Fix possible heap corruption in QXmlStream
authorAllan Sandfeld Jensen <allan.jensen@qt.io>
Mon, 13 Aug 2018 13:29:16 +0000 (15:29 +0200)
committerMike Gabriel <sunweaver@debian.org>
Tue, 7 May 2019 07:14:21 +0000 (08:14 +0100)
commit5db09531c4d7856e12ba20b2ef6091a758bb0982
tree37084183ea766e037d31ae84a33b3a00ecd088ee
parent988abc848b9c4c0837f763e3b9d6b4c2ba6972e8
Fix possible heap corruption in QXmlStream

The value of 'tos' at the check might already be on the last element,
so triggering stack expansion on the second last element is too late.

Change-Id: Ib3ab2662d4d27a71effe9e988b9e172923af2908
Reviewed-by: Richard J. Moore <rich@kde.org>
Reviewed-by: Thiago Macieira <thiago.macieira@intel.com>
Gbp-Pq: Name cve_2018-15518.patch
src/corelib/xml/qxmlstream_p.h