RESOLVED FIXED 272929
REGRESSION(277450@main): OOB array read with SVG animation where keyPoints = 0 
https://bugs.webkit.org/show_bug.cgi?id=272929
Summary REGRESSION(277450@main): OOB array read with SVG animation where keyPoints = 0
Scott Marcy
Reported 2024-04-18 14:52:12 PDT
This crashes: Testcase: ======= <svg zoomAndPan="magnify"> <text 0px"> <animateMotion path="m 1,0" keyPoints="0" keyTimes="0" restart="always"> The changes for <https://bugs.webkit.org/show_bug.cgi?id=272602> caused this.
Attachments
Add attachment proposed patch, testcase, etc.
Scott Marcy
Comment 1 2024-04-18 14:52:54 PDT
<rdar://problem/126636733>
Scott Marcy
Comment 2 2024-04-18 16:18:42 PDT
Pull request: https://github.com/WebKit/WebKit/pull/27481
EWS
Comment 3 2024-05-01 10:08:30 PDT
Committed 278212@main (53e67f679530): <https://commits.webkit.org/278212@main> Reviewed commits have been landed. Closing PR #27481 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.