mirror of
https://gitlab.winehq.org/wine/wine-gecko.git
synced 2024-09-13 09:24:08 -07:00
Bug 873222 - check unit-type of font-synthesis value before use. r=dbaron
This commit is contained in:
parent
0456f8b637
commit
59939e8ef8
@ -592,6 +592,7 @@ Declaration::GetValue(nsCSSProperty aProperty, nsAString& aValue) const
|
||||
featureSettings.GetUnit() != eCSSUnit_Normal ||
|
||||
languageOverride.GetUnit() != eCSSUnit_Normal ||
|
||||
fontKerning.GetIntValue() != NS_FONT_KERNING_AUTO ||
|
||||
fontSynthesis.GetUnit() != eCSSUnit_Enumerated ||
|
||||
fontSynthesis.GetIntValue() !=
|
||||
(NS_FONT_SYNTHESIS_WEIGHT | NS_FONT_SYNTHESIS_STYLE) ||
|
||||
fontVariantAlternates.GetUnit() != eCSSUnit_Normal ||
|
||||
|
17
layout/style/crashtests/873222.html
Normal file
17
layout/style/crashtests/873222.html
Normal file
@ -0,0 +1,17 @@
|
||||
<!DOCTYPE html>
|
||||
<html>
|
||||
<head>
|
||||
<script>
|
||||
|
||||
function boom()
|
||||
{
|
||||
var r = document.documentElement;
|
||||
r.style.font = "170% fantasy";
|
||||
r.style.fontSynthesis = "none";
|
||||
r.getAttribute("style");
|
||||
}
|
||||
|
||||
</script>
|
||||
</head>
|
||||
<body onload="boom();"></body>
|
||||
</html>
|
@ -94,3 +94,4 @@ load 842134.html
|
||||
load 862113.html
|
||||
load 867487.html
|
||||
load 880862.html
|
||||
load 873222.html
|
||||
|
Loading…
Reference in New Issue
Block a user