Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-82153

Exponential use node instantiation in SVG

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • P2: Important
    • 5.14.2, 5.15.0 Beta2
    • 5.14.1
    • SVG Support
    • None
    • 45530ad4c5c6d3e90fe6d5a63f3bb551f37ad917 (qt/qtsvg/5.14)

    Description

      Processing this file results in performance issues. Perhaps there should be a limit to how many refererred components are instantiated

      https://unshorn.github.io/stack.svg

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. QTBUG-47417 exponential entity expansion attack using svg

          • P1: Critical - Urgent and Important, will STOP the release if matched with set FixVersion field. This includes regressions from the last version that are not edge cases; Data loss; Build issues; All but the most unlikely crashes/lockups/hanging; Serious usability issues and embarrassing bugs & Bugs critical to a deliverable. This is the highest possible priority for requirements.
          • Closed
          For Gerrit Dashboard: QTBUG-82153
          # Subject Branch Project Status CR V
          291318,3 Restrict nested use nodes processed 5.14 qt/qtsvg Status: MERGED +2 0

          Activity

            People

              allan.jensen Allan Sandfeld Jensen
              shawn Shawn Rashed
              Votes:
              1 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes