Details
-
Bug
-
Resolution: Fixed
-
P2: Important
-
6.5.3
-
-
96f1ef1c1 (dev), 7878c8b6f (6.7), e0fbc8d35 (6.6), 9c15588a5 (tqtc/lts-6.5)
Description
If QTextDocument is cloned() after the call of QTextCursor::removeSelectedText() it Asserts/Crash.
This tiny example reproduces it
Attachments
For Gerrit Dashboard: QTBUG-120962 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
533397,2 | Fix out of bounds access during QTextDocument cloning | dev | qt/qtbase | Status: MERGED | +2 | 0 |
533459,2 | Fix out of bounds access during QTextDocument cloning | 6.7 | qt/qtbase | Status: MERGED | +2 | 0 |
533622,2 | Fix out of bounds access during QTextDocument cloning | 6.6 | qt/qtbase | Status: MERGED | +2 | 0 |
533704,2 | Fix out of bounds access during QTextDocument cloning | tqtc/lts-6.5 | qt/tqtc-qtbase | Status: MERGED | +2 | 0 |