[qt/qt/qtbase]: Summary of bulk changes made
KDE Git Services - Bulk Change <[email protected]>
| Newsgroups | gmane.comp.kde.cvs |
|---|---|
| Message-ID | <[email protected]> |
Git repository change summary for qt/qt/qtbase Pushed by mirror-service into branch 'dev'. Changed from 8bd5d7ee8f73dc70871f39e15ccaa785a077dcfc to d31dac8a3891a5c9450a8ec9e0ada80f7834b5c8 Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository. This change contains the following new commits: Git commit 95d6b801810acfaf932d4f862eff8c693af7baf1 by Ivan Solovev on 16/07/2026 at 19:24.. QRandomGenerator: control insecure PRNG fallback behavior The random generator can fall back to insecure PRNG on certain configurations. This is a documented behavior, however the problem is that at runtime there is no way to know if the fallback was used or not. Since QRandomGenerator can be used in security-critical contexts, such silent fallback may be unacceptable. This patch adds a logging message that will be emitted the first time the insecure fallback is called. It also adds a configuration feature that can make such a fallback a hard error and terminate the application. The feature is disabled by default to keep backwards-compatible behavior. Note that we use fprintf(stderr, ~~~) for logging because we cannot include QLoggingCategory in this file. QLoggingCategory requires QHash in its implementation, and QHash in turn requires randomness. As a result, we would have a loop in our includes. [ChangeLog][QtCore][QRandomGenerator] QRandomGenerator now warns when it falls back to using insecure PRNG for generating the random value. The new FEATURE_randomgenerator_disable_fallback can be used to disable such fallback at compile time and terminate the application if CSPRNG is not available for some reason. Fixes: QTBUG-146984 Pick-to: 6.12 Change-Id: I94fa6bcb4d8cecb62881034b9c7426cb5180133d Reviewed-by: Marc Mutz <[email protected]> https://invent.kde.org/qt/qt/qtbase/-/commit/95d6b801810acfaf932d4f862eff8c693af7baf1 Git commit 1bd861f48de1cf56e22aaa070a5179443224a84e by Axel Spoerl on 16/07/2026 at 22:28.. tests/fuzz: add fuzz test generation driven by qt_fuzzgen Add a fuzz_tests Qt configure feature and a tests/fuzz/ directory that runs qt_fuzzgen at CMake configure time to generate fuzz test sources for all exported Qt classes in qtbase. The feature is disabled by default (AUTODETECT OFF) and requires qt_fuzzgen to be in QT_HOST_PATH. Enable with -DFEATURE_fuzz_tests=ON. The generated fuzz tree is produced in the CMake binary directory so the source tree is never modified. The generated CMakeLists.txt files use embedded mode (no project()/find_package()) and rely on Qt's already-found targets. Platform-specific skiplists (SKIPLIST, SKIPLIST.Windows, SKIPLIST.Darwin) allow excluding problematic classes per platform. Initial skiplist entries: - QEasingCurve: cubicBezier() not present in installed headers - QFile: std::optional overloads cause codegen errors - QJsonObject: cbegin()/cend() removed in Qt 6 - QMetaType: rawId() not available in installed Qt headers Change-Id: I2ccc3912fd97fd0cfc24ccf0abc4d1466897a4f0 Reviewed-by: Frederic Lefebvre <[email protected]> https://invent.kde.org/qt/qt/qtbase/-/commit/1bd861f48de1cf56e22aaa070a5179443224a84e Git commit d31dac8a3891a5c9450a8ec9e0ada80f7834b5c8 by Axel Spoerl on 16/07/2026 at 22:28.. tests/fuzz: expand skiplists based on macOS build testing Add classes and methods that fail to compile against Qt 6.11 installed headers because they reference symbols present in a newer source tree but not yet shipped (QAccessibilityHints, QHostInfo::clearCache, QImageReader::effectiveSize). Also skip QPA internals, QRhi value types, QShader* types, and other classes whose installed public headers are absent. SKIPLIST.Darwin gains QSslConfiguration because the DTLS family of methods is not built on macOS. Change-Id: Ief5e2d5dad8221c066900a17fe870a1c36ff2a91 Reviewed-by: Alex Blasche <[email protected]> https://invent.kde.org/qt/qt/qtbase/-/commit/d31dac8a3891a5c9450a8ec9e0ada80f7834b5c8