nephele
/
haikuwebkit
1
0
Fork 0
Code Issues Releases Activity
haikuwebkit/LayoutTests/svg/clip-path/clip-path-recursion-001-exp...

6 lines
116 B
XML
Raw Permalink Normal View History

Crash in WebCore::GraphicsContext::paintingDisabled https://bugs.webkit.org/show_bug.cgi?id=80669 Reviewed by Nikolas Zimmermann. Source/WebCore: The SVGImageBufferTools::clipToImageBuffer method deletes the clip image when it thinks it is not needed. However, there are cases when it is in fact still needed, particularly when the clip buffer is coming from higher up in the stack where it may be needed again. So this patch adds a flag to only allow deletion of the image buffer if it was created at the most recent call site. Tests: svg/custom/circular-clip-path-references-crash-expected.svg svg/custom/circular-clip-path-references-crash.svg * rendering/svg/RenderSVGResourceClipper.cpp: (WebCore::RenderSVGResourceClipper::applyClippingToContext): * rendering/svg/RenderSVGResourceGradient.cpp: (WebCore::clipToTextMask): * rendering/svg/RenderSVGResourceMasker.cpp: (WebCore::RenderSVGResourceMasker::applyResource): * rendering/svg/SVGImageBufferTools.cpp: (WebCore::SVGImageBufferTools::clipToImageBuffer): * rendering/svg/SVGImageBufferTools.h: (SVGImageBufferTools): LayoutTests: * svg/custom/circular-clip-path-references-crash-expected.svg: Added. * svg/custom/circular-clip-path-references-crash.svg: Added. Canonical link: https://commits.webkit.org/98140@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@110563 268f45cc-cd09-0410-ab3c-d52691b4dbfc
2012-03-13 15:14:57 +00:00
<svg xmlns="http://www.w3.org/2000/svg">
<text x="10" y="75">This test passes if it does not crash.</text>
</svg>