diff options
| author | Allan Sandfeld Jensen <allan.jensen@qt.io> | 2020-06-23 10:27:37 +0200 |
|---|---|---|
| committer | Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> | 2020-06-23 17:19:27 +0000 |
| commit | 2603105f7c9f99a04096ecba47b33b9cae80d795 (patch) | |
| tree | 5e6246be5a274d7f9d516db26db9009bcfd91c9d /src/svg/qsvghandler_p.h | |
| parent | 44d3c3535038d3a90142d718ff833f5f1ac2720a (diff) | |
| download | qtsvg-2603105f7c9f99a04096ecba47b33b9cae80d795.tar.gz | |
Fix stack overflow in QSvgHandler::resolveGradients
Add a maximum to how deep it will nest.
Fixes oss-fuzz 23643
Change-Id: I6183c04f65a539a6c7df42bc7346a86ee58aca6c
Reviewed-by: Volker Hilsheimer <volker.hilsheimer@qt.io>
(cherry picked from commit 6b86b5de893e9885f8288af5a096444b30fa2628)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
Diffstat (limited to 'src/svg/qsvghandler_p.h')
| -rw-r--r-- | src/svg/qsvghandler_p.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/svg/qsvghandler_p.h b/src/svg/qsvghandler_p.h index 8eb061b..1b16950 100644 --- a/src/svg/qsvghandler_p.h +++ b/src/svg/qsvghandler_p.h @@ -178,7 +178,7 @@ private: QCss::Parser m_cssParser; #endif void parse(); - void resolveGradients(QSvgNode *node); + void resolveGradients(QSvgNode *node, int nestedDepth = 0); void resolveNodes(); QPen m_defaultPen; |