https://bugs.webkit.org/show_bug.cgi?id=37370
authordarin@apple.com <darin@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 9 Apr 2010 22:58:37 +0000 (22:58 +0000)
committerdarin@apple.com <darin@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 9 Apr 2010 22:58:37 +0000 (22:58 +0000)
commit6e827a452ba24a6b5b1715de1694cd50c9dba09c
treed6ea279b9cbf8462ec8603cc69e11226be67a19b
parent26b23ccc8fb31c609b81fdeba6871ba5a9c1afdb
https://bugs.webkit.org/show_bug.cgi?id=37370
Division by 0 in RenderBoxModelObject::calculateFillTileSize

Reviewed by Maciej Stachowiak.

WebCore:

Test: fast/backgrounds/background-fill-zero-area-crash.html

* rendering/RenderBoxModelObject.cpp:
(WebCore::RenderBoxModelObject::calculateFillTileSize): Added checks for
zero before doing division. These come up when the area to fill is zero.

LayoutTests:

* fast/backgrounds/background-fill-zero-area-crash-expected.txt: Added.
* fast/backgrounds/background-fill-zero-area-crash.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@57377 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/fast/backgrounds/background-fill-zero-area-crash-expected.txt [new file with mode: 0644]
LayoutTests/fast/backgrounds/background-fill-zero-area-crash.html [new file with mode: 0644]
WebCore/ChangeLog
WebCore/rendering/RenderBoxModelObject.cpp