[Qt-interest] External font loading in Qt Webkit

Malyushytsky, Alex alex at wai.com
Mon Jul 20 23:04:25 CEST 2009


>> I must admit I'm a bit surprised at the lack of Nokia response to this
matter. Since this bug

According to my impression newsgroup is not a place to report a bug.

http://doc.trolltech.com/4.5/bughowto.html

Regards,
    Alex

-----Original Message-----
From: qt-interest-bounces at trolltech.com [mailto:qt-interest-bounces at trolltech.com] On Behalf Of Strahinja Markovic
Sent: Monday, July 20, 2009 4:19 AM
To: qt-interest at trolltech.com
Subject: Re: [Qt-interest] External font loading in Qt Webkit


<Oliver.Knoll at comit.ch> wrote in message
news:C10F29AB06447B4881FC0DE1E302E2F2EBB68D58 at sg000036.corproot.net...
> Strahinja Markovic wrote on Sunday, July 19, 2009 8:05 PM:
>
>> Dear newsgroup,
>>
>> It's been pointed out that I should use CSS styling for the italic
>> text. My application uses them exclusively. The example uses
>> "<i>Italic text.</i>" for the sake of brevity. The bug doesn't care
>
> The <i> tag does NOT necessarily cause the browser to render the text in
> italic! Depending on how you have configured the <i> tag with CSS.
>
> Cheers, Oliver
>

Dear Oliver,

As I've said, the bug doesn't care. Again, my application doesn't use <i>
tags but CSS styles exclusively. The <i> tag is used in the example for
brevity.
Feel free to set the text italic with a CSS style and see the application
crash in the absolutely same way.

I must admit I'm a bit surprised at the lack of Nokia response to this
matter. Since this bug causes a memory access violation in an often
web-connected component (QWebView), it is likely to be a critical security
vulnerability exploitable by attackers (see
http://msdn.microsoft.com/en-us/magazine/cc163311.aspx). Since I can invoke
it by merely loading a web page referencing external fonts in the supplied
demo Browser application, it is clearly not caused by my code.

Respectively,

Strahinja Markovic

_______________________________________________
Qt-interest mailing list
Qt-interest at trolltech.com
http://lists.trolltech.com/mailman/listinfo/qt-interest


---------------------------------------------------------------------------------------------------
Weidlinger Associates, Inc. made the following annotations.

"This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use, or distribution of the information included in this message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank you."

"Please consider our environment before printing this email."




More information about the Qt-interest-old mailing list