Details
-
Bug
-
Resolution: Incomplete
-
P2: Important
-
None
-
5.15, 6.x
-
None
-
Tested with Qt 5.10.0 on Windows
Description
Repeated calls to
QWidgetItemV2::heightForWidth(int width)
(e.g. in a UI that is constantly updating) lead to an overflow of
QWidgetItemV2::q_firstCachedHfw
resulting in a negative index into
q_cachedHfws
and subsequent memory corruption.
Recommend to change datatype of
QWidgetItemV2::q_firstCachedHfw
to
unsigned short
This also applies to the local variable
int offset
A change to
unsigned short
would be good.