Bug 37751 – Infinite recursion in WebCore::SVGPatternElement::buildPattern leads to stack exhaustion

• Status: RESOLVED
• Resolution: DUPLICATE
• Component: SVG

[Tobias Klein]

Opening the attached SVG file causes infinite recursion in WebCore::SVGPatternElement::buildPattern, which leads to stack exhaustion.

Code snippet:

http://svn.webkit.org/repository/webkit/trunk/WebCore/svg/SVGPatternElement.cpp

[..]
void SVGPatternElement::buildPattern(const FloatRect& targetRect) const
{
[..]
    // Render subtree into ImageBuffer
    for (Node* n = attributes.patternContentElement()->firstChild(); n; n = n->nextSibling()) {
        if (!n->isSVGElement() || !static_cast<SVGElement*>(n)->isStyled() || !n->renderer())
            continue;
        renderSubtreeToImage(patternImage.get(), n->renderer());
    }
[..]

[Tobias Klein]

Created attachment 53595 [details]
Testcase

[Dirk Schulze]

Thanks for the test case.

*** This bug has been marked as a duplicate of bug 32171 ***