Skip to content

Do stricter error checking when parsing path nodes

Andreas Sturmlechner requested to merge asturmlechner/qtsvg:CVE-2021-45930 into kde/5.15

The SVG spec mandates that path parsing should terminate on the first error encountered, and an error be reported. To improve the handling of corrupt files, implement such error handling, and also limit the number of QPainterPath elements to a reasonable range.

Fixes: QTBUG-96044 Pick-to: 6.2 5.15 5.12 Change-Id: Ic5e65d6b658516d6f1317c72de365c8c7ad81891 Reviewed-by: Allan Sandfeld Jensen allan.jensen@qt.io Reviewed-by: Robert Löhning robert.loehning@qt.io (cherry picked from commit 36cfd9ef)

Merge request reports