Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(32)

Issue 1607733004: Fix crash when using disallowed URLs in image sets for content CSS property (Closed)

Created:
4 years, 11 months ago by alancutter (OOO until 2018)
Modified:
4 years, 11 months ago
Reviewers:
Timothy Loh
CC:
darktears, apavlov+blink_chromium.org, blink-reviews, blink-reviews-css, blink-reviews-style_chromium.org, chromium-reviews, dglazkov+blink, rwlbuis, Yoav Weiss
Base URL:
https://chromium.googlesource.com/chromium/src.git@master
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

Fix crash when using disallowed URLs in image sets for content CSS property This change makes CSSImageSetValue::cacheImage() always cache a StyleImage instead of caching nullptr when the ImageResource::fetch() call fails. After this change a StyleInvalidImage will be cached if fetch() fails. BUG=578997 Committed: https://crrev.com/e56bf13bcbf5e51897e52a77a9334b377f8528ac Cr-Commit-Position: refs/heads/master@{#370346}

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+43 lines, -27 lines) Patch
A third_party/WebKit/LayoutTests/fast/css/content-image-set-disallowed-url-crash.html View 1 chunk +16 lines, -0 lines 0 comments Download
M third_party/WebKit/Source/core/css/CSSCursorImageValue.cpp View 1 chunk +2 lines, -2 lines 0 comments Download
M third_party/WebKit/Source/core/css/CSSImageSetValue.h View 3 chunks +4 lines, -5 lines 0 comments Download
M third_party/WebKit/Source/core/css/CSSImageSetValue.cpp View 6 chunks +17 lines, -17 lines 0 comments Download
M third_party/WebKit/Source/core/css/resolver/ElementStyleResources.cpp View 2 chunks +2 lines, -2 lines 0 comments Download
M third_party/WebKit/Source/core/style/ContentData.h View 2 chunks +2 lines, -1 line 0 comments Download

Messages

Total messages: 14 (7 generated)
alancutter (OOO until 2018)
4 years, 11 months ago (2016-01-20 04:07:52 UTC) #5
commit-bot: I haz the power
Dry run: CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1607733004/1 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1607733004/1
4 years, 11 months ago (2016-01-20 04:09:30 UTC) #6
Timothy Loh
ok lgtm
4 years, 11 months ago (2016-01-20 04:40:15 UTC) #7
commit-bot: I haz the power
Dry run: Try jobs failed on following builders: win_chromium_compile_dbg_ng on tryserver.chromium.win (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.win/builders/win_chromium_compile_dbg_ng/builds/133574)
4 years, 11 months ago (2016-01-20 04:48:19 UTC) #9
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1607733004/1 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1607733004/1
4 years, 11 months ago (2016-01-20 06:10:29 UTC) #11
commit-bot: I haz the power
Committed patchset #1 (id:1)
4 years, 11 months ago (2016-01-20 08:51:14 UTC) #12
commit-bot: I haz the power
4 years, 11 months ago (2016-01-20 08:52:02 UTC) #14
Message was sent while issue was closed.
Patchset 1 (id:??) landed as
https://crrev.com/e56bf13bcbf5e51897e52a77a9334b377f8528ac
Cr-Commit-Position: refs/heads/master@{#370346}

Powered by Google App Engine
This is Rietveld 408576698