387290 - svg rect + scale + filter causes int overflow

Status: RESOLVED WORKSFORME

(Core :: SVG, defect)

Description

[georgi - hopefully not receiving bugspam]

Attachment: svg6e.xml

<rect fill="red" width="256" height="256" filter="url(#dafilter)" transform="scale(262145,9)"  />

causes crash with signs of integer overflow.
the stack is blown.

may be related to Bug 361745

Comment 1

[georgi - hopefully not receiving bugspam]

(In reply to comment #0)
> 
> may be related to Bug 361745
> 

ooops wrong bug.
the correct one is 
Bug 376713 – margin-top, height crash @ARGB32_image_mark on trunk macosx

Comment 2

[John Daggett (:jtd)]

Georgi, did you need to let this run for a while or does it crash immediately?  And on which build of Mac OS X are you seeing this? (Run System Profiler, choose Software, example: Mac OS X 10.4.10 (8R2218))

Running this for a few minutes seems to work for me but maybe this needs to run longer before it crashes.

Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.9a9pre) Gecko/2007092604 Minefield/3.0a9pre

Comment 3

[georgi - hopefully not receiving bugspam]

(In reply to comment #2)
> Georgi, did you need to let this run for a while or does it crash immediately? 
> And on which build of Mac OS X are you seeing this? (Run System Profiler,
> choose Software, example: Mac OS X 10.4.10 (8R2218))
> 
> Running this for a few minutes seems to work for me but maybe this needs to run
> longer before it crashes.
> 

doesn't crash for me now.

software is mac os x 10.4.10 8R218

Comment 4

[Jesse Ruderman]

Marking as WFM based on comment 3.

Comment 5

[Jesse Ruderman]

Crashtest checked in.