[Webkit-unassigned] [Bug 65637] Crash beneath PlatformCALayerWinInternal::updateTiles when zooming on Google Maps

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Aug 3 13:07:29 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=65637





--- Comment #2 from Adam Roben (:aroben) <aroben at apple.com>  2011-08-03 13:07:29 PST ---
PlatformCALayer::setBounds is being passed a rect with size 33554432x33554432. This comes from GraphicsLayerCA::m_size.

It looks like both updateTiles and constrainedSize have the same vulnerability to overflow. The overflow is breaking our calculations that try to limit the number of tiles a layer can have.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list