Open Bug 899517 Opened 7 years ago Updated 2 years ago

Canvas2D hangs

Categories

(Core :: Canvas: 2D, defect, critical)

x86_64
macOS
defect
Not set
critical

Tracking

()

People

(Reporter: posidron, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: hang, testcase, Whiteboard: [fuzzblocker])

These similar testcases involving stroke methods cause Firefox to hang till the user will be forced to restart the process. Peers like Google Chrome seem to reject or ignore those large values.


// exhausts CPU
o0 = document.createElement('canvas').getContext('2d')
o0.mozDash = [1,0,1,1,1]
o0.strokeRect(0, 0, 0, 8589934591)


// allocates all available memory
o0 = document.createElement('canvas').getContext('2d')
o0.mozDash = [0,1,0,0,1,0,0,1,0,0]
o0.rect(0, 0, 0, 67108865)
o0.isPointInStroke(0, 0)


// exhausts CPU
o0 = document.createElement('canvas').getContext('2d')
o0.bezierCurveTo(9.335285731017646e+306, 0, 0, 0, 0, 0)
o0.stroke()


Tested with https://hg.mozilla.org/integration/mozilla-inbound/rev/f7496fddb076 and Firefox 22
Hardware: x86 → x86_64
See Also: → 943587
See Also: → 943622
See Also: → 967365
Summary: Canvas2D hangs involving stroke methods → Canvas2D hangs
Whiteboard: [fuzzblocker]
Depends on: 989669, 943587, 943622, 967365
See Also: 943587, 943622, 967365
Depends on: 1017942
Blocks: 1289929
Has Regression Range: --- → irrelevant
You need to log in before you can comment on or make changes to this bug.