git://git.webkit.org / WebKit-https.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1357aba) | patch
Prevent unlimited iteration in the case of invalid path data.
authoroliver@apple.com <oliver@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 10 Dec 2007 00:44:18 +0000 (00:44 +0000)
committeroliver@apple.com <oliver@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 10 Dec 2007 00:44:18 +0000 (00:44 +0000)
commit074a2e5682aa7042ffb649e19024f9bc3bd3e9de
treec2d612016cc2a4fd8190ded0f6c8dc6c2487be2etree | snapshot
parent1357aba5e8017137e03c54520f9c560bf5efcd89commit | diff
Prevent unlimited iteration in the case of invalid path data.

Reviewed by Niko.

The only path commands that can leave numbers trailing the command processing
are 'm' and 'M', in which trailing numbers are parsed as arguments to an
implicit lineto command.  In any case we should just terminate as an invalid
path.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@28574 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog diff | blob | history
LayoutTests/svg/dom/path-parser-expected.txt diff | blob | history
LayoutTests/svg/dom/path-parser.html diff | blob | history
WebCore/ChangeLog diff | blob | history
WebCore/svg/SVGParserUtilities.cpp diff | blob | history
Mirror of the WebKit open source project from svn.webkit.org.