Bug 15468 - Parsing of numbers and lists is too lenient in SVG
Summary: Parsing of numbers and lists is too lenient in SVG
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: SVG (show other bugs)
Version: 523.x (Safari 3)
Hardware: Macintosh All
: P1 Normal
Assignee: Oliver Hunt
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-10-11 15:26 PDT by Oliver Hunt
Modified: 2007-10-11 22:18 PDT (History)
1 user (show)

See Also:


Attachments
Patch to fixerate this (26.58 KB, patch)
2007-10-11 15:28 PDT, Oliver Hunt
zimmermann: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Oliver Hunt 2007-10-11 15:26:32 PDT
There are a number of test cases (fuzzer tests in particular) that ensure we don't crash on invalid data.

These are actually also demonstrating errors in our parsing as we are too lenient in a number of cases.
Comment 1 Oliver Hunt 2007-10-11 15:28:15 PDT
Created attachment 16633 [details]
Patch to fixerate this
Comment 2 Nikolas Zimmermann 2007-10-11 15:33:58 PDT
Comment on attachment 16633 [details]
Patch to fixerate this

Good patch, if you fix the tab issue r=me.
Comment 3 Oliver Hunt 2007-10-11 22:18:31 PDT
Fix landed r26368