nephele
/
haikuwebkit
1
0
Fork 0
Code Issues Releases Activity
haikuwebkit/LayoutTests/mathml/rowspan-crash-expected.txt

4 lines
29 B
Plaintext
Raw Permalink Normal View History

Make MathML colspan/rowspan consistent with HTML table cells. https://bugs.webkit.org/show_bug.cgi?id=150253 Patch by Frederic Wang <fwang@igalia.com> on 2016-03-14 Reviewed by Martin Robinson. Source/WebCore: Test: mathml/rowspan-crash.xhtml We make MathMLElement::colSpan and MathMLElement::rowSpan consistent with the corresponding functions in HTMLTableCellElement.cpp. These functions now return unsigned integers, use the same parsing functions and set a maximum for rowspan. This latter change fixes crash/timeout with large values of rowspan. * mathml/MathMLElement.cpp: Include HTMLParserIdioms to use limitToOnlyHTMLNonNegative. (WebCore::MathMLElement::colSpan): Use unsigned integer and limitToOnlyHTMLNonNegative. (WebCore::MathMLElement::rowSpan): ditto. We also use the same maximum limit as HTMLTableCellElement. * mathml/MathMLElement.h: Make colSpan and rowSpan return unsigned integers. LayoutTests: We import crashing test from bug 150253. * mathml/rowspan-crash-expected.txt: Added. * mathml/rowspan-crash.xhtml: Added. Canonical link: https://commits.webkit.org/173546@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@198129 268f45cc-cd09-0410-ab3c-d52691b4dbfc
2016-03-14 15:19:12 +00:00
This test shouldn't crash.