Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-104999

crash in QTextMarkdownWriter

    XMLWordPrintable

Details

    • 9807c4e5af (qt/qtbase/dev) 9807c4e5af (qt/tqtc-qtbase/dev) 42f1166a7f (qt/qtbase/6.3) 42f1166a7f (qt/tqtc-qtbase/6.3) 9fe9c41f83 (qt/qtbase/6.4.0) 7b807cf2f8 (qt/tqtc-qtbase/6.2) 9fe9c41f83 (qt/tqtc-qtbase/6.4.0) 92e38ed3d4 (qt/qtbase/6.4)

    Description

                      while (i < fragLen) {
                          if (col >= ColumnLimit) {
                              m_stream << Newline << wrapIndentString;
                              col = m_wrappedLineIndent;
                              while (fragmentText[i].isSpace())
                                  ++i;
                          }
      

      The inner loop allows i to exceed fragLen, so it can go out of bounds.

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              srutledg Shawn Rutledge
              srutledg Shawn Rutledge
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes