Bug 1296678 - Uninitialised value use in nsDisplayBackgroundImage::IsNonEmptyFixedImage. r=botond. a=ritu
authorJulian Seward <jseward@acm.org>
Fri, 26 Aug 2016 09:20:58 +0200
changeset 349995 42711ffd066bd25cc831e82411809c8084b50101
parent 349994 4c1c760f05a81812965bfd3dc5106df0b2a45359
child 349996 c3e815e20c7f689023910729b3178b9728c2cd29
push id1230
push userjlund@mozilla.com
push dateMon, 31 Oct 2016 18:13:35 +0000
treeherdermozilla-release@5e06e3766db2 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersbotond, ritu
bugs1296678
milestone50.0a2
Bug 1296678 - Uninitialised value use in nsDisplayBackgroundImage::IsNonEmptyFixedImage. r=botond. a=ritu
layout/base/nsCSSRendering.cpp
--- a/layout/base/nsCSSRendering.cpp
+++ b/layout/base/nsCSSRendering.cpp
@@ -3593,16 +3593,19 @@ nsCSSRendering::PrepareImageLayer(nsPres
   }
   if (aFlags & nsCSSRendering::PAINTBG_TO_WINDOW) {
     irFlags |= nsImageRenderer::FLAG_PAINTING_TO_WINDOW;
   }
 
   nsBackgroundLayerState state(aForFrame, &aLayer.mImage, irFlags);
   if (!state.mImageRenderer.PrepareImage()) {
     // There's no image or it's not ready to be painted.
+    if (aOutIsTransformedFixed) {
+      *aOutIsTransformedFixed = false;
+    }
     return state;
   }
 
   // The frame to which the background is attached
   nsIFrame* attachedToFrame = aForFrame;
   // Is the background marked 'fixed', but affected by a transform?
   bool transformedFixed = false;
   // Compute background origin area relative to aBorderArea now as we may need