Bug 15468

Summary: Parsing of numbers and lists is too lenient in SVG
Product: WebKit Reporter: Oliver Hunt <oliver>
Component: SVGAssignee: Oliver Hunt <oliver>
Status: RESOLVED FIXED    
Severity: Normal CC: oliver
Priority: P1    
Version: 523.x (Safari 3)   
Hardware: Mac   
OS: All   
Attachments:
Description Flags
Patch to fixerate this zimmermann: review+

Oliver Hunt
Reported 2007-10-11 15:26:32 PDT
There are a number of test cases (fuzzer tests in particular) that ensure we don't crash on invalid data. These are actually also demonstrating errors in our parsing as we are too lenient in a number of cases.
Attachments
Patch to fixerate this (26.58 KB, patch)
2007-10-11 15:28 PDT, Oliver Hunt 		zimmermann: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Oliver Hunt
Comment 1 2007-10-11 15:28:15 PDT
Created attachment 16633 [details] Patch to fixerate this
Nikolas Zimmermann
Comment 2 2007-10-11 15:33:58 PDT
Comment on attachment 16633 [details] Patch to fixerate this Good patch, if you fix the tab issue r=me.
Oliver Hunt
Comment 3 2007-10-11 22:18:31 PDT
Fix landed r26368
Note You need to log in before you can comment on or make changes to this bug.