[Webkit-unassigned] [Bug 201755] [Cairo] Image::drawTiled → Cairo::drawSurface → cairo_paint_with_alpha → segfault happens in pixman

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=201755

--- Comment #3 from Fujii Hironori <Hironori.Fujii at sony.com> ---
I think there are two problems.

1.
In Image::drawTiled, visibleSrcRect can be larger than the image size because it is calculated by using division twice, as
 FloatSize scale(scaledTileSize / intrinsicTileSize);
 visibleSrcRect.setWidth(destRect.width() / scale.width());
This can be converted into one division and one multiplication:
 FloatSize scale(intrinsicTileSize / scaledTileSize);
 visibleSrcRect.setWidth(destRect.width() * scale.width());

2.
Cairo::drawSurface is creating a larger subsurface than the original surface.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190913/02565628/attachment.html>