2007-03-21 Oliver Hunt <oliver@apple.com>

2007-03-21  Oliver Hunt  <oliver@apple.com>

        Reviewed by Antti.
WebCore:
        Update a few SVG attribute parsers to be more defensive against
        reading beyond the end of input.

        Fixes rdar://problem/5077218 -- SVG transform parser runs past
        end of buffer when running fuzzing test

        * ksvg2/svg/SVGParserUtilities.cpp:
        (WebCore::SVGPathParser::parseSVG):
        * ksvg2/svg/SVGParserUtilities.h:
        (WebCore::skipOptionalSpacesOrDelimiter):
        * ksvg2/svg/SVGTransformable.cpp:
        (WebCore::parseTransformParamList):
        (WebCore::SVGTransformable::parseTransformAttribute):

LayoutTests:
        Fuzz test for SVG transform parser

        * svg/dom/transform-parser-expected.txt: Added.
        * svg/dom/transform-parser.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@20364 268f45cc-cd09-0410-ab3c-d52691b4dbfc