[Webkit-unassigned] [Bug 35631] crash when attempting to render certain SVGs

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Apr 21 13:20:16 PDT 2010


Dirk Schulze <krit at webkit.org> changed:

           What    |Removed                     |Added
                 CC|                            |zimmermann at kde.org

--- Comment #4 from Dirk Schulze <krit at webkit.org>  2010-04-21 13:20:16 PST ---
Not only that we don't check for empty tile rects:

    IntSize imageSize(lroundf(patternBoundariesIncludingOverflow.width()),
    clampImageBufferSizeToViewport(document()->view(), imageSize);

    OwnPtr<ImageBuffer> patternImage = ImageBuffer::create(imageSize);

it also looks like we have a parsing bug:

height=" 270"

We don't ignore leading zeros.

Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the webkit-unassigned mailing list