Details
-
Bug
-
Resolution: Fixed
-
P1: Critical
-
5.10.1, 6.9
-
Ubuntu 22.04 LTS
-
42bd879e2 (dev), e63884c59 (6.9), e25f93c15 (6.8), 27c3e8b94 (dev)
Description
Simply open the attached svg file:
<svg><radialGradient id="grd2" cx="340266920938463463374607431767777777777"></radialGradient><text stroke="url(#grd2)">N</text><text x="302"></text></svg>
You can use it to construct a QSvgRenderer and then call render(QPainter *) on that or you can just try opening it in Qt Creator. Both will lead to a crash.
Google's oss-fuzz found this as issue 42533347. Their report is public.
Attachments
Issue Links
- relates to
-
-
- Closed
-
| For Gerrit Dashboard: QTBUG-130992 | ||||||
|---|---|---|---|---|---|---|
| # | Subject | Branch | Project | Status | CR | V |
| 603190,6 | Add test for huge radialGradient which crashed painting | dev | qt/qtsvg | Status: ABANDONED | 0 | -1 |
| 611961,3 | WIP: Don't use SSE2 for qt_fetch_radial_gradient | dev | qt/qtbase | Status: ABANDONED | -2 | +1 |
| 612012,4 | QRadialGradient: Fix crash on huge x values | dev | qt/qtbase | Status: MERGED | +2 | +1 |
| 612439,4 | QRadialGradient: Fix crash on huge x values | 6.9 | qt/qtbase | Status: MERGED | +2 | 0 |
| 612473,2 | fuzzing: Add svg file which crashed painting | dev | qt/qtqa | Status: MERGED | +2 | 0 |
| 612852,2 | QRadialGradient: Fix crash on huge x values | 6.8 | qt/qtbase | Status: MERGED | +2 | 0 |