Blame SOURCES/qt5-qtbase-CVE-2018-15518.patch

b5e7a8
diff --git a/src/corelib/serialization/qxmlstream_p.h b/src/corelib/serialization/qxmlstream_p.h
b5e7a8
index 4157fbbd..f8b1ede9 100644
b5e7a8
--- a/src/corelib/serialization/qxmlstream_p.h
b5e7a8
+++ b/src/corelib/serialization/qxmlstream_p.h
b5e7a8
@@ -1250,7 +1250,7 @@ bool QXmlStreamReaderPrivate::parse()
b5e7a8
             state_stack[tos] = 0;
b5e7a8
             return true;
b5e7a8
         } else if (act > 0) {
b5e7a8
-            if (++tos == stack_size-1)
b5e7a8
+            if (++tos >= stack_size-1)
b5e7a8
                 reallocateStack();
b5e7a8
 
b5e7a8
             Value &val = sym_stack[tos];