[Webkit-unassigned] [Bug 38684] Incorrect RenderPath object size when large coordinate values encountered

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=38684





--- Comment #3 from Alexey Proskuryakov <ap at webkit.org>  2010-05-07 15:16:18 PST ---
An explanation of why this is wrong from duplicate:

If you modify mask-excessive-malloc.svg so the rect has dimensions in the range
of int, and dump the results render tree, you will find the size of the
RenderPath (line 6) is 800x600, not 0x0. I.e. it clips to the size of the view
port. If you fix the float -> int conversions so that values greater than the
max int 2147483647 are clipped to 2147483647 (which is one reasonable
approach), then the size will be computed as 800x600. The 0x0 size seems to
occur when very large positive floats get erroneously converted to -2147483648,
which gets clipped to 0 for lengths such as height and width.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.