Branch: refs/heads/webkitglib/2.38
Home: https://github.com/WebKit/WebKit
Commit: bfe58342f50ce4a08df929cc25ecfe93d2756e1e
https://github.com/WebKit/WebKit/commit/bfe58342f50ce4a08df929cc25ecfe93d2756e1e
Author: Ahmad Saleem <[email protected]>
Date: 2023-02-11 (Sat, 11 Feb 2023)
Changed paths:
A LayoutTests/css3/filters/effect-drop-shadow-clip-abspos-expected.html
A LayoutTests/css3/filters/effect-drop-shadow-clip-abspos.html
M Source/WebCore/rendering/RenderLayer.cpp
Log Message:
-----------
Cherry-pick 256825@main (3894c75f5f9f).
https://bugs.webkit.org/show_bug.cgi?id=247961
Fix for pixel-moving CSS filters with clipping
Fix for pixel-moving CSS filters with clipping
https://bugs.webkit.org/show_bug.cgi?id=247961
Reviewed by Simon Fraser.
Merge - https://src.chromium.org/viewvc/blink?view=revision&revision=180361
When using a "pixel-moving" filter (ie., drop-shadow or blur), we
disable the normal clip operation, since we want to want to render
the full results of the element pre-clip for filtering. Clipping is
then applied just before drawing the filtered result.
However, we shouldn't disable *all* clipping recursively, since we
want children which clip themselves to still continue to be clipped.
The fix is to pass the original (unmodified) paintingInfo to
paintChildren().
NOTE - The test case has been slightly modified to apply blur to reflect
the issue.
* Source/WebCore/rendering/RenderLayer.cpp:
(RenderLayer::paintLayerContents): Update to take "original" paintingInfo
* LayoutTests/css3/filters/effect-drop-shadow-clip-abpos.html: Added Test
Case
* LayoutTests/css3/filters/effect-drop-shadow-clip-abpos-expected.html:
Added Test Case Expectations
Canonical link: https://commits.webkit.org/256825@main
Commit: 891ee0a2dd217ffc64f2d721f3880304567d6ace
https://github.com/WebKit/WebKit/commit/891ee0a2dd217ffc64f2d721f3880304567d6ace
Author: Alex Christensen <[email protected]>
Date: 2023-02-11 (Sat, 11 Feb 2023)
Changed paths:
M Source/WebKit/Platform/IPC/ArgumentCoders.h
Log Message:
-----------
Cherry-pick 259917@main (23f2542385a7).
https://bugs.webkit.org/show_bug.cgi?id=251804
Limit untrusted allocations when decoding Vectors to 1MB
https://bugs.webkit.org/show_bug.cgi?id=251804
Reviewed by Kimmo Kinnunen.
257725@main introduced a performance improvement where we only allocate
exactly as much
memory as we need once when decoding a Vector. This is wonderful, but it
introduced
allocation based on size from an untrusted source, making it so any message
that sends
a Vector can be used to send a very large size_t and crash the other
process. In this
PR I get the best of both worlds: if the total allocation size is less that
1MB then we
do the fast and efficient thing, but if it is more than 1MB we do the safe
thing.
* Source/WebKit/Platform/IPC/ArgumentCoders.h:
Canonical link: https://commits.webkit.org/259917@main
Commit: 7f650fb65dfa4ac129248602bec767f3b0474fe5
https://github.com/WebKit/WebKit/commit/7f650fb65dfa4ac129248602bec767f3b0474fe5
Author: Philippe Normand <[email protected]>
Date: 2023-02-11 (Sat, 11 Feb 2023)
Changed paths:
M Source/WebCore/Modules/mediastream/gstreamer/GStreamerMediaEndpoint.cpp
Log Message:
-----------
Cherry-pick 259953@main (9512db61a188).
https://bugs.webkit.org/show_bug.cgi?id=251791
REGRESSION(258658@main): [GStreamer][WebRTC] Broke webrtc/multi-video.html
https://bugs.webkit.org/show_bug.cgi?id=251791
Reviewed by Xabier Rodriguez-Calvar.
The msid fallback assignment mechanism was not working as expected. In
cases where the pad msid
property was not set, the resulting mediaStreamId was the pad name, no msid
lookup was performed in
the SDP.
* Source/WebCore/Modules/mediastream/gstreamer/GStreamerMediaEndpoint.cpp:
(WebCore::GStreamerMediaEndpoint::requestPad):
(WebCore::GStreamerMediaEndpoint::addRemoteStream):
Canonical link: https://commits.webkit.org/259953@main
Commit: 4c25e39c993c1a46405301167dc2f3a6cabc2809
https://github.com/WebKit/WebKit/commit/4c25e39c993c1a46405301167dc2f3a6cabc2809
Author: Adrian Perez de Castro <[email protected]>
Date: 2023-02-12 (Sun, 12 Feb 2023)
Changed paths:
M Source/WebCore/html/HTMLInputElement.cpp
Log Message:
-----------
Unreviewed non-unified build fix
* Source/WebCore/html/HTMLInputElement.cpp: Add missing EventLoop.h
header inclusion.
Compare: https://github.com/WebKit/WebKit/compare/5855b42d8d3d...4c25e39c993c
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
