Merge 98344

Source/WebCore/svg/SVGParserUtilities.cpp

 /*
  * Copyright (C) 2002, 2003 The Karbon Developers
  * Copyright (C) 2006 Alexander Kellett <lypanov@kde.org>
  * Copyright (C) 2006, 2007 Rob Buis <buis@kde.org>
  * Copyright (C) 2007, 2009 Apple Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
@@ skipping 140 matching lines @@
 {
     const UChar* ptr = string.characters();
     const UChar* end = ptr + string.length();
     return genericParseNumber(ptr, end, number, skip) && ptr == end;
 }
 
 // only used to parse largeArcFlag and sweepFlag which must be a "0" or "1"
 // and might not have any whitespace/comma after it
 bool parseArcFlag(const UChar*& ptr, const UChar* end, bool& flag)
 {
+    if (ptr >= end)
+        return false;
     const UChar flagChar = *ptr++;
     if (flagChar == '0')
         flag = false;
     else if (flagChar == '1')
         flag = true;
     else
         return false;
     
     skipOptionalSVGSpacesOrDelimiter(ptr, end);
     
@@ skipping 216 matching lines @@
         values.append(String(inputStart, inputEnd - inputStart + 1));
         skipOptionalSVGSpacesOrDelimiter(ptr, end, seperator);
     }
 
     return values;
 }
 
 }
 
 #endif // ENABLE(SVG)