[Webkit-unassigned] [Bug 20567] Fix GeneratedImage usage to respect Image's refcounting

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=20567





------- Comment #4 from eric at webkit.org  2008-08-29 05:55 PDT -------
For example, if somehow this image could be used as a tile to a Pattern, it's
possible that this could be made to crash on ToT.  I'm not really sure how to
use GeneratedImages, but if one can get an HTMLImageElement to use one so that
a CanvasPattern can end up creating a Pattern using a GeneratedImage, then the
following code should crash webkit:

var canvas = document.getElementById("canvas");
var img = document.getElementById("imgUsingGeneratedImage");
var ctx = canvas.getContext("2d");
var pattern = ctx.createPattern(image);
img.parentNode.removeChild(img);
ctx.fillStyle = pattern;
ctx.fillRect(0, 0, 100, 100);


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.