File: reject_oversize_svgs.diff

package info (click to toggle)
qtsvg-opensource-src 5.15.17-2
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 15,092 kB
  • sloc: cpp: 15,448; makefile: 19; ansic: 18; xml: 14
file content (16 lines) | stat: -rw-r--r-- 711 bytes parent folder | download | duplicates (3) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
 
Description: SVG Image reading: Reject oversize svgs as corrupt
 Add an upper limit for height and width at 0xffff, same as jpeg.
Origin: upstream, https://code.qt.io/cgit/qt/qtsvg.git/commit/?id=e544d8e457d52b54
Last-Update: 2022-01-09

--- a/src/plugins/imageformats/svg/qsvgiohandler.cpp
+++ b/src/plugins/imageformats/svg/qsvgiohandler.cpp
@@ -191,6 +191,8 @@ bool QSvgIOHandler::read(QImage *image)
             }
         }
         if (!finalSize.isEmpty()) {
+            if (qMax(finalSize.width(), finalSize.height()) > 0xffff)
+                return false; // Assume corrupted file
             image->fill(d->backColor.rgba());
             QPainter p(image);
             d->r.render(&p, bounds);