Prevent unlimited iteration in the case of invalid path data.
authoroliver@apple.com <oliver@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 10 Dec 2007 00:44:18 +0000 (00:44 +0000)
committeroliver@apple.com <oliver@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 10 Dec 2007 00:44:18 +0000 (00:44 +0000)
commit074a2e5682aa7042ffb649e19024f9bc3bd3e9de
treec2d612016cc2a4fd8190ded0f6c8dc6c2487be2e
parent1357aba5e8017137e03c54520f9c560bf5efcd89
Prevent unlimited iteration in the case of invalid path data.

Reviewed by Niko.

The only path commands that can leave numbers trailing the command processing
are 'm' and 'M', in which trailing numbers are parsed as arguments to an
implicit lineto command.  In any case we should just terminate as an invalid
path.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@28574 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/svg/dom/path-parser-expected.txt
LayoutTests/svg/dom/path-parser.html
WebCore/ChangeLog
WebCore/svg/SVGParserUtilities.cpp