diff options
author | Robert Loehning <robert.loehning@qt.io> | 2020-07-16 21:14:58 +0200 |
---|---|---|
committer | Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> | 2020-07-31 13:08:24 +0000 |
commit | a2b1ab0e6e85f684db15cb793c36145f0bc4e45d (patch) | |
tree | 46be0d129ecf0822ded8e9e13a5045ba8f156d31 /LICENSE.QT-LICENSE-AGREEMENT | |
parent | df65a30d5c13174600ce8bdd9347bca37cf1e77b (diff) |
Sanitize lengthValue in CSS parser
Limit the LengthData to the integer range before rounding it, taking
into account that qRound() substracts 1 from negative values.
Fixes: oss-fuzz-23220
Change-Id: I1b4383f3c33aac22746831002b2c74fc134faf77
Reviewed-by: Edward Welbourne <edward.welbourne@qt.io>
(cherry picked from commit 188501fe27899cdc6a1aacf0d8c1a11144bd564a)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
Diffstat (limited to 'LICENSE.QT-LICENSE-AGREEMENT')
0 files changed, 0 insertions, 0 deletions