<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>116494</bug_id>
          
          <creation_ts>2013-05-20 19:22:20 -0700</creation_ts>
          <short_desc>Fix crash in BitmapImage::destroyDecodedData()</short_desc>
          <delta_ts>2013-11-07 03:02:21 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Images</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>BlinkMergeCandidate</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Ryosuke Niwa">rniwa</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>benjamin</cc>
    
    <cc>commit-queue</cc>
    
    <cc>dino</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>891510</commentid>
    <comment_count>0</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2013-05-20 19:22:20 -0700</bug_when>
    <thetext>Merge https://chromium.googlesource.com/chromium/blink/+/6b6887bf53068f8537908e501fdc7317ad2c6d86

In some cases, m_currentFrame may be bigger than m_frames.size().
Should limit the upper bound of the loop to m_frames.size().</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947131</commentid>
    <comment_count>1</comment_count>
      <attachid>216031</attachid>
    <who name="Laszlo Vidacs">lvidacs.u-szeged</who>
    <bug_when>2013-11-05 05:23:49 -0800</bug_when>
    <thetext>Created attachment 216031
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947142</commentid>
    <comment_count>2</comment_count>
      <attachid>216031</attachid>
    <who name="Csaba Osztrogonác">ossy</who>
    <bug_when>2013-11-05 06:31:19 -0800</bug_when>
    <thetext>Comment on attachment 216031
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=216031&amp;action=review

&gt; Source/WebCore/ChangeLog:3
&gt; +
&gt; +        

Please remove an extra newline.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>947222</commentid>
    <comment_count>3</comment_count>
      <attachid>216046</attachid>
    <who name="Laszlo Vidacs">lvidacs.u-szeged</who>
    <bug_when>2013-11-05 09:27:56 -0800</bug_when>
    <thetext>Created attachment 216046
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>948164</commentid>
    <comment_count>4</comment_count>
      <attachid>216046</attachid>
    <who name="Csaba Osztrogonác">ossy</who>
    <bug_when>2013-11-07 02:38:35 -0800</bug_when>
    <thetext>Comment on attachment 216046
Patch

LGTM, r=me.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>948177</commentid>
    <comment_count>5</comment_count>
      <attachid>216046</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2013-11-07 03:02:19 -0800</bug_when>
    <thetext>Comment on attachment 216046
Patch

Clearing flags on attachment: 216046

Committed r158840: &lt;http://trac.webkit.org/changeset/158840&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>948178</commentid>
    <comment_count>6</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2013-11-07 03:02:21 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>216031</attachid>
            <date>2013-11-05 05:23:49 -0800</date>
            <delta_ts>2013-11-05 09:27:50 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-116494-20131105142348.patch</filename>
            <type>text/plain</type>
            <size>1879</size>
            <attacher name="Laszlo Vidacs">lvidacs.u-szeged</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTU4NTU4CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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==
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>216046</attachid>
            <date>2013-11-05 09:27:56 -0800</date>
            <delta_ts>2013-11-07 03:02:18 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-116494-20131105182755.patch</filename>
            <type>text/plain</type>
            <size>1877</size>
            <attacher name="Laszlo Vidacs">lvidacs.u-szeged</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTU4NTU4CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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=
</data>

          </attachment>
      

    </bug>

</bugzilla>