Fix keyTimes list length of from/to/by animations.
authorcommit-queue@webkit.org <commit-queue@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 18 Aug 2014 17:02:13 +0000 (17:02 +0000)
committercommit-queue@webkit.org <commit-queue@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 18 Aug 2014 17:02:13 +0000 (17:02 +0000)
commitb1edcf602a6045d2ecbae491f75b14f9083dfcf7
tree820965c4446dbd571de54e5255659a6f50f5cd9c
parenta1b374b2bab635c873338eab5aff683f43eaa121
Fix keyTimes list length of from/to/by animations.
https://bugs.webkit.org/show_bug.cgi?id=136037

Patch by Renata Hodovan <rhodovan.u-szeged@partner.samsung.com> on 2014-08-18
Reviewed by Darin Adler.

Source/WebCore:

For from/to/by animations, the length of keyTimes and keyPoints
attribute if are specified must be equal and must have at least
2 values.

Blink: https://codereview.chromium.org/453243003/
Test: svg/animations/invalid-keytime-number-crash.html

* svg/SVGAnimationElement.cpp:
(WebCore::SVGAnimationElement::startedActiveInterval):

LayoutTests:

* svg/animations/invalid-keytime-number-crash-expected.txt: Added.
* svg/animations/invalid-keytime-number-crash.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@172706 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/svg/animations/invalid-keytime-number-crash-expected.txt [new file with mode: 0644]
LayoutTests/svg/animations/invalid-keytime-number-crash.html [new file with mode: 0644]
Source/WebCore/ChangeLog
Source/WebCore/svg/SVGAnimationElement.cpp