Re: [PATCH] stroker: Check for scaling overflow in computing half line widths
Miguel Gomez <[email protected]>
| Newsgroups | gmane.comp.lib.cairo |
|---|---|
| Message-ID | <[email protected]> |
Hi! > Given a combination of a large scaling matrix and a large line, we > can > easily generate a half line width that is unrepresentable in our 24.8 > fixed-point. This leads to spurious errors later, such as generating > negative height boxes, and so asking pixman to fill to infinity. To > avoid this, we can check for overflow in calculating the half line > with, > though we still lack adequate range checking on the final stroke > path. Any news about this? Is there anything we can do to help? This is causing a pretty serious security bug in Webkit that we would like to fix. Thanks for your help!! :) -- Miguel Gomez Igalia - www.igalia.com -- cairo mailing list [email protected] https://lists.cairographics.org/mailman/listinfo/cairo