[Webkit-unassigned] [Bug 115623] New: Crash in Image Decoder due to large gifs

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=115623

           Summary: Crash in Image Decoder  due to large gifs
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: Unspecified
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Images
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: gosun at blackberry.com


It crashes while playing with the browser for a while, with the following back
trace:

#0  0x7a61730c in setRGBA (a=255, b=<optimized out>, g=<optimized out>, r=255,
dest=<optimized out>, this=<optimized out>)
    at
/home/cswei/project/playbook/webkit/Source/WebCore/platform/image-decoders/ImageDecoder.h:197
#1  WebCore::GIFImageDecoder::haveDecodedRow (this=0x7dd6d940,
frameIndex=<optimized out>, rowBuffer=..., width=<optimized out>, rowNumber=0, 
    repeatCount=1, writeTransparentPixels=false)
    at
webkit/Source/WebCore/platform/image-decoders/gif/GIFImageDecoder.cpp:236

It is because the decoded GIF size > 5M.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.