d
WebCore::JSCanvasRenderingContext2D::createPattern(KJS::ExecState*,
KJS::ArgList const&) + 545 (JSCanvasRenderingContext2DCustom.cpp:328)
4   com.apple.WebCore                   0x034eff04
WebCore::jsCanvasRenderingContext2DPrototypeFunctionCreatePattern(KJS::ExecState*,
KJS::JSObject*, KJS::JSValue*, KJS::ArgList const&) + 96
(JSCanvasRenderingContext2D.cpp:780)


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.