Bug 12126 - RenderSVGImage seems to suffer from integer overflow
Summary: RenderSVGImage seems to suffer from integer overflow
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: SVG (show other bugs)
Version: 420+
Hardware: Mac (PowerPC) OS X 10.4
: P2 Normal
Assignee: Nobody
URL: http://www.carto.net/neumann/webkitsv...
Keywords: HasReduction
Depends on:
Blocks:
 
Reported: 2007-01-05 08:06 PST by Andreas Neumann
Modified: 2007-03-24 05:43 PDT (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Neumann 2007-01-05 08:06:53 PST 
In this and some other examples (e.g. http://www.carto.net/papers/svg/navigationTools/index.svg) the linked raster image is not displayed. See Opera and Batik for correct rendering.
Comment 1 Eric Seidel (no email) 2007-01-14 20:50:32 PST 
Looking at the activity viewer, it definitely successfully loaded ch_relief.jpg, but it's failing to display it for some reason.
Comment 2 Eric Seidel (no email) 2007-01-15 00:53:01 PST 
It turns out this is related to some sort of overflow value on the image position:

<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="100%" height="100%" viewBox="350000 0 350000 233540">
  <image xlink:href="ch_relief.jpg" x="350000" y="0" width="350000" height="233540"/>
</svg>

that reduction fails.  However this alternative does not fail:

<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="100%" height="100%" viewBox="340000 0 350000 233540">
  <image xlink:href="ch_relief.jpg" x="340000" y="0" width="350000" height="233540"/>
</svg>

note the 340000 instead of 350000
Comment 3 Nikolas Zimmermann 2007-03-23 11:10:29 PDT 
This problem only appears because we use RenderImage::paint() if there is no preserveAspectRatio specified - this causes the problem. Will be fixed soon.
Comment 4 Nikolas Zimmermann 2007-03-24 05:43:39 PDT 
Landed in r20469.