[Webkit-unassigned] [Bug 35631] crash when attempting to render certain SVGs

Wed Apr 21 13:20:16 PDT 2010

https://bugs.webkit.org/show_bug.cgi?id=35631

Dirk Schulze <krit at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |zimmermann at kde.org

--- Comment #4 from Dirk Schulze <krit at webkit.org>  2010-04-21 13:20:16 PST ---
Not only that we don't check for empty tile rects:

    IntSize imageSize(lroundf(patternBoundariesIncludingOverflow.width()),
lroundf(patternBoundariesIncludingOverflow.height()));
    clampImageBufferSizeToViewport(document()->view(), imageSize);

    OwnPtr<ImageBuffer> patternImage = ImageBuffer::create(imageSize);

it also looks like we have a parsing bug:

height=" 270"

We don't ignore leading zeros.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.