Branch: refs/heads/webkitglib/2.48
Home: https://github.com/WebKit/WebKit
Commit: 31409e020d4c50ab5a1c4dfa65440cdd67ddcdb8
https://github.com/WebKit/WebKit/commit/31409e020d4c50ab5a1c4dfa65440cdd67ddcdb8
Author: Pratiksha Choudhury <[email protected]>
Date: 2025-07-02 (Wed, 02 Jul 2025)
Changed paths:
A LayoutTests/fast/svg/path-NaN-bounding-box-crash-expected.txt
A LayoutTests/fast/svg/path-NaN-bounding-box-crash.html
M Source/WebCore/rendering/svg/SVGRenderSupport.cpp
M Source/WebCore/rendering/svg/legacy/LegacyRenderSVGShape.cpp
Log Message:
-----------
Cherry-pick 296099@main (d1bf7f2a3884).
https://bugs.webkit.org/show_bug.cgi?id=294273
ASAN_ILL crash in WebCore::LegacyRenderSVGShape::layout
https://bugs.webkit.org/show_bug.cgi?id=294273
rdar://152182457
Reviewed by Said Abou-Hallawa.
Added checks for any invalid geometry Leading to NaN.
* LayoutTests/fast/svg/path-NaN-bounding-box-crash-expected.txt: Added.
* LayoutTests/fast/svg/path-NaN-bounding-box-crash.html: Added.
* Source/WebCore/rendering/svg/SVGRenderSupport.cpp:
(WebCore::SVGRenderSupport::calculateApproximateStrokeBoundingBox):
* Source/WebCore/rendering/svg/legacy/LegacyRenderSVGShape.cpp:
(WebCore::LegacyRenderSVGShape::calculateStrokeBoundingBox const):
Canonical link: https://commits.webkit.org/296099@main
Canonical link: https://commits.webkit.org/290945.263@webkitglib/2.48
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
