[Pidgin] #14489: crash in the gtk dialogue when displaying (at least svg) on linux

[Pidgin]

#14489: crash in the gtk dialogue when displaying (at least svg) on linux
--------------------+-------------------------------------------------------
 Reporter:  db++    |        Owner:  rekkanoryo  
     Type:  defect  |       Status:  new         
Milestone:          |    Component:  unclassified
  Version:  2.9.0   |   Resolution:              
 Keywords:          |  
--------------------+-------------------------------------------------------
Description changed by db++:

Old description:

> {{{Hi, I was playing with custom emoticon images and wondered if 'svg
> worked'  it appeared to work fine :)
> well ... until I tried to 'try this' svg (don't ask ;) )
> <svg width="-10000" height="-100%" version="1.1"
> xmlns="http://www.w3.org/2000/svg">
> <rect width="100000" height="100" style="fill:rgb(-0,-0,-255);stroke-
> width:-1; stroke:rgb(0,0,133333333333333333)"/>
> </svg>
> ----> pidgin crashes in the 'preview' view for this svg image.
> In some strange world, maybe there is a multi-user system running pidgin
> and ... $bob puts an svg in /tmp called
> 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA' (so that it will
> be 'selected' when $otheruser goes into the /tmp folder & pidgin will
> crash).
> In the real world, this is probably completely harmless :)
>
> }}}

New description:

 {{{Hi, I was playing with custom emoticon images and wondered if 'svg
 worked'  it appeared to work fine :)
 well ... until I tried to 'try this' svg (don't ask ;) )
 <svg width="-10000" height="-100%" version="1.1"
 xmlns="http://www.w3.org/2000/svg">
 <rect width="100000" height="100" style="fill:rgb(-0,-0,-255);stroke-
 width:-1; stroke:rgb(0,0,133333333333333333)"/>
 </svg>
  ----> pidgin crashes in the 'preview' view for this svg image.
 In some strange world, maybe there is a multi-user system running pidgin
 and ... $bob puts an svg in /tmp called
 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA' (so that it will
 be 'selected' when $otheruser goes into the /tmp folder & pidgin will
 crash).
 In the real world, this is probably completely harmless :)

 }}}

--

-- 
Ticket URL: <http://developer.pidgin.im/ticket/14489#comment:2>
Pidgin <http://pidgin.im>
Pidgin