Security: keep cur_byte pointing into bytes array

1 files changed, 7 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index 4d5a0e6a..449f5f93 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,10 @@
+2013-10-05  Jay Berkenbilt  <ejb@ql.org>
+
+	* Security fix: in QUtil::toUTF8, change bounds checking to avoid
+	having a pointer point temporarily outside the bounds of an
+	array.  Some compiler optimizations could have made the original
+	code unsafe.
+
 2013-07-10  Jay Berkenbilt  <ejb@ql.org>
 
 	* 5.0.0: release