CVE-2014-0190 - Affects Qt4 and Qt5

[Fernando de Oliveira]

​https://bugzilla.redhat.com/show_bug.cgi?id=1088142

​http://lists.qt-project.org/pipermail/announce/2014-April/000045.html

Qt Security Advisory: DoS vulnerability in the GIF image handler

Solution
--------

Upgrade to Qt 5.3 once released or apply the patches below:

For Qt 5.0 to 5.2:

https://codereview.qt-project.org/#change,84034

For Qt 4.8:

https://codereview.qt-project.org/#change,84035

[bdubbs@…]

Basically one line:

if (image->isNull()) { state = Error; return -1; }

Added to src/gui/image/qgifhandler.cpp after line 361 for both qt5 and qt4.

sed -i -e '631a if (image->isNull()) { state = Error; return -1; }' \

src/gui/image/qgifhandler.cpp

[Fernando de Oliveira]

Thanks, Bruce.

I need to stop now. I'll do it first thing in the morning, if not done before that by someone else.

[Fernando de Oliveira]

Fixed at r13026.