ChangeLog

2012-04-30  Emil A Eklund  <eae@chromium.org>

        Change RenderBoxModelObject::calculateBackgroundImageGeometry to use roundToInt

        https://bugs.webkit.org/show_bug.cgi?id=85249

        Reviewed by NOBODY (OOPS!).

        Prepare RenderBoxModelObject for FractionalLayoutUnits by adding rounding

        logic to calculateBackgroundImageGeometry.

        No new tests, no change in functionality.

        * rendering/RenderBoxModelObject.cpp:

        (WebCore::RenderBoxModelObject::calculateBackgroundImageGeometry):

2012-04-30  Oliver Hunt  <oliver@apple.com>

        Harden arithmetic in ImageBufferDataCG

115695

Source/WebCore/rendering/RenderBoxModelObject.cpp

@@void RenderBoxModelObject::calculateBack

    LayoutUnit xPosition = minimumValueForLength(fillLayer->xPosition(), positioningAreaSize.width() - geometry.tileSize().width(), renderView, true);

    if (backgroundRepeatX == RepeatFill)

1241 geometry.setPhaseX(geometry.tileSize().width() ? geometry.tileSize().width() - (xPosition + left) % geometry.tileSize().width() : 0);

1241 geometry.setPhaseX(geometry.tileSize().width() ? geometry.tileSize().width() - roundToInt(xPosition + left) % geometry.tileSize().width() : 0);

    else

        geometry.setNoRepeatX(xPosition + left);

    LayoutUnit yPosition = minimumValueForLength(fillLayer->yPosition(), positioningAreaSize.height() - geometry.tileSize().height(), renderView, true);

    if (backgroundRepeatY == RepeatFill)

1247 geometry.setPhaseY(geometry.tileSize().height() ? geometry.tileSize().height() - (yPosition + top) % geometry.tileSize().height() : 0);

1247 geometry.setPhaseY(geometry.tileSize().height() ? geometry.tileSize().height() - roundToInt(yPosition + top) % geometry.tileSize().height() : 0);

    else 

        geometry.setNoRepeatY(yPosition + top);

115692