Hi,

there is a use-after-free bug after deleting hidden points. To reproduce:

- Select & Edit a track
- Move map until there is a track point just a few pixels above or
  touching the lower map border
- double-click that point. There should be both the cross-hair and the
  tooltip-like info window now
- move mouse downwards (fast). make sure the tooltip info is still visible
- in the tracklist, make the selected point hidden
- select "Filter" tab and delete hidden points -> voilĂ , IMouse::selTrkPt points to erased memory now

Workaround:

diff --git a/src/CCanvas.cpp b/src/CCanvas.cpp
index 029e32a..6acc0d9 100644
--- a/src/CCanvas.cpp
+++ b/src/CCanvas.cpp
@@ -313,6 +313,7 @@ void CCanvas::leaveEvent(QEvent * )
 {
     QApplication::restoreOverrideCursor();
     setMouseTracking(false);
+    if (mouse) mouse->setSelTrackPt(0);
 }


Regards
Michael
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Qlandkartegt-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/qlandkartegt-users

Reply via email to