[Webkit-unassigned] [Bug 262046] New: Treat huge 'repeatCount' values as invalid

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=262046

            Bug ID: 262046
           Summary: Treat huge 'repeatCount' values as invalid
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
               URL: http://wpt.live/svg/animations/repeatcount-numeric-lim
                    it.tentative.svg
                OS: Unspecified
            Status: NEW
          Keywords: BrowserCompat, WPTImpact
          Severity: Normal
          Priority: P2
         Component: SVG
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ahmad.saleem792 at gmail.com
                CC: graouts at webkit.org, sabouhallawa at apple.com,
                    simon.fraser at apple.com, zimmermann at kde.org

Hi Team,

Came across another failing WPT test and also Blink merge:

Blink Commit: https://chromium.googlesource.com/chromium/src/+/8fcb33ec493a697c5973fed3fa3afaf77bf626db

WebKit Source Code: https://searchfox.org/wubkat/source/Source/WebCore/svg/animation/SVGSMILElement.cpp#722

^ Just adding '&& std::isfinite(result)'.

Test Case: In URL (Timeout in Safari / WebKit ToT)

Local build confirmed that it make us pass the test case.

Just raising so can fix it.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230925/6f683495/attachment.htm>