Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(179)

Issue 318443004: Fix off by one in creating a RasterShape (Closed)

Created:
6 years, 6 months ago by Bem Jones-Bey (adobe)
Modified:
6 years, 6 months ago
Reviewers:
Bear Travis, pdr., inferno
CC:
blink-reviews, blink-reviews-rendering, zoltan1, eae+blinkwatch, leviw+renderwatch, jchaffraix+rendering, pdr., rune+blink
Visibility:
Public.

Description

Fix off by one in creating a RasterShape marginY1 is supposed to be an inclusive endpoint, however, maxY() is an exclusive endpoint. To fix this, subtract one from maxY() before assiging to marginY1 so that we don't walk off the end of the intervals vector. BUG=379108 R=betravis@adobe.com,pdr@chromium.org,inferno@chromium.org Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=175433

Patch Set 1 #

Total comments: 1

Patch Set 2 : Update for review feedback #

Unified diffs Side-by-side diffs Delta from patch set Stats (+22 lines, -2 lines) Patch
A LayoutTests/fast/shapes/shape-outside-floats/shape-outside-floats-shape-margin-crash.html View 1 chunk +19 lines, -0 lines 0 comments Download
A LayoutTests/fast/shapes/shape-outside-floats/shape-outside-floats-shape-margin-crash-expected.txt View 1 chunk +1 line, -0 lines 0 comments Download
M Source/core/rendering/shapes/RasterShape.cpp View 1 2 chunks +2 lines, -2 lines 0 comments Download

Messages

Total messages: 7 (0 generated)
Bem Jones-Bey (adobe)
6 years, 6 months ago (2014-06-03 21:34:25 UTC) #1
pdr.
https://codereview.chromium.org/318443004/diff/1/Source/core/rendering/shapes/RasterShape.cpp File Source/core/rendering/shapes/RasterShape.cpp (right): https://codereview.chromium.org/318443004/diff/1/Source/core/rendering/shapes/RasterShape.cpp#newcode89 Source/core/rendering/shapes/RasterShape.cpp:89: int marginY1 = std::min(maxY() - 1, y + shapeMargin); ...
6 years, 6 months ago (2014-06-03 23:08:55 UTC) #2
Bem Jones-Bey (adobe)
On 2014/06/03 23:08:55, pdr wrote: > https://codereview.chromium.org/318443004/diff/1/Source/core/rendering/shapes/RasterShape.cpp > File Source/core/rendering/shapes/RasterShape.cpp (right): > > https://codereview.chromium.org/318443004/diff/1/Source/core/rendering/shapes/RasterShape.cpp#newcode89 > ...
6 years, 6 months ago (2014-06-03 23:13:36 UTC) #3
Bem Jones-Bey (adobe)
The CQ bit was checked by bjonesbe@adobe.com
6 years, 6 months ago (2014-06-03 23:29:01 UTC) #4
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-status.appspot.com/cq/bjonesbe@adobe.com/318443004/20001
6 years, 6 months ago (2014-06-03 23:29:42 UTC) #5
commit-bot: I haz the power
FYI, CQ is re-trying this CL (attempt #1). The failing builders are: win_blink_rel on tryserver.blink ...
6 years, 6 months ago (2014-06-04 02:02:36 UTC) #6
commit-bot: I haz the power
6 years, 6 months ago (2014-06-04 03:09:05 UTC) #7
Message was sent while issue was closed.
Change committed as 175433

Powered by Google App Engine
This is Rietveld 408576698