2011-01-19 Simon Fraser <simon.fraser@apple.com>
authorsimon.fraser@apple.com <simon.fraser@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 19 Jan 2011 21:29:01 +0000 (21:29 +0000)
committersimon.fraser@apple.com <simon.fraser@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 19 Jan 2011 21:29:01 +0000 (21:29 +0000)
commita72257010196d40dcc6947b7f28662b99dcde049
tree3699078d2247a81d9f303d16d81216289340c0e3
parent09c7b9c6a0792706d4a36a9362117f59e8120b0b
2011-01-19  Simon Fraser  <simon.fraser@apple.com>

        Reviewed by Adam Roben.

        [CSS Gradients] Crash due to out-of-memory with repeating-linear-gradient and latter stop positioned before former
        https://bugs.webkit.org/show_bug.cgi?id=52732

        When repeating gradient stops, make sure that the first and last stops are not at the same
        place, otherwise we'll add stops indefinitely and run out of memory.

        Test: fast/gradients/zero-range-repeating-gradient-hang.html

        * css/CSSGradientValue.cpp:
        (WebCore::CSSGradientValue::addStops):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@76154 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/fast/gradients/zero-range-repeating-gradient-hang-expected.checksum [new file with mode: 0644]
LayoutTests/fast/gradients/zero-range-repeating-gradient-hang-expected.png [new file with mode: 0644]
LayoutTests/fast/gradients/zero-range-repeating-gradient-hang-expected.txt [new file with mode: 0644]
LayoutTests/fast/gradients/zero-range-repeating-gradient-hang.html [new file with mode: 0644]
Source/WebCore/ChangeLog
Source/WebCore/css/CSSGradientValue.cpp