From 7f57472e24a45a9cb56c7742f4c031405262ef98 Mon Sep 17 00:00:00 2001
From: Shawn Rutledge <shawn.rutledge@qt.io>
Date: Wed, 3 Oct 2018 17:09:40 +0200
Subject: Warn, don't crash during nested delivery of mouse or touch presses

If during delivery of a mouse press, user code calls qApp->sendEvent()
with another mouse press, then when delivery of the nested event is
finished, we call QQuickPointerMouseEvent::reset(nullptr).  Then when
delivery of the original mouse press resumes, crashes are possible
because most of the code assumes that QQuickPointerEvent::m_event is
not null during delivery.

Change-Id: Id65b1f2f64351e40d03bcd4f4d16693d616729da
Fixes: QTBUG-70898
Reviewed-by: Shawn Rutledge <shawn.rutledge@qt.io>
---
 .../quick/qquickmousearea/data/nestedSendEvent.qml | 49 ++++++++++++++++++++++
 .../quick/qquickmousearea/tst_qquickmousearea.cpp  | 33 +++++++++++++++
 2 files changed, 82 insertions(+)
 create mode 100644 tests/auto/quick/qquickmousearea/data/nestedSendEvent.qml

(limited to 'tests')

diff --git a/tests/auto/quick/qquickmousearea/data/nestedSendEvent.qml b/tests/auto/quick/qquickmousearea/data/nestedSendEvent.qml
new file mode 100644
index 0000000000..908a43b04e
--- /dev/null
+++ b/tests/auto/quick/qquickmousearea/data/nestedSendEvent.qml
@@ -0,0 +1,49 @@
+import QtQuick 2.11
+import QtQuick.Window 2.11
+import Test 1.0
+
+Window {
+    id: window
+    visible: true
+    width: 200
+    height: 200
+
+    property EventSender sender: EventSender { }
+
+    Item {
+        width: 200
+        height: 200
+
+        MouseArea {
+            anchors.fill: parent
+        }
+
+        Item {
+            width: 200
+            height: 200
+
+            Rectangle {
+                width: 200
+                height: 100
+                color: "red"
+
+                MouseArea {
+                    anchors.fill: parent
+                    onPressed: sender.sendMouseClick(window, 50, 50)
+                }
+            }
+
+            Rectangle {
+                y: 100
+                width: 200
+                height: 100
+                color: "yellow"
+
+                MouseArea {
+                    anchors.fill: parent
+                    onPressed: sender.sendMouseClick(window, 50, 50)
+                }
+            }
+        }
+    }
+}
diff --git a/tests/auto/quick/qquickmousearea/tst_qquickmousearea.cpp b/tests/auto/quick/qquickmousearea/tst_qquickmousearea.cpp
index aa379e834e..558ca2e759 100644
--- a/tests/auto/quick/qquickmousearea/tst_qquickmousearea.cpp
+++ b/tests/auto/quick/qquickmousearea/tst_qquickmousearea.cpp
@@ -98,6 +98,22 @@ private:
     qreal m_radius;
 };
 
+class EventSender : public QObject {
+    Q_OBJECT
+
+public:
+    Q_INVOKABLE void sendMouseClick(QObject* obj ,qreal x , qreal y) {
+        {
+            QMouseEvent event(QEvent::MouseButtonPress, QPointF(x , y), Qt::LeftButton, Qt::LeftButton, Qt::NoModifier);
+            qApp->sendEvent(obj, &event);
+        }
+        {
+            QMouseEvent event(QEvent::MouseButtonRelease, QPointF(x , y), Qt::LeftButton, Qt::LeftButton, Qt::NoModifier);
+            qApp->sendEvent(obj, &event);
+        }
+    }
+};
+
 class tst_QQuickMouseArea: public QQmlDataTest
 {
     Q_OBJECT
@@ -106,6 +122,7 @@ public:
         : device(nullptr)
     {
         qmlRegisterType<CircleMask>("Test", 1, 0, "CircleMask");
+        qmlRegisterType<EventSender>("Test", 1, 0, "EventSender");
     }
 
 private slots:
@@ -165,6 +182,7 @@ private slots:
     void pressOneAndTapAnother_data();
     void pressOneAndTapAnother();
     void mask();
+    void nestedEventDelivery();
 
 private:
     int startDragDistance() const {
@@ -2298,6 +2316,21 @@ void tst_QQuickMouseArea::mask()
     QCOMPARE(window.rootObject()->property("clicked").toInt(), 1);
 }
 
+void tst_QQuickMouseArea::nestedEventDelivery() // QTBUG-70898
+{
+    QQmlEngine engine;
+    QQmlComponent c(&engine, testFileUrl("nestedSendEvent.qml"));
+    QScopedPointer<QQuickWindow> window(qmlobject_cast<QQuickWindow *>(c.create()));
+    QVERIFY(window.data());
+
+    // Click each MouseArea and verify that it doesn't crash
+    QByteArray message = "event went missing during delivery! (nested sendEvent() is not allowed)";
+    QTest::ignoreMessage(QtWarningMsg, message);
+    QTest::mouseClick(window.data(), Qt::LeftButton, Qt::NoModifier, QPoint(50,50));
+    QTest::ignoreMessage(QtWarningMsg, message); // twice though, actually
+    QTest::mouseClick(window.data(), Qt::LeftButton, Qt::NoModifier, QPoint(50,150));
+}
+
 QTEST_MAIN(tst_QQuickMouseArea)
 
 #include "tst_qquickmousearea.moc"
-- 
cgit v1.2.3