Crashtest for bug 782141 - (CVE-2012-3969) Heap-buffer-overflow in nsSVGFEMorphologyElement::Filter. r=me.

2012-11-06 14:06:06 +00:00
parent 0e6484b641
commit 9a5591a690
2 changed files with 17 additions and 0 deletions
--- a/layout/svg/crashtests/782141-1.svg
+++ b/layout/svg/crashtests/782141-1.svg
@@ -0,0 +1,16 @@
+<svg xmlns="http://www.w3.org/2000/svg" version="1.1"
+     onload="go()">
+  <script>
+
+function go() {
+  var f = document.getElementById('f');
+  var fm = document.getElementById('fm');
+  f.appendChild(fm.cloneNode(1));
+}
+
+  </script>
+  <filter id="f">
+    <feMorphology id="fm" radius="2147483500"/>
+  </filter>
+  <rect height="28" width="256" filter="url(#f)" />
+</svg>
--- a/layout/svg/crashtests/crashtests.list
+++ b/layout/svg/crashtests/crashtests.list
@@ -136,6 +136,7 @@ load 767056-1.svg
 load 768351.svg
 load 780963-1.html
 load 757751-1.svg
+load 782141-1.svg
 load 784061-1.svg
 load 790072.svg
 load 791826-1.svg