diff options
| author | Olivier Goffart <olivier.goffart@nokia.com> | 2010-11-10 16:02:02 (GMT) |
|---|---|---|
| committer | Olivier Goffart <olivier.goffart@nokia.com> | 2010-11-10 16:19:27 (GMT) |
| commit | 27fe0f93f961e78b71cd0b729a0e324b847ec023 (patch) | |
| tree | be4efe7953e8c5f7834ac5e71cd843d43a80e744 /tests/auto/qxmlschema | |
| parent | 46d2d05e3a95eefae1c72f55d57cbea4ce27d14e (diff) | |
| download | Qt-27fe0f93f961e78b71cd0b729a0e324b847ec023.zip Qt-27fe0f93f961e78b71cd0b729a0e324b847ec023.tar.gz Qt-27fe0f93f961e78b71cd0b729a0e324b847ec023.tar.bz2 | |
Fix crash in tst_QByteArray::qUncompress
On 64-bit systems, len + sizeof(QByteArray::Data) could overflow and become 0
In this case, qRealloc could succeed and return 0, leading to a double free.
Reviewed-by: Joao
Diffstat (limited to 'tests/auto/qxmlschema')
0 files changed, 0 insertions, 0 deletions