Blame SOURCES/qt-fix-possible-heap-corruption-in-qxmlstream.patch

9c5ecf
diff --git a/src/corelib/xml/qxmlstream_p.h b/src/corelib/xml/qxmlstream_p.h
9c5ecf
index 3539e1b7..f637e2d5 100644
9c5ecf
--- a/src/corelib/xml/qxmlstream_p.h
9c5ecf
+++ b/src/corelib/xml/qxmlstream_p.h
9c5ecf
@@ -1242,7 +1242,7 @@ bool QXmlStreamReaderPrivate::parse()
9c5ecf
             state_stack[tos] = 0;
9c5ecf
             return true;
9c5ecf
         } else if (act > 0) {
9c5ecf
-            if (++tos == stack_size-1)
9c5ecf
+            if (++tos >= stack_size-1)
9c5ecf
                 reallocateStack();
9c5ecf
 
9c5ecf
             Value &val = sym_stack[tos];