Fix crash in qppmhandler for certain malformed image files
authorEirik Aavitsland <eirik.aavitsland@qt.io>
Thu, 2 Aug 2018 11:11:20 +0000 (13:11 +0200)
committerDmitry Shachnev <mitya57@debian.org>
Fri, 12 Apr 2019 20:10:28 +0000 (21:10 +0100)
commit6a01728fc4e2fdfdd28df9d424e21688530cf8be
treea2f356fda9de86b10a67f3d716ef3c952bd425e6
parentdcb1c59902d53a73f594570140b79b1b2a31c185
Fix crash in qppmhandler for certain malformed image files

The ppm format specifies that the maximum color value field must be
less than 65536. The handler did not enforce this, leading to
potentional overflow when the value was used in 16 bits context.

Task-number: QTBUG-69449
Change-Id: Iea7a7e0f8953ec1ea8571e215687d12a9d77e11c
Reviewed-by: Lars Knoll <lars.knoll@qt.io>
Gbp-Pq: Name CVE-2018-19872.patch
src/gui/image/qppmhandler.cpp