MacDue 1012947a30 LibWeb: Use .to_px_or_zero() in tentative_height_for_replaced_element() ...

If just .to_px() is used the height can end up as the float `inf` or
`nan`. This caused an OOM when loading Polygon as this `inf` would
become a `nan` and propagate to the SVG painting, which then attempts
to draw a path with nan control points, which would make the
Gfx::Painter infinitely split the path till it OOM'd.

2023-05-12 05:37:44 +02:00

68 KiB

Raw Blame History

View Raw