diff options
| author | Konstantin Ritt <ritt.ks@gmail.com> | 2014-11-25 15:41:29 +0400 |
|---|---|---|
| committer | Konstantin Ritt <ritt.ks@gmail.com> | 2014-12-24 15:05:24 +0100 |
| commit | e9dbaa328e7d26ad6a7b5fd2490191751a7731b4 (patch) | |
| tree | f4a2b2f62d4388a106e13edefd782adb242adb26 /src/sql/drivers/mysql/qsql_mysql.cpp | |
| parent | 5b11e43e9f7551b9cb1ea7a6effdcab4bfa6b8c9 (diff) | |
Fix potential memory access violation issues
LOGFONT docs clearly states `lfFaceName` member is a null-terminated
string of length not longer than LF_FACESIZE, including trailing null.
This patch covers two cases at once:
1. If family name is longer than LF_FACESIZE - 1, it would be truncated
and terminated with null, to prevent memory access beyond
the LOGFONT instance.
2. If family name is a fromRawData QString, we don't assume it is
null-terminated either and guarantee trailing null ourselves.
Change-Id: I8f607efc7d0901537a4179e36cc51df94203f08d
Reviewed-by: Friedemann Kleint <Friedemann.Kleint@theqtcompany.com>
Reviewed-by: Eskil Abrahamsen Blomfeldt <eskil.abrahamsen-blomfeldt@theqtcompany.com>
Diffstat (limited to 'src/sql/drivers/mysql/qsql_mysql.cpp')
0 files changed, 0 insertions, 0 deletions