DescriptionMerge 99109 - Infinite recursion in RenderSVGResourceContainer::markAllClientsForInvalidation
https://bugs.webkit.org/show_bug.cgi?id=71384
Reviewed by Darin Adler.
Source/WebCore:
Adding a reentrancy guard to RenderSVGResourceContainer to prevent infinite recursion when
resources reference one another and share ids.
Test: svg/custom/resource-invalidation-crash.svg
* rendering/svg/RenderSVGResourceContainer.cpp:
(WebCore::RenderSVGResourceContainer::RenderSVGResourceContainer):
(WebCore::RenderSVGResourceContainer::markAllClientsForInvalidation):
* rendering/svg/RenderSVGResourceContainer.h:
LayoutTests:
Fixes a stack overflow when SVG resources reference one another and share ids.
* svg/custom/resource-invalidation-crash-expected.png: Added.
* svg/custom/resource-invalidation-crash-expected.txt: Added.
* svg/custom/resource-invalidation-crash.svg: Added.
TBR=leviw@chromium.org
Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=99219
Patch Set 1 #
Messages
Total messages: 1 (0 generated)
|