Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Done
Priority: P1: Critical
Fix Version/s: 6.2.6, 6.4.0 RC1, 6.5.0 Beta1
Affects Version/s: 6.4.0 Beta2
Component/s: GUI: Text handling
Labels:
None

Commits:
9807c4e5af (qt/qtbase/dev) 9807c4e5af (qt/tqtc-qtbase/dev) 42f1166a7f (qt/qtbase/6.3) 42f1166a7f (qt/tqtc-qtbase/6.3) 9fe9c41f83 (qt/qtbase/6.4.0) 7b807cf2f8 (qt/tqtc-qtbase/6.2) 9fe9c41f83 (qt/tqtc-qtbase/6.4.0) 92e38ed3d4 (qt/qtbase/6.4)

Description

                while (i < fragLen) {
                    if (col >= ColumnLimit) {
                        m_stream << Newline << wrapIndentString;
                        col = m_wrappedLineIndent;
                        while (fragmentText[i].isSpace())
                            ++i;
                    }

The inner loop allows i to exceed fragLen, so it can go out of bounds.