Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-10-18 15:55:36 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 1524418 - Avoid crashing content process with giant drawtarget. r=mstange

Browse Source 
Differential Revision: https://phabricator.services.mozilla.com/D21230

--HG--
extra : moz-landing-system : lando
This commit is contained in:
Kartikaya Gupta 2019-02-27 17:34:23 +00:00
parent bb22600a64
commit 778cca9d62
3 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
gfx/tests/crashtests/1524418.html Normal file
View File

@ -0,0 +1,11 @@
<script>
window.onload=function() {
a.setAttribute('style', 'font-size:3154')
}
</script>
<style>
* {
background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciLz4=);
}
</style>
<select size='63' id='a'>

1
gfx/tests/crashtests/crashtests.list
View File

@ -183,3 +183,4 @@ load 1505934-1.html
load 1509123.html
load 1494062-blob-image-wraplist-clip.html
load texture-allocator-zero-region.html
load 1524418.html

3
gfx/thebes/gfxDrawable.cpp
View File

@ -98,6 +98,9 @@ already_AddRefed<gfxSurfaceDrawable> gfxCallbackDrawable::MakeSurfaceDrawable(
gfxContext* aContext, const SamplingFilter aSamplingFilter) {
SurfaceFormat format = gfxPlatform::GetPlatform()->Optimal2DFormatForContent(
gfxContentType::COLOR_ALPHA);
if (!aContext->GetDrawTarget()->CanCreateSimilarDrawTarget(mSize, format)) {
return nullptr;
}
RefPtr<DrawTarget> dt =
aContext->GetDrawTarget()->CreateSimilarDrawTarget(mSize, format);