Throw a RangeError exception from get/createImageData when out of memory

third_party/WebKit/Source/modules/canvas2d/CanvasRenderingContext2DAPITest.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/canvas2d/CanvasRenderingContext2D.h"
 
 #include "core/frame/FrameView.h"
 #include "core/frame/Settings.h"
 #include "core/html/HTMLCanvasElement.h"
 #include "core/html/HTMLDocument.h"
@@ skipping 198 matching lines @@
     EXPECT_EQ(50, imageData->height());
 
     for (unsigned i = 0; i < imageData->data()->length(); ++i)
         imageData->data()->data()[i] = 255;
 
     EXPECT_EQ(255, imageData->data()->data()[32]);
 
     // createImageData(imageData) should create a new ImageData of the same size as 'imageData'
     // but filled with transparent black
 
-    ImageData* sameSizeImageData = context2d()->createImageData(imageData);
+    ImageData* sameSizeImageData = context2d()->createImageData(imageData, exceptionState);
+    EXPECT_FALSE(exceptionState.hadException());
     EXPECT_EQ(100, sameSizeImageData->width());
     EXPECT_EQ(50, sameSizeImageData->height());
     EXPECT_EQ(0, sameSizeImageData->data()->data()[32]);
 
     // createImageData(width, height) takes the absolute magnitude of the size arguments
 
     ImageData* imgdata1 = context2d()->createImageData(10, 20, exceptionState);
     EXPECT_FALSE(exceptionState.hadException());
     ImageData* imgdata2 = context2d()->createImageData(-10, 20, exceptionState);
     EXPECT_FALSE(exceptionState.hadException());
     ImageData* imgdata3 = context2d()->createImageData(10, -20, exceptionState);
     EXPECT_FALSE(exceptionState.hadException());
     ImageData* imgdata4 = context2d()->createImageData(-10, -20, exceptionState);
     EXPECT_FALSE(exceptionState.hadException());
 
     EXPECT_EQ((unsigned)800, imgdata1->data()->length());
     EXPECT_EQ((unsigned)800, imgdata2->data()->length());
     EXPECT_EQ((unsigned)800, imgdata3->data()->length());
     EXPECT_EQ((unsigned)800, imgdata4->data()->length());
 }
 
+TEST_F(CanvasRenderingContext2DAPITest, CreateImageDataTooBig)
+{
+    createContext(NonOpaque);
+    NonThrowableExceptionState exceptionState;
+    ImageData* tooBigImageData = context2d()->createImageData(1000000, 1000000, exceptionState);
+    EXPECT_EQ(nullptr, tooBigImageData);
+    EXPECT_TRUE(exceptionState.hadException());
+    EXPECT_EQ(V8RangeError, exceptionState.code());
+}
+
+TEST_F(CanvasRenderingContext2DAPITest, GetImageDataTooBig)
+{
+    createContext(NonOpaque);
+    NonThrowableExceptionState exceptionState;
+    ImageData* imageData = context2d()->getImageData(0, 0, 1000000, 1000000, exceptionState);
+    EXPECT_EQ(nullptr, imageData);
+    EXPECT_TRUE(exceptionState.hadException());
+    EXPECT_EQ(V8RangeError, exceptionState.code());
+}
+
 void resetCanvasForAccessibilityRectTest(HTMLDocument& document)
 {
     document.documentElement()->setInnerHTML(
         "<canvas id='canvas' style='position:absolute; top:0px; left:0px; padding:10px; margin:5px;'>"
         "<button id='button'></button></canvas>", ASSERT_NO_EXCEPTION);
     document.settings()->setAccessibilityEnabled(true);
     HTMLCanvasElement* canvas = toHTMLCanvasElement(document.getElementById("canvas"));
 
     String canvasType("2d");
     CanvasContextCreationAttributes attributes;
@@ skipping 46 matching lines @@
     AXObjectCacheImpl* axObjectCache = toAXObjectCacheImpl(document().existingAXObjectCache());
     AXObject* axObject = axObjectCache->getOrCreate(buttonElement);
 
     EXPECT_EQ(25, axObject->elementRect().x().toInt());
     EXPECT_EQ(25, axObject->elementRect().y().toInt());
     EXPECT_EQ(40, axObject->elementRect().width().toInt());
     EXPECT_EQ(40, axObject->elementRect().height().toInt());
 }
 
 } // namespace blink