Bug 15468

Summary:

Parsing of numbers and lists is too lenient in SVG

Product:

WebKit

Reporter:

Oliver Hunt <oliver>

Component:

SVG

Assignee:

Oliver Hunt <oliver>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

oliver

Priority:

Version:

523.x (Safari 3)

Hardware:

Mac

OS:

All

Attachments:

Description	Flags
Patch to fixerate this	zimmermann: review+

Description Oliver Hunt 2007-10-11 15:26:32 PDT

There are a number of test cases (fuzzer tests in particular) that ensure we don't crash on invalid data.

These are actually also demonstrating errors in our parsing as we are too lenient in a number of cases.

Comment 1 Oliver Hunt 2007-10-11 15:28:15 PDT

Created attachment 16633 [details]
Patch to fixerate this

Comment 2 Nikolas Zimmermann 2007-10-11 15:33:58 PDT

Comment on attachment 16633 [details]
Patch to fixerate this

Good patch, if you fix the tab issue r=me.

Comment 3 Oliver Hunt 2007-10-11 22:18:31 PDT

Fix landed r26368