[SVG] DisplayList-based patterns.

Source/core/rendering/svg/SVGRenderingContext.cpp

 /*
  * Copyright (C) 2007, 2008 Rob Buis <buis@kde.org>
  * Copyright (C) 2007 Nikolas Zimmermann <zimmermann@kde.org>
  * Copyright (C) 2007 Eric Seidel <eric@webkit.org>
  * Copyright (C) 2009 Google, Inc.  All rights reserved.
  * Copyright (C) 2009 Dirk Schulze <krit@webkit.org>
  * Copyright (C) Research In Motion Limited 2009-2010. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
@@ skipping 20 matching lines @@
 #include "core/frame/LocalFrame.h"
 #include "core/frame/Settings.h"
 #include "core/rendering/RenderLayer.h"
 #include "core/rendering/svg/RenderSVGImage.h"
 #include "core/rendering/svg/RenderSVGResource.h"
 #include "core/rendering/svg/RenderSVGResourceFilter.h"
 #include "core/rendering/svg/RenderSVGResourceMasker.h"
 #include "core/rendering/svg/SVGResources.h"
 #include "core/rendering/svg/SVGResourcesCache.h"
 
-static int kMaxImageBufferSize = 4096;
-
 namespace blink {
 
 static inline bool isRenderingMaskImage(RenderObject* object)
 {
     if (object->frame() && object->frame()->view())
         return object->frame()->view()->paintBehavior() & PaintBehaviorRenderingSVGMask;
     return false;
 }
 
 SVGRenderingContext::~SVGRenderingContext()
@@ skipping 203 matching lines @@
     AffineTransform& contentTransformation = currentContentTransformation();
     AffineTransform savedContentTransformation = contentTransformation;
     contentTransformation = subtreeContentTransformation * contentTransformation;
 
     ASSERT(!item->needsLayout());
     item->paint(info, IntPoint());
 
     contentTransformation = savedContentTransformation;
 }
 
-FloatRect SVGRenderingContext::clampedAbsoluteTargetRect(const FloatRect& absoluteTargetRect)
-{
-    const FloatSize maxImageBufferSize(kMaxImageBufferSize, kMaxImageBufferSize);
-    return FloatRect(absoluteTargetRect.location(), absoluteTargetRect.size().shrunkTo(maxImageBufferSize));

[Erik Dahlström (inactive), 2014/08/08 08:01:02]

Does the new codepath have similar guards against large tile sizes? From
experience, it's fairly common that patterns get huge sizes internally even from
relatively innocent-looking svg content.

[f(malita), 2014/08/08 15:30:36]

Yes, just landed yesterday :) https://codereview.chromium.org/446243002

We also have a couple of tests that verify clamping.

-}
-
 void SVGRenderingContext::clear2DRotation(AffineTransform& transform)
 {
     AffineTransform::DecomposedType decomposition;
     transform.decompose(decomposition);
     decomposition.angle = 0;
     transform.recompose(decomposition);
 }
 
 bool SVGRenderingContext::bufferForeground(OwnPtr<ImageBuffer>& imageBuffer)
 {
@@ skipping 20 matching lines @@
             toRenderSVGImage(m_object)->paintForeground(bufferedInfo);
         } else
             return false;
     }
 
     m_paintInfo->context->drawImageBuffer(imageBuffer.get(), boundingBox);
     return true;
 }
 
 }