Fix possible heap corruption in QXmlStream
authorAllan Sandfeld Jensen <allan.jensen@qt.io>
Mon, 13 Aug 2018 13:29:16 +0000 (15:29 +0200)
committerDmitry Shachnev <mitya57@debian.org>
Fri, 12 Apr 2019 20:10:28 +0000 (21:10 +0100)
commita5aa6e6483082699d516ca6a9bad2485c35a8014
tree750cd392b006914b85b9bf6912089412e62d8265
parentd0ddb4fce92ae93410861238507479be549947d5
Fix possible heap corruption in QXmlStream

The value of 'tos' at the check might already be on the last element,
so triggering stack expansion on the second last element is too late.

Change-Id: Ib3ab2662d4d27a71effe9e988b9e172923af2908
Reviewed-by: Richard J. Moore <rich@kde.org>
Reviewed-by: Thiago Macieira <thiago.macieira@intel.com>
Gbp-Pq: Name CVE-2018-15518.patch
src/corelib/xml/qxmlstream_p.h