Bug 48955

Summary: CG use of WebKit image decoders crashes on some animated GIFs
Product: WebKit Reporter: Adam Barth <abarth>
Component: New BugsAssignee: Adam Barth <abarth>
Status: RESOLVED FIXED    
Severity: Normal CC: abarth, eric, webkit.review.bot
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Other   
OS: OS X 10.5   
Attachments:
Description Flags
Patch
none
Patch for landing abarth: commit-queue+

Adam Barth
Reported 2010-11-03 14:39:31 PDT
CG use of WebKit image decoders crashes on some animated GIFs
Attachments
Patch (179.58 KB, patch)
2010-11-03 14:43 PDT, Adam Barth
no flags
Patch for landing (179.70 KB, patch)
2010-11-03 15:11 PDT, Adam Barth
abarth: commit-queue+
Adam Barth
Comment 1 2010-11-03 14:43:42 PDT
Eric Seidel (no email)
Comment 2 2010-11-03 14:56:38 PDT
Comment on attachment 72873 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=72873&action=review Please consider making a helper function. > WebCore/platform/image-decoders/cg/ImageDecoderCG.cpp:38 > + m_bytes = m_backingStore ? reinterpret_cast<PixelData*>(CFDataGetMutableBytePtr(m_backingStore.get())) : 0; What about a backingStoreAsBytes() method? Seems this is a lot of code to copy/paste.
Adam Barth
Comment 3 2010-11-03 14:58:59 PDT
Comment on attachment 72873 [details] Patch Maybe I should call it CFDataGetMutableBytePtr. :)
Adam Barth
Comment 4 2010-11-03 15:11:37 PDT
Created attachment 72876 [details] Patch for landing
Adam Barth
Comment 5 2010-11-03 15:58:48 PDT
WebKit Review Bot
Comment 6 2010-11-03 16:28:10 PDT
http://trac.webkit.org/changeset/71277 might have broken Qt Linux Release The following tests are not passing: svg/in-html/by-reference.html svg/in-html/circle.html svg/overflow/overflow-on-outermost-svg-element-in-xhtml-auto.xhtml svg/overflow/overflow-on-outermost-svg-element-in-xhtml-defaults.xhtml svg/overflow/overflow-on-outermost-svg-element-in-xhtml-hidden.xhtml svg/overflow/overflow-on-outermost-svg-element-in-xhtml-scroll.xhtml svg/overflow/overflow-on-outermost-svg-element-in-xhtml-visible.xhtml svg/text/foreignObject-text-clipping-bug.xml svg/text/selection-background-color.xhtml svg/text/selection-styles.xhtml svg/zoom/page/zoom-coords-viewattr-01-b.svg svg/zoom/page/zoom-hixie-mixed-008.xml svg/zoom/page/zoom-hixie-mixed-009.xml svg/zoom/page/zoom-hixie-rendering-model-004.xhtml svg/zoom/page/zoom-svg-float-border-padding.xml
Adam Barth
Comment 7 2010-11-03 16:58:01 PDT
These tests were failing both before and after this patch. They blinked "pass" on the run before this one, so they got blamed on this patch, as far as I can tell.
Note You need to log in before you can comment on or make changes to this bug.