Bug 58230

Summary:

Divide by zero in calcColumnWidth

Product:

WebKit

Reporter:

Abhishek Arya <inferno>

Component:

Layout and Rendering

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

hyatt, mitz, simon.fraser

Priority:

Keywords:

InRadar

Version:

528+ (Nightly build)

Hardware:

All

OS:

All

Attachments:

Description	Flags
Testcase	none
Patch	mitz: review+

Description Abhishek Arya 2011-04-11 06:20:25 PDT

Created attachment 88999 [details]
Testcase

Testcase::
<style>
			html, body { -webkit-column-count: 2000000000; -webkit-column-width: 0;

Comment 1 Simon Fraser (smfr) 2011-04-11 10:51:31 PDT

<rdar://problem/9265411>

Comment 2 Simon Fraser (smfr) 2011-04-11 11:49:52 PDT

Created attachment 89041 [details]
Patch

Comment 3 Abhishek Arya 2011-04-11 11:56:49 PDT

Thanks Simon. My fuzzer can now dive into something else :)

Comment 4 Simon Fraser (smfr) 2011-04-11 12:07:57 PDT

http://trac.webkit.org/changeset/83470