| commit | dd5c1100d219996fb4e6bbe6ecf3af885112a316 | |
| author | rob.buis@samsung.com <rob.buis@samsung.com> | |
| Wed, 15 Apr 2015 20:56:59 +0000 (15 20:56 +0000) | ||
| committer | rob.buis@samsung.com <rob.buis@samsung.com> | |
| Wed, 15 Apr 2015 20:56:59 +0000 (15 20:56 +0000) | ||
| tree | 6ebec8a26847cadfaaa98d0e6054fd46f71991c3 | treesnapshot (tar.gz zip) |
| parent | 5b4b84055304fdc7079c9ff12462272cb080d483 | commitdiff |
Handle huge values for cols/rows in frameset
The values for cols/rows in frameset can be bigger than the range of an unsigned int. In that case
treat as invalid and return early.
BUG=475007
Review URL: https://codereview.chromium.org/1072483004
git-svn-id: svn://svn.chromium.org/blink/trunk@193826 bbb929c8-8fbe-4397-9dbb-9b2b20218538
The values for cols/rows in frameset can be bigger than the range of an unsigned int. In that case
treat as invalid and return early.
BUG=475007
Review URL: https://codereview.chromium.org/1072483004
git-svn-id: svn://svn.chromium.org/blink/trunk@193826 bbb929c8-8fbe-4397-9dbb-9b2b20218538
| third_party/WebKit/LayoutTests/fast/frames/huge-cols-rows-values-expected.html | [new file with mode: 0644] | blob |
| third_party/WebKit/LayoutTests/fast/frames/huge-cols-rows-values.html | [new file with mode: 0644] | blob |
| third_party/WebKit/LayoutTests/fast/frames/invalid-cols-rows-value-expected.html | [new file with mode: 0644] | blob |
| third_party/WebKit/LayoutTests/fast/frames/invalid-cols-rows-value.html | [new file with mode: 0644] | blob |
| third_party/WebKit/Source/core/html/HTMLDimension.cpp | diffblobblamehistory |