12884 2007-02-24 19:08:23 -0800 Test SVG custom parsers 2007-04-11 02:33:05 -0700 1 1 1 Unclassified WebKit SVG 523.x (Safari 3) Mac OS X 10.4 RESOLVED FIXED InRadar, SVGHitList P1 Normal --- 1 mjs webkit-unassigned mitz oldest_to_newest 21777 0 mjs 2007-02-24 19:08:23 -0800 We should do fuzz-testing of SVG parsers to make sure we've adressed possible overflow bugs. Maybe also more code review. This applies to at least the following parsers: - paths - SVGTransformable::parseTransformAttribute - SVGLengthList::parse - SVGNumberList::parse - SVGStringList::parse - SVGPreserveAspectRatio::parsePreserveAspectRatio - SVGColor.cpp parseNumberOrPercent - SVGColor::colorFromRGBColorString - SVGFitToViewBox::parseViewBox - SVGLength::setValueAsString - SVGParserUtilities.cpp parseNumber - SVGParserUtilities.cpp parseNumberOptionalNumber - SVGPolyParser::parsePoints - SVGPathParser::parseSVG - CSSParser::parseSVGStrokeDasharray - CSSParser::parseSVGPaint - CSSParser::parseSVGColor - CSSParser::parseSVGValue Parsers that are only in relevant to experimental features (so testing them isn't a P1): - SVGAnimationElement::parseKeyNumbers - SVGAnimationElement parseValues, parseKeySplines - SVGAnimationElement::parseBeginOrEndValue - SVGAnimationElement::parseClockValue - SVGAnimateMotionElement.cpp parsePoint static function 21770 1 mjs 2007-02-24 19:10:38 -0800 <rdar://problem/5021699> 15053 2 darin 2007-04-11 02:21:36 -0700 Geoff took care of this and closed the Radar bug on 3/21.