<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>48948</bug_id>
          
          <creation_ts>2010-11-03 13:39:49 -0700</creation_ts>
          <short_desc>Crash when setting context font to bad value</short_desc>
          <delta_ts>2010-11-03 14:00:08 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Canvas</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Simon Fraser (smfr)">simon.fraser</reporter>
          <assigned_to name="Simon Fraser (smfr)">simon.fraser</assigned_to>
          <cc>mdelaney7</cc>
    
    <cc>simon.fraser</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>304252</commentid>
    <comment_count>0</comment_count>
      <attachid>72864</attachid>
    <who name="Simon Fraser (smfr)">simon.fraser</who>
    <bug_when>2010-11-03 13:39:49 -0700</bug_when>
    <thetext>Created attachment 72864
Testcase

This crashes:


        var ctx = document.getElementById(&quot;canvas&quot;).getContext(&quot;2d&quot;);
        ctx.font = &quot;font-family: Helvetica; font-size: 48pt; font-color: #000000&quot;;
        ctx.fillText(&quot;Hello world&quot;, 10, 200);</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>304253</commentid>
    <comment_count>1</comment_count>
    <who name="Simon Fraser (smfr)">simon.fraser</who>
    <bug_when>2010-11-03 13:40:11 -0700</bug_when>
    <thetext>&lt;rdar://problem/8174663&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>304267</commentid>
    <comment_count>2</comment_count>
      <attachid>72867</attachid>
    <who name="Simon Fraser (smfr)">simon.fraser</who>
    <bug_when>2010-11-03 13:54:15 -0700</bug_when>
    <thetext>Created attachment 72867
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>304273</commentid>
    <comment_count>3</comment_count>
    <who name="Simon Fraser (smfr)">simon.fraser</who>
    <bug_when>2010-11-03 14:00:08 -0700</bug_when>
    <thetext>http://trac.webkit.org/changeset/71266</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>72864</attachid>
            <date>2010-11-03 13:39:49 -0700</date>
            <delta_ts>2010-11-03 13:39:49 -0700</delta_ts>
            <desc>Testcase</desc>
            <filename>invalid-set-font-crash.html</filename>
            <type>text/html</type>
            <size>521</size>
            <attacher name="Simon Fraser (smfr)">simon.fraser</attacher>
            
              <data encoding="base64">PGh0bWw+CjxoZWFkPgogICAgPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPgogICAgaWYg
KHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcikKICAgICAgICBsYXlvdXRUZXN0Q29udHJvbGxl
ci5kdW1wQXNUZXh0KCk7CgogICAgZnVuY3Rpb24gaW5pdCgpCiAgICB7CiAgICAgICAgdmFyIGN0
eCA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJjYW52YXMiKS5nZXRDb250ZXh0KCIyZCIpOwog
ICAgICAgIGN0eC5mb250ID0gImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogNDhw
dDsgZm9udC1jb2xvcjogIzAwMDAwMCI7CiAgICAgICAgY3R4LmZpbGxUZXh0KCJIZWxsbyB3b3Js
ZCIsIDEwLCAyMDApOwogICAgfQogICAgPC9zY3JpcHQ+CjwvaGVhZD4KPGJvZHkgb25sb2FkPSJp
bml0KCkiPgogICAgPHA+VGhpcyB0ZXN0IHNob3VsZCBub3QgY3Jhc2guPC9wPgogICAgPGNhbnZh
cyBpZD0iY2FudmFzIiBoZWlnaHQ9IjMwMCIgd2lkdGg9IjMwMCI+PC9jYW52YXM+CjwvYm9keT4K
PC9odG1sPgo=
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>72867</attachid>
            <date>2010-11-03 13:54:15 -0700</date>
            <delta_ts>2010-11-03 13:55:56 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-48948-20101103135414.patch</filename>
            <type>text/plain</type>
            <size>3333</size>
            <attacher name="Simon Fraser (smfr)">simon.fraser</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxv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</data>
<flag name="review"
          id="63198"
          type_id="1"
          status="+"
          setter="sullivan"
    />
          </attachment>
      

    </bug>

</bugzilla>