diff options
author | Topi Reiniƶ <topi.reinio@nokia.com> | 2010-11-04 13:20:02 (GMT) |
---|---|---|
committer | Topi Reiniƶ <topi.reinio@nokia.com> | 2010-11-04 13:20:02 (GMT) |
commit | 440888de851daad78d89f2958aa95e9193832fb5 (patch) | |
tree | 5a0fac499bbba1154dd5bb5c90fda0de28c1435f /translations | |
parent | 018c0ebc7d7ffaa55bf5a80b2a8a0e3ee1ebcc7b (diff) | |
download | Qt-440888de851daad78d89f2958aa95e9193832fb5.zip Qt-440888de851daad78d89f2958aa95e9193832fb5.tar.gz Qt-440888de851daad78d89f2958aa95e9193832fb5.tar.bz2 |
Prevent access to non-existent memory in QGL2PEXVertexArray
QGL2PEXVertexArray::addClosingLine() uses using QDataBuffer::add() to
add a QPointF at the end, with a const reference to another value in
the same array. As add() resizes and possibly relocates the buffer, an
already-released memory location may be accessed.
This change copies the value into a temporary variable before resizing
the array.
Task-number: QTBUG-14944
Reviewed-by: Samuel
Diffstat (limited to 'translations')
0 files changed, 0 insertions, 0 deletions