160014 2016-07-21 01:04:22 -0700 [Cairo] Fix a crash in fast/canvas/canvas-getImageData-invalid-result-buffer-crash.html 2016-07-21 09:02:27 -0700 1 1 1 Unclassified WebKit Platform WebKit Local Build Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=159495 LayoutTestFailure P2 Normal --- 1 cgarcia webkit-unassigned bugs-noreply oldest_to_newest 1213080 0 cgarcia 2016-07-21 01:04:22 -0700 In r202887 some null checks were added for JSArray::createUninitialized (and related) but not for the ImageBuffer cairo implementation. 1213081 1 284195 cgarcia 2016-07-21 01:06:39 -0700 Created attachment 284195 Patch 1213140 2 cgarcia 2016-07-21 09:02:27 -0700 Committed r203503: <http://trac.webkit.org/changeset/203503> 284195 2016-07-21 01:06:39 -0700 2016-07-21 07:56:45 -0700 Patch wcore-cairo-crash.diff text/plain 1738 cgarcia ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0No YW5nZUxvZwppbmRleCA5YjY0MWU2Li5lZDFhZGIzIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29y ZS9DaGFuZ2VMb2cKKysrIGIvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTYg QEAKKzIwMTYtMDctMjEgIENhcmxvcyBHYXJjaWEgQ2FtcG9zICA8Y2dhcmNpYUBpZ2FsaWEuY29t PgorCisgICAgICAgIFtDYWlyb10gRml4IGEgY3Jhc2ggaW4gZmFzdC9jYW52YXMvY2FudmFzLWdl dEltYWdlRGF0YS1pbnZhbGlkLXJlc3VsdC1idWZmZXItY3Jhc2guaHRtbAorICAgICAgICBodHRw czovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTYwMDE0CisKKyAgICAgICAgUmV2 aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgSW4gcjIwMjg4NyBzb21lIG51bGwg Y2hlY2tzIHdlcmUgYWRkZWQgZm9yIEpTQXJyYXk6OmNyZWF0ZVVuaW5pdGlhbGl6ZWQgKGFuZCBy ZWxhdGVkKSBidXQgbm90IGZvciB0aGUKKyAgICAgICAgSW1hZ2VCdWZmZXIgY2Fpcm8gaW1wbGVt ZW50YXRpb24uCisKKyAgICAgICAgKiBwbGF0Zm9ybS9ncmFwaGljcy9jYWlyby9JbWFnZUJ1ZmZl ckNhaXJvLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OmdldEltYWdlRGF0YSk6IFJldHVybiBlYXJs eSBpZiBVaW50OENsYW1wZWRBcnJheTo6Y3JlYXRlVW5pbml0aWFsaXplZCgpIHJldHVybnMgbnVs bHB0ci4KKwogMjAxNi0wNy0yMSAgTWlndWVsIEdvbWV6ICA8bWFnb21lekBpZ2FsaWEuY29tPgog CiAgICAgICAgIFtUaHJlYWRlZCBDb21wb3NpdG9yXSBGbGlja2VyaW5nIHdoZW4gem9vbWluZyBp bi9vdXQgaW4gbWFwcy5nb29nbGUuY29tCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9wbGF0 Zm9ybS9ncmFwaGljcy9jYWlyby9JbWFnZUJ1ZmZlckNhaXJvLmNwcCBiL1NvdXJjZS9XZWJDb3Jl L3BsYXRmb3JtL2dyYXBoaWNzL2NhaXJvL0ltYWdlQnVmZmVyQ2Fpcm8uY3BwCmluZGV4IGQ0OGNm ODguLjhmNDhjMjAgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2dyYXBoaWNz L2NhaXJvL0ltYWdlQnVmZmVyQ2Fpcm8uY3BwCisrKyBiL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3Jt L2dyYXBoaWNzL2NhaXJvL0ltYWdlQnVmZmVyQ2Fpcm8uY3BwCkBAIC0zMjMsNiArMzIzLDggQEAg dGVtcGxhdGUgPE11bHRpcGx5IG11bHRpcGxpZWQ+CiBSZWZQdHI8VWludDhDbGFtcGVkQXJyYXk+ IGdldEltYWdlRGF0YShjb25zdCBJbnRSZWN0JiByZWN0LCBjb25zdCBJbnRSZWN0JiBsb2dpY2Fs UmVjdCwgY29uc3QgSW1hZ2VCdWZmZXJEYXRhJiBkYXRhLCBjb25zdCBJbnRTaXplJiBzaXplLCBj b25zdCBJbnRTaXplJiBsb2dpY2FsU2l6ZSwgZmxvYXQgcmVzb2x1dGlvblNjYWxlKQogewogICAg IFJlZlB0cjxVaW50OENsYW1wZWRBcnJheT4gcmVzdWx0ID0gVWludDhDbGFtcGVkQXJyYXk6OmNy ZWF0ZVVuaW5pdGlhbGl6ZWQocmVjdC53aWR0aCgpICogcmVjdC5oZWlnaHQoKSAqIDQpOworICAg IGlmICghcmVzdWx0KQorICAgICAgICByZXR1cm4gbnVsbHB0cjsKIAogICAgIGlmIChyZWN0Lngo KSA8IDAgfHwgcmVjdC55KCkgPCAwIHx8IChyZWN0LngoKSArIHJlY3Qud2lkdGgoKSkgPiBzaXpl LndpZHRoKCkgfHwgKHJlY3QueSgpICsgcmVjdC5oZWlnaHQoKSkgPiBzaXplLmhlaWdodCgpKQog ICAgICAgICByZXN1bHQtPnplcm9GaWxsKCk7Cg==