[Qt-interest] External font loading in Qt Webkit

Strahinja Markovic strahinja.markovic at gmail.com
Mon Jul 20 13:19:08 CEST 2009


<Oliver.Knoll at comit.ch> wrote in message 
news:C10F29AB06447B4881FC0DE1E302E2F2EBB68D58 at sg000036.corproot.net...
> Strahinja Markovic wrote on Sunday, July 19, 2009 8:05 PM:
>
>> Dear newsgroup,
>>
>> It's been pointed out that I should use CSS styling for the italic
>> text. My application uses them exclusively. The example uses
>> "<i>Italic text.</i>" for the sake of brevity. The bug doesn't care
>
> The <i> tag does NOT necessarily cause the browser to render the text in 
> italic! Depending on how you have configured the <i> tag with CSS.
>
> Cheers, Oliver
>

Dear Oliver,

As I've said, the bug doesn't care. Again, my application doesn't use <i> 
tags but CSS styles exclusively. The <i> tag is used in the example for 
brevity.
Feel free to set the text italic with a CSS style and see the application 
crash in the absolutely same way.

I must admit I'm a bit surprised at the lack of Nokia response to this 
matter. Since this bug causes a memory access violation in an often 
web-connected component (QWebView), it is likely to be a critical security 
vulnerability exploitable by attackers (see 
http://msdn.microsoft.com/en-us/magazine/cc163311.aspx). Since I can invoke 
it by merely loading a web page referencing external fonts in the supplied 
demo Browser application, it is clearly not caused by my code.

Respectively,

Strahinja Markovic 




More information about the Qt-interest-old mailing list