-
evan@chromium.org authored
Reviewed by Tony Chang. [chromium] crash on getBoundingClientRect in complex text https://bugs.webkit.org/show_bug.cgi?id=53199 Add a test that reproduces the crash and verifies the resulting values are sane (when it didn't crash, it would get garbage values). * platform/chromium-linux/fast/text/international/complex-text-rectangle-expected.txt: Added. * platform/chromium-linux/fast/text/international/complex-text-rectangle.html: Added. 2011-01-26 Evan Martin <evan@chromium.org> Reviewed by Tony Chang. [chromium] crash on getBoundingClientRect in complex text https://bugs.webkit.org/show_bug.cgi?id=53199 Use the correct array bound; we want the number of characters processed by the shaper, not the longest continuous script run length. Test: platform/chromium-linux/fast/text/international/complex-text-rectangle.html * platform/graphics/chromium/ComplexTextControllerLinux.cpp: (WebCore::ComplexTextController::nextScriptRun): * platform/graphics/chromium/ComplexTextControllerLinux.h: (WebCore::ComplexTextController::numCodePoints): git-svn-id: http://svn.webkit.org/repository/webkit/trunk@76732 268f45cc-cd09-0410-ab3c-d52691b4dbfc
f448b246