Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 6f6d0f82d0e30c560939707413c49f7e6a6c7ad9
https://github.com/WebKit/WebKit/commit/6f6d0f82d0e30c560939707413c49f7e6a6c7ad9
Author: Nikolas Zimmermann <[email protected]>
Date: 2026-09-09 (Wed, 09 Sep 2026)
Changed paths:
A LayoutTests/css3/filters/effect-reference-negative-deviation-expected.html
A LayoutTests/css3/filters/effect-reference-negative-deviation.html
M Source/WebCore/svg/SVGFEDropShadowElement.cpp
M Source/WebCore/svg/SVGFEGaussianBlurElement.cpp
Log Message:
-----------
A negative stdDeviation asserts when computing filter outsets
https://bugs.webkit.org/show_bug.cgi?id=323810
Reviewed by Simon Fraser.
ASSERTION FAILED: stdDeviation.width() >= 0 && stdDeviation.height() >= 0
Source/WebCore/platform/graphics/filters/FEGaussianBlur.cpp(114)
A negative stdDeviation turns a filter primitive off, but outsets() did not
check for it and passed the value on to calculateOutsets(), which asserts.
While this was discovered during LBSE testing, it is reproducible with
plain CSS reference filters too - so add a new reftest to cover this.
* LayoutTests/css3/filters/effect-reference-negative-deviation-expected.html:
Added.
* LayoutTests/css3/filters/effect-reference-negative-deviation.html: Added.
* Source/WebCore/svg/SVGFEDropShadowElement.cpp:
(WebCore::SVGFEDropShadowElement::outsets const):
* Source/WebCore/svg/SVGFEGaussianBlurElement.cpp:
(WebCore::SVGFEGaussianBlurElement::outsets const):
Canonical link: https://commits.webkit.org/320797@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
