[Webkit-unassigned] [Bug 21292] New: enclosingIntRect doesn't handle negative offsets

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=21292

           Summary: enclosingIntRect doesn't handle negative offsets
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Platform
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: brettw at chromium.org


enclosingIntRect in FloatRect.cpp looks like this:

IntRect enclosingIntRect(const FloatRect& rect)
{
    int l = static_cast<int>(rect.x());
    int t = static_cast<int>(rect.y());

l and t will be incorrect (for normal Intel CPU modes as far as I can tell) if
the rectangle has negative coordinates. The static cast will truncated, not
round to negative infinity, and the resulting rectangle will not end up
enclosing the input.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.