summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAllan Sandfeld Jensen <allan.jensen@qt.io>2019-02-28 16:21:41 +0100
committerAllan Sandfeld Jensen <allan.jensen@qt.io>2019-03-01 16:37:36 +0000
commitf354d4be9a7a436fb16bd9764a261c930101850c (patch)
tree83a4a41405c6ecb564e05f7887f0c0187d831acb
parentf6e5dc05855db60eab1568b5fe226922d1c899bb (diff)
downloadqtsvg-f354d4be9a7a436fb16bd9764a261c930101850c.tar.gz
Fix heap overflow in path parsing
Fixes: QTBUG-74129 Change-Id: I871c144f1df288a310e82aef979af7cfd7a54095 Reviewed-by: Robert Loehning <robert.loehning@qt.io>
-rw-r--r--src/svg/qsvghandler.cpp2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/svg/qsvghandler.cpp b/src/svg/qsvghandler.cpp
index 1767ad8..463ec01 100644
--- a/src/svg/qsvghandler.cpp
+++ b/src/svg/qsvghandler.cpp
@@ -1596,7 +1596,7 @@ static bool parsePathDataFast(const QStringRef &dataStr, QPainterPath &path)
const QChar *end = str + dataStr.size();
while (str != end) {
- while (str->isSpace())
+ while (str->isSpace() && (str + 1) != end)
++str;
QChar pathElem = *str;
++str;