diff options
author | Allan Sandfeld Jensen <allan.jensen@qt.io> | 2019-02-28 16:21:41 +0100 |
---|---|---|
committer | Allan Sandfeld Jensen <allan.jensen@qt.io> | 2019-03-01 16:37:36 +0000 |
commit | f354d4be9a7a436fb16bd9764a261c930101850c (patch) | |
tree | 83a4a41405c6ecb564e05f7887f0c0187d831acb /src | |
parent | f6e5dc05855db60eab1568b5fe226922d1c899bb (diff) | |
download | qtsvg-f354d4be9a7a436fb16bd9764a261c930101850c.tar.gz |
Fix heap overflow in path parsing
Fixes: QTBUG-74129
Change-Id: I871c144f1df288a310e82aef979af7cfd7a54095
Reviewed-by: Robert Loehning <robert.loehning@qt.io>
Diffstat (limited to 'src')
-rw-r--r-- | src/svg/qsvghandler.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/svg/qsvghandler.cpp b/src/svg/qsvghandler.cpp index 1767ad8..463ec01 100644 --- a/src/svg/qsvghandler.cpp +++ b/src/svg/qsvghandler.cpp @@ -1596,7 +1596,7 @@ static bool parsePathDataFast(const QStringRef &dataStr, QPainterPath &path) const QChar *end = str + dataStr.size(); while (str != end) { - while (str->isSpace()) + while (str->isSpace() && (str + 1) != end) ++str; QChar pathElem = *str; ++str; |