[Webkit-unassigned] [Bug 143903] New: SVGFitToViewBox::viewBoxToViewTransform() has to count for zero physical width and height before calling SVGPreserveAspectRatio::getCTM()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=143903

            Bug ID: 143903
           Summary: SVGFitToViewBox::viewBoxToViewTransform() has to count
                    for zero physical width and height before calling
                    SVGPreserveAspectRatio::getCTM()
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: SVG
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: sabouhallawa at apple.com
                CC: zimmermann at kde.org

Created attachment 251068
  --> https://bugs.webkit.org/attachment.cgi?id=251068&action=review
Test case (will crash on Mac)

If SVGPreserveAspectRatio::getCTM() receives zero width or height, the returned transformation might have a=0, d=0 or e=f=NaN. This makes the transformation is non-invertible. CG path functions assert and might crash, if they encounter such transformation.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150417/1f168a91/attachment.html>