nephele
/
haikuwebkit
1
0
Fork 0
Code Issues Releases Activity
haikuwebkit/LayoutTests/svg/custom/resource-invalidation-crash...

20 lines
380 B
XML
Raw Permalink Normal View History

Infinite recursion in RenderSVGResourceContainer::markAllClientsForInvalidation https://bugs.webkit.org/show_bug.cgi?id=71384 Reviewed by Darin Adler. Source/WebCore: Adding a reentrancy guard to RenderSVGResourceContainer to prevent infinite recursion when resources reference one another and share ids. Test: svg/custom/resource-invalidation-crash.svg * rendering/svg/RenderSVGResourceContainer.cpp: (WebCore::RenderSVGResourceContainer::RenderSVGResourceContainer): (WebCore::RenderSVGResourceContainer::markAllClientsForInvalidation): * rendering/svg/RenderSVGResourceContainer.h: LayoutTests: Fixes a stack overflow when SVG resources reference one another and share ids. * svg/custom/resource-invalidation-crash-expected.png: Added. * svg/custom/resource-invalidation-crash-expected.txt: Added. * svg/custom/resource-invalidation-crash.svg: Added. Canonical link: https://commits.webkit.org/87701@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@99109 268f45cc-cd09-0410-ab3c-d52691b4dbfc
2011-11-02 22:35:16 +00:00
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<defs>
<pattern id="a" />
<pattern id="b" >
<rect fill="url(#a)"/>
</pattern>
<pattern id="a" xlink:href="#b"/>
<pattern id="b" >
<rect fill="url(#a)"/>
</pattern>
<pattern id="a" xlink:href="#b"/>
<rect fill="url(#a)"/>
</defs>
</svg>