0ee6ccbd82
* Sun Jul 26 2009 Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.4-6 - fix CVE-2009-1725 - crash, possible ACE in numeric character references - fix CVE-2009-1690 - crash, possible ACE in KHTML (<head> use-after-free) - fix CVE-2009-1687 - possible ACE in KJS (FIXME: still crashes?) - fix CVE-2009-1698 - crash, possible ACE in CSS style attribute handling - fix CVE-2009-0945 - NULL-pointer dereference in the SVGList interface impl * Thu Jul 23 2009 Jaroslav Reznik <jreznik@redhat.com> - 4.2.4-5 - CVE-2009-2537 - select length DoS - correct fixPopupForPlasmaboard.patch * Wed Jul 08 2009 Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.4-4 - fix CMake dependency in parallel_devel patch (#510259, CHIKAMA Masaki) * Mon Jun 15 2009 Rex Dieter <rdieter@fedoraproject.org> 4.2.4-3 - fixPopupForPlasmaboard.patch
18 lines
554 B
Diff
18 lines
554 B
Diff
Index: khtml/svg/SVGList.h
|
|
===================================================================
|
|
--- khtml/svg/SVGList.h (revision 983301)
|
|
+++ khtml/svg/SVGList.h (revision 983302)
|
|
@@ -97,7 +97,11 @@
|
|
|
|
Item insertItemBefore(Item newItem, unsigned int index, ExceptionCode&)
|
|
{
|
|
- m_vector.insert(index, newItem);
|
|
+ if (index < m_vector.size()) {
|
|
+ m_vector.insert(index, newItem);
|
|
+ } else {
|
|
+ m_vector.append(newItem);
|
|
+ }
|
|
return newItem;
|
|
}
|
|
|