X-Git-Url: https://git.webkit.org/?p=WebKit-https.git;a=blobdiff_plain;f=WebCore%2FChangeLog;h=83a7a7e79dec4a913e90c26a756e9c502faf0499;hp=bf840c84bf852aec5f69f8a2e7df35698d16a4a4;hb=1e678c2cefa3e7b7e6eb4fb7a74c9616744fdf9b;hpb=ee4af089ee49cbb9e3a6bd72598685e7b76607fd;ds=inline

diff --git a/WebCore/ChangeLog b/WebCore/ChangeLog
index bf840c84bf85..83a7a7e79dec 100644
--- a/WebCore/ChangeLog
+++ b/WebCore/ChangeLog
@@ -1,3 +1,27 @@
+2007-11-19  Doug Turner  <dougt@meer.net>
+
+        Reviewed by Alp Toker.
+
+        http://bugs.webkit.org/show_bug.cgi?id=16054
+        Crash when GlyphPage::fill is called with more than 256 bytes of data
+
+        http://bugs.webkit.org/show_bug.cgi?id=14446
+        [GDK] Crash on http://www.wikipedia.org/
+
+        setGlyphDataForIndex() uses a fixed array of size 256 which we can't
+        exceed. We need to return failure if the buffer has Unicode
+        supplementary characters for now.
+
+        This strategy matches the Win port, which also doesn't support this
+        case yet.
+
+        Add an assertion so nobody makes this mistake again.
+
+        * platform/GlyphPageTreeNode.h:
+        (WebCore::GlyphPage::setGlyphDataForIndex):
+        * platform/gtk/GlyphPageTreeNodeGtk.cpp:
+        (WebCore::GlyphPage::fill):
+
 2007-11-19  Doug Turner  <dougt@meer.net>
 
         Reviewed by Timothy Hatcher.