Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-104999

crash in QTextMarkdownWriter

XMLWordPrintable

    • 9807c4e5af (qt/qtbase/dev) 9807c4e5af (qt/tqtc-qtbase/dev) 42f1166a7f (qt/qtbase/6.3) 42f1166a7f (qt/tqtc-qtbase/6.3) 9fe9c41f83 (qt/qtbase/6.4.0) 7b807cf2f8 (qt/tqtc-qtbase/6.2) 9fe9c41f83 (qt/tqtc-qtbase/6.4.0) 92e38ed3d4 (qt/qtbase/6.4) 

                      while (i < fragLen) {
                    if (col >= ColumnLimit) {
                        m_stream << Newline << wrapIndentString;
                        col = m_wrappedLineIndent;
                        while (fragmentText[i].isSpace())
                            ++i;
                    }

      The inner loop allows i to exceed fragLen, so it can go out of bounds.

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

            srutledg Shawn Rutledge
            srutledg Shawn Rutledge
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved:

                There are no open Gerrit changes