Thanks for the help! Didn't find the proper way of doing it with Ctrl+F.

It's ok that the change won't land in prod: release build doesn't have the crash, since it comes from Q_ASSERT, after which the value is properly clamped.

Seems safe enough. It would just make debug build behave like the release one because of the same transformations made in loc() after asserts.

All right, full bounds check it is. I could also reproduce y=-1 for the resized window with overscroll (wasn't resizing the window earlier).

Couldn't update the diff in this ticket. The corrected version is at https://phabricator.kde.org/D17757

This happens because loc() expects character-space indices, while selection-space indices are provided. The semantic of selection-space is that the index of the character after the last one select the last character.

@hindenburg it's pas.anddev@gmail.com.