Integer overflow in CreateClipPathCircle() can cause circles to render as boxes. #1754

Closed
opened 2 years ago by athenian200 · 1 comments
Collaborator

CreateClipPathCircle() can overflow to a negative value and render circles as rectangles under a very specific set of circumstances.

This was fixed in Firefox 53, and the fix is still applicable to our codebase as far as I can tell. It should be pretty much a straight port.

https://bugzilla.mozilla.org/show_bug.cgi?id=1324713

CreateClipPathCircle() can overflow to a negative value and render circles as rectangles under a very specific set of circumstances. This was fixed in Firefox 53, and the fix is still applicable to our codebase as far as I can tell. It should be pretty much a straight port. https://bugzilla.mozilla.org/show_bug.cgi?id=1324713
Moonchild self-assigned this 2 years ago
Moonchild added the
Layout
Bug
labels 2 years ago
Moonchild added this to the 29.2.0 milestone 2 years ago
Owner

On it

On it
Moonchild closed this issue 2 years ago
Moonchild added the
Verified
Fixed
labels 2 years ago
Sign in to join this conversation.
No Milestone
No Assignees
2 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: MoonchildProductions/UXP#1754
Loading…
There is no content yet.