shiboken6: Fix stack-use-after-scope ASAN issues in TypeSystemParser

Remove stream attributes from the attributes list after
the stringview has been dealt with.

Pick-to: 5.15
Fixes: PYSIDE-1655
Change-Id: Ib50b661e93ca164d68981fc3572cc132412f3302
Reviewed-by: Milian Wolff <milian.wolff@kdab.com>

1 files changed, 4 insertions, 2 deletions

diff --git a/sources/shiboken6/ApiExtractor/typesystemparser.cpp b/sources/shiboken6/ApiExtractor/typesystemparser.cpp
index 4b95d2186..7bcf24eab 100644
--- a/sources/shiboken6/ApiExtractor/typesystemparser.cpp
+++ b/sources/shiboken6/ApiExtractor/typesystemparser.cpp
@@ -1360,12 +1360,13 @@ ContainerTypeEntry *
         m_error = QLatin1String("no 'type' attribute specified");
         return nullptr;
     }
-    const auto typeName = attributes->takeAt(typeIndex).value();
+    const auto typeName = attributes->at(typeIndex).value();
     const auto containerTypeOpt = containerTypeFromAttribute(typeName);
     if (!containerTypeOpt.has_value()) {
         m_error = QLatin1String("there is no container of type ") + typeName.toString();
         return nullptr;
     }
+    attributes->removeAt(typeIndex);
     auto *type = new ContainerTypeEntry(name, containerTypeOpt.value(),
                                         since, currentParentTypeEntry());
     if (!applyCommonAttributes(reader, type, attributes))
@@ -1435,7 +1436,7 @@ NamespaceTypeEntry *
             }
             result->setFilePattern(re);
         } else if (attributeName == QLatin1String("extends")) {
-            const auto extendsPackageName = attributes->takeAt(i).value();
+            const auto extendsPackageName = attributes->at(i).value();
             auto allEntries = TypeDatabase::instance()->findNamespaceTypes(name);
             auto extendsIt = std::find_if(allEntries.cbegin(), allEntries.cend(),
                                           [extendsPackageName] (const NamespaceTypeEntry *e) {
@@ -1446,6 +1447,7 @@ NamespaceTypeEntry *
                 return nullptr;
             }
             result->setExtends(*extendsIt);
+            attributes->removeAt(i);
         } else if (attributeName == visibleAttribute()) {
             const auto attribute = attributes->takeAt(i);
             const auto visibilityOpt = visibilityFromAttribute(attribute.value());