[Webkit-unassigned] [Bug 89113] [Texmap] SIGSEV in WebCore::TextureMapperGL::drawTexture

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=89113


Huang Dongsung <luxtella at company100.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |luxtella at company100.net




--- Comment #3 from Huang Dongsung <luxtella at company100.net>  2012-06-15 21:25:04 PST ---
Tile's texture is not created if dirty rect is empty in following code.

void TextureMapperTile::updateContents(TextureMapper* textureMapper, Image* image, const IntRect& )
{
    IntRect targetRect = enclosingIntRect(m_rect);
    targetRect.intersect(dirtyRect);
    if (targetRect.isEmpty())
        return;
    IntPoint sourceOffset = targetRect.location();

    // Normalize sourceRect to the buffer's coordinates.
    sourceOffset.move(-dirtyRect.x(), -dirtyRect.y());

    // Normalize targetRect to the texture's coordinates.
    targetRect.move(-m_rect.x(), -m_rect.y());
    if (!m_texture) {
        m_texture = textureMapper->createTexture();
        m_texture->reset(targetRect.size(), image->currentFrameHasAlpha() ? BitmapTexture::SupportsAlpha : 0);
    }

    m_texture->updateContents(image, targetRect, sourceOffset);
}

targetRect is often empty.
For example in http://www.satine.org/research/webkit/snowleopard/snowstack.html
m_rect = {m_location = {m_x = 0, m_y = 0}, m_size = {m_width = 187, m_height = 112}}
dirtyRect = {m_location = {m_x = -44, m_y = -184}, m_size = {m_width = 4, m_height = 115}

I have lack of knowledge why render tree notified a dirty rect out of bound size of layer.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.