[Webkit-unassigned] [Bug 65637] Crash beneath PlatformCALayerWinInternal::updateTiles when zooming on Google Maps
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Aug 3 13:07:29 PDT 2011
https://bugs.webkit.org/show_bug.cgi?id=65637
--- Comment #2 from Adam Roben (:aroben) <aroben at apple.com> 2011-08-03 13:07:29 PST ---
PlatformCALayer::setBounds is being passed a rect with size 33554432x33554432. This comes from GraphicsLayerCA::m_size.
It looks like both updateTiles and constrainedSize have the same vulnerability to overflow. The overflow is breaking our calculations that try to limit the number of tiles a layer can have.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list