4 files changed, 14 insertions, 14 deletions

diff --git a/src/gui/text/qcssparser.cpp b/src/gui/text/qcssparser.cpp
index 7f2c01d4d3..bcdeafdbbd 100644
--- a/src/gui/text/qcssparser.cpp
+++ b/src/gui/text/qcssparser.cpp
@@ -1140,14 +1140,14 @@ static bool setFontSizeFromValue(QCss::Value value, QFont *font, int *fontSizeAd
         s.chop(2);
         value.variant = s;
         if (value.variant.convert((QVariant::Type)qMetaTypeId<qreal>())) {
-            font->setPointSizeF(value.variant.toReal());
+            font->setPointSizeF(qBound(qreal(0), value.variant.toReal(), qreal(1 << 24) - 1));
             valid = true;
         }
     } else if (s.endsWith(QLatin1String("px"), Qt::CaseInsensitive)) {
         s.chop(2);
         value.variant = s;
         if (value.variant.convert(QMetaType::Int)) {
-            font->setPixelSize(value.variant.toInt());
+            font->setPixelSize(qBound(0, value.variant.toInt(), (1 << 24) - 1));
             valid = true;
         }
     }
diff --git a/src/gui/text/qfontdatabase.cpp b/src/gui/text/qfontdatabase.cpp
index 0f5219410d..72dcac6904 100644
--- a/src/gui/text/qfontdatabase.cpp
+++ b/src/gui/text/qfontdatabase.cpp
@@ -503,10 +503,12 @@ void QFontDatabasePrivate::invalidate()
     emit static_cast<QGuiApplication *>(QCoreApplication::instance())->fontDatabaseChanged();
 }
 
-QtFontFamily *QFontDatabasePrivate::family(const QString &f, FamilyRequestFlags flags)
+QtFontFamily *QFontDatabasePrivate::family(const QString &family, FamilyRequestFlags flags)
 {
     QtFontFamily *fam = nullptr;
 
+    const QString f = family.trimmed();
+
     int low = 0;
     int high = count;
     int pos = count / 2;
diff --git a/src/gui/text/qfontmetrics.cpp b/src/gui/text/qfontmetrics.cpp
index 6c63d94535..72e3969427 100644
--- a/src/gui/text/qfontmetrics.cpp
+++ b/src/gui/text/qfontmetrics.cpp
@@ -273,9 +273,8 @@ bool QFontMetrics::operator ==(const QFontMetrics &other) const
     The ascent of a font is the distance from the baseline to the
     highest position characters extend to. In practice, some font
     designers break this rule, e.g. when they put more than one accent
-    on top of a character, or to accommodate an unusual character in
-    an exotic language, so it is possible (though rare) that this
-    value will be too small.
+    on top of a character, or to accommodate a certain character, so it
+    is possible (though rare) that this value will be too small.
 
     \sa descent()
 */
@@ -310,8 +309,8 @@ int QFontMetrics::capHeight() const
 
     The descent is the distance from the base line to the lowest point
     characters extend to. In practice, some font designers break this rule,
-    e.g. to accommodate an unusual character in an exotic language, so
-    it is possible (though rare) that this value will be too small.
+    e.g. to accommodate a certain character, so it is possible (though
+    rare) that this value will be too small.
 
     \sa ascent()
 */
@@ -1242,9 +1241,8 @@ bool QFontMetricsF::operator ==(const QFontMetricsF &other) const
     The ascent of a font is the distance from the baseline to the
     highest position characters extend to. In practice, some font
     designers break this rule, e.g. when they put more than one accent
-    on top of a character, or to accommodate an unusual character in
-    an exotic language, so it is possible (though rare) that this
-    value will be too small.
+    on top of a character, or to accommodate a certain character, so
+    it is possible (though rare) that this value will be too small.
 
     \sa descent()
 */
@@ -1280,8 +1278,8 @@ qreal QFontMetricsF::capHeight() const
     The descent is the distance from the base line to the lowest point
     characters extend to. (Note that this is different from X, which
     adds 1 pixel.) In practice, some font designers break this rule,
-    e.g. to accommodate an unusual character in an exotic language, so
-    it is possible (though rare) that this value will be too small.
+    e.g. to accommodate a certain character, so it is possible (though
+    rare) that this value will be too small.
 
     \sa ascent()
 */
diff --git a/src/gui/text/qtexthtmlparser.cpp b/src/gui/text/qtexthtmlparser.cpp
index 8b58f69770..124c530cb5 100644
--- a/src/gui/text/qtexthtmlparser.cpp
+++ b/src/gui/text/qtexthtmlparser.cpp
@@ -1677,7 +1677,7 @@ void QTextHtmlParser::applyAttributes(const QStringList &attributes)
                         node->tableCellRowSpan = qMax(1, node->tableCellRowSpan);
                 } else if (key == QLatin1String("colspan")) {
                     if (setIntAttribute(&node->tableCellColSpan, value))
-                        node->tableCellColSpan = qMax(1, node->tableCellColSpan);
+                        node->tableCellColSpan = qBound(1, node->tableCellColSpan, 20480);
                 }
                 break;
             case Html_table: