Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(190)

Issue 1987223002: Clamp, not cast length value in CSS length conversion (Closed)

Created:
4 years, 7 months ago by drott
Modified:
4 years, 7 months ago
Reviewers:
Timothy Loh, f(malita), rune
CC:
darktears, apavlov+blink_chromium.org, blink-reviews, blink-reviews-css, chromium-reviews, dglazkov+blink, rwlbuis
Base URL:
https://chromium.googlesource.com/chromium/src.git@master
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

Clamp, not cast length value in CSS length conversion computeLength() in CSSPrimitiveValue was returning only static_cast'ed, but not clamped values, leading to float overflows in font and Skia code down the line. The test result needs to be compared visually as the crash does not trigger using dumpAsText(). BUG=610645 TEST=fast/text/letter-spacing-crash.html Committed: https://crrev.com/6dd652af9ab5089938ce8c24513b4a768d0c5b45 Cr-Commit-Position: refs/heads/master@{#394390}

Patch Set 1 #

Patch Set 2 : Remove spurious newline #

Unified diffs Side-by-side diffs Delta from patch set Stats (+17 lines, -1 line) Patch
A third_party/WebKit/LayoutTests/fast/text/letter-spacing-crash.html View 1 chunk +8 lines, -0 lines 0 comments Download
A third_party/WebKit/LayoutTests/fast/text/letter-spacing-crash-expected.html View 1 chunk +8 lines, -0 lines 0 comments Download
M third_party/WebKit/Source/core/css/CSSPrimitiveValue.cpp View 1 chunk +1 line, -1 line 0 comments Download

Messages

Total messages: 17 (7 generated)
commit-bot: I haz the power
Dry run: CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1987223002/20001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1987223002/20001
4 years, 7 months ago (2016-05-18 10:53:00 UTC) #3
drott
PTAL
4 years, 7 months ago (2016-05-18 10:54:16 UTC) #4
rune
lgtm with test nit: If possible, I think we prefer text output to html reference ...
4 years, 7 months ago (2016-05-18 11:22:18 UTC) #6
commit-bot: I haz the power
Dry run: This issue passed the CQ dry run.
4 years, 7 months ago (2016-05-18 11:57:36 UTC) #8
drott
On 2016/05/18 at 11:22:18, rune wrote: > lgtm with test nit: > > If possible, ...
4 years, 7 months ago (2016-05-18 11:59:08 UTC) #9
rune
On 2016/05/18 11:59:08, drott wrote: > On 2016/05/18 at 11:22:18, rune wrote: > > lgtm ...
4 years, 7 months ago (2016-05-18 12:11:14 UTC) #10
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1987223002/20001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1987223002/20001
4 years, 7 months ago (2016-05-18 12:16:30 UTC) #12
drott
On 2016/05/18 at 12:11:14, rune wrote: > On 2016/05/18 11:59:08, drott wrote: > > On ...
4 years, 7 months ago (2016-05-18 12:18:13 UTC) #14
commit-bot: I haz the power
Committed patchset #2 (id:20001)
4 years, 7 months ago (2016-05-18 12:19:57 UTC) #15
commit-bot: I haz the power
4 years, 7 months ago (2016-05-18 12:21:28 UTC) #17
Message was sent while issue was closed.
Patchset 2 (id:??) landed as
https://crrev.com/6dd652af9ab5089938ce8c24513b4a768d0c5b45
Cr-Commit-Position: refs/heads/master@{#394390}

Powered by Google App Engine
This is Rietveld 408576698