Changeset 74148 in webkit
- Timestamp:
- Dec 15, 2010 3:26:40 PM (13 years ago)
- Location:
- trunk/WebCore
- Files:
-
- 2 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/WebCore/ChangeLog
r74147 r74148 1 2010-12-15 Matthew Delaney <mdelaney@apple.com> 2 3 Reviewed by Simon Fraser. 4 5 IOSurface bounds checks on bytesPerRow and allocSize are incorrect 6 https://bugs.webkit.org/show_bug.cgi?id=51137 7 8 No new tests added. For those using this new functionality, many current canvas layout tests will now pass. 9 10 * platform/graphics/cg/ImageBufferCG.cpp: 11 1 12 2010-12-15 Kenneth Russell <kbr@google.com> 2 13 -
trunk/WebCore/platform/graphics/cg/ImageBufferCG.cpp
r73949 r74148 64 64 65 65 unsigned long bytesPerRow = IOSurfaceAlignProperty(kIOSurfaceBytesPerRow, size.width() * bytesPerElement); 66 if (!bytesPerRow || bytesPerRow != (size.width() * bytesPerElement))66 if (!bytesPerRow) 67 67 return 0; 68 68 69 69 unsigned long allocSize = IOSurfaceAlignProperty(kIOSurfaceAllocSize, size.height() * bytesPerRow); 70 if (!allocSize || allocSize != (size.height() * bytesPerRow))70 if (!allocSize) 71 71 return 0; 72 72
Note: See TracChangeset
for help on using the changeset viewer.