diff options
| author | Liang Qi <liang.qi@qt.io> | 2020-05-15 09:01:29 +0200 |
|---|---|---|
| committer | Liang Qi <liang.qi@qt.io> | 2020-05-18 08:54:55 +0200 |
| commit | 304891f65b998f2d859146a94a276783a76d0d1a (patch) | |
| tree | e314cbf825124371396e513222828f6ac7e0bf1d /src/qml/jsruntime | |
| parent | 5f7225711c90cfc8ea6e32cd6322d07273bf7a40 (diff) | |
| parent | 0ae26f8c574411cbab748128a317cc08dafe2382 (diff) | |
Merge "Merge remote-tracking branch 'origin/5.15' into dev"
Diffstat (limited to 'src/qml/jsruntime')
| -rw-r--r-- | src/qml/jsruntime/qv4dataview.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/qml/jsruntime/qv4dataview.cpp b/src/qml/jsruntime/qv4dataview.cpp index bb1acb963e..264057e162 100644 --- a/src/qml/jsruntime/qv4dataview.cpp +++ b/src/qml/jsruntime/qv4dataview.cpp @@ -92,7 +92,7 @@ ReturnedValue DataViewCtor::virtualCallAsConstructor(const FunctionObject *f, co uint byteLength = (argc < 3 || argv[2].isUndefined()) ? (bufferLength - offset) : ::toIndex(scope.engine, argv[2]); if (scope.hasException()) return Encode::undefined(); - if (offset + byteLength > bufferLength) + if (offset > bufferLength || byteLength > bufferLength - offset) return scope.engine->throwRangeError(QStringLiteral("DataView: constructor arguments out of range")); Scoped<DataView> a(scope, scope.engine->memoryManager->allocate<DataView>()); |