Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(327)

Issue 10802091: Merge 122755 - SVGAnimationElement::currentValuesForValuesAnimation crash (Closed)

Created:
8 years, 5 months ago by f(malita)
Modified:
8 years, 5 months ago
Reviewers:
f(malita)
CC:
chromium-reviews
Base URL:
http://svn.webkit.org/repository/webkit/branches/chromium/1180/
Visibility:
Public.

Description

Merge 122755 - SVGAnimationElement::currentValuesForValuesAnimation crash https://bugs.webkit.org/show_bug.cgi?id=91326 Reviewed by Simon Fraser. SVGSMILElement::progress() assumes that seekToIntervalCorrespondingToTime() always lands inside a defined interval, but one can force arbitrary time offsets using setCurrentTime(). This patch adds logic for handling non-interval time offsets gracefully. Source/WebCore: Test: svg/animations/smil-setcurrenttime-crash.svg * svg/animation/SVGSMILElement.cpp: (WebCore::SVGSMILElement::progress): LayoutTests: * svg/animations/smil-setcurrenttime-crash-expected.txt: Added. * svg/animations/smil-setcurrenttime-crash.svg: Added. TBR=fmalita@chromium.org Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=123508

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+3 lines, --1 lines) Patch
A + LayoutTests/svg/animations/smil-setcurrenttime-crash.svg View 0 chunks +-1 lines, --1 lines 0 comments Download
A + LayoutTests/svg/animations/smil-setcurrenttime-crash-expected.txt View 0 chunks +-1 lines, --1 lines 0 comments Download
M Source/WebCore/svg/animation/SVGSMILElement.cpp View 1 chunk +5 lines, -1 line 0 comments Download

Messages

Total messages: 1 (0 generated)
f(malita)
8 years, 5 months ago (2012-07-24 19:39:42 UTC) #1

          

Powered by Google App Engine
This is Rietveld 408576698