summaryrefslogtreecommitdiffstats
path: root/src/gui/painting/qcolor.cpp
diff options
context:
space:
mode:
authorRobert Loehning <robert.loehning@qt.io>2020-07-08 19:32:48 +0200
committerRobert Loehning <robert.loehning@qt.io>2020-07-13 10:26:25 +0200
commit3094bcc3c5a30635289f534884965d39ac35a11a (patch)
tree1c04b5a4e06381955cd807174d50d529711ee1f6 /src/gui/painting/qcolor.cpp
parent3dff5e6316c1a4badb8fd3556f79f571f5cb1e5d (diff)
Check returns of hex2int in get_hex_rgb
Avoids undefined behavior when trying to shift negative values. Fixes: oss-fuzz-21860 Fixes: oss-fuzz-23968 Pick-to: 5.15 5.12 Change-Id: I879c97624e3f8ba9cf01e0a3a682379cd8c4a199 Reviewed-by: Volker Hilsheimer <volker.hilsheimer@qt.io>
Diffstat (limited to 'src/gui/painting/qcolor.cpp')
-rw-r--r--src/gui/painting/qcolor.cpp2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/gui/painting/qcolor.cpp b/src/gui/painting/qcolor.cpp
index 06376f224b..496d906c27 100644
--- a/src/gui/painting/qcolor.cpp
+++ b/src/gui/painting/qcolor.cpp
@@ -90,6 +90,8 @@ static bool get_hex_rgb(const char *name, size_t len, QRgba64 *rgb)
r = hex2int(name + 0, 3);
g = hex2int(name + 3, 3);
b = hex2int(name + 6, 3);
+ if (r == -1 || g == -1 || b == -1)
+ return false;
r = (r << 4) | (r >> 8);
g = (g << 4) | (g >> 8);
b = (b << 4) | (b >> 8);