Details
-
Bug
-
Resolution: Done
-
P1: Critical
-
5.12.4, 5.12.5, 5.13.1
-
-
00ae3b2323e9b138b0b43f301ec9da9407c66600
Description
When I call a function with 14 parameters in QML I get a segfault in:
qv4stackframe_p.h line 190:
memset(jsFrame->args + argc, 0, (nRegisters - argc)*sizeof(Value));
nRegisters is 11 and argc is 14, so the third parameters yields -3*sizeof(Value) which is converted to size_t.
I guess the memset should only be done in case argc<nRegisters?