[qt/qt/qtbase]: Summary of bulk changes made

KDE Git Services - Bulk Change <[email protected]>
Newsgroups gmane.comp.kde.cvs
Message-ID <[email protected]>
Git repository change summary for qt/qt/qtbase
Pushed by mirror-service into branch 'dev'.
Changed from 8bd5d7ee8f73dc70871f39e15ccaa785a077dcfc to d31dac8a3891a5c9450a8ec9e0ada80f7834b5c8
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 95d6b801810acfaf932d4f862eff8c693af7baf1 by Ivan Solovev on 16/07/2026 at 19:24..
QRandomGenerator: control insecure PRNG fallback behavior

The random generator can fall back to insecure PRNG on certain
configurations. This is a documented behavior, however the problem is
that at runtime there is no way to know if the fallback was used or
not. Since QRandomGenerator can be used in security-critical contexts,
such silent fallback may be unacceptable.

This patch adds a logging message that will be emitted the first time
the insecure fallback is called. It also adds a configuration feature
that can make such a fallback a hard error and terminate the
application. The feature is disabled by default to keep
backwards-compatible behavior.

Note that we use fprintf(stderr, ~~~) for logging because we cannot
include QLoggingCategory in this file. QLoggingCategory requires
QHash in its implementation, and QHash in turn requires randomness.
As a result, we would have a loop in our includes.

[ChangeLog][QtCore][QRandomGenerator] QRandomGenerator now warns when
it falls back to using insecure PRNG for generating the random value.
The new FEATURE_randomgenerator_disable_fallback can be used to
disable such fallback at compile time and terminate the application
if CSPRNG is not available for some reason.

Fixes: QTBUG-146984
Pick-to: 6.12
Change-Id: I94fa6bcb4d8cecb62881034b9c7426cb5180133d
Reviewed-by: Marc Mutz <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/95d6b801810acfaf932d4f862eff8c693af7baf1

Git commit 1bd861f48de1cf56e22aaa070a5179443224a84e by Axel Spoerl on 16/07/2026 at 22:28..
tests/fuzz: add fuzz test generation driven by qt_fuzzgen

Add a fuzz_tests Qt configure feature and a tests/fuzz/ directory that
runs qt_fuzzgen at CMake configure time to generate fuzz test sources
for all exported Qt classes in qtbase.

The feature is disabled by default (AUTODETECT OFF) and requires
qt_fuzzgen to be in QT_HOST_PATH. Enable with -DFEATURE_fuzz_tests=ON.

The generated fuzz tree is produced in the CMake binary directory so
the source tree is never modified. The generated CMakeLists.txt files
use embedded mode (no project()/find_package()) and rely on Qt's
already-found targets.

Platform-specific skiplists (SKIPLIST, SKIPLIST.Windows, SKIPLIST.Darwin)
allow excluding problematic classes per platform. Initial skiplist entries:
- QEasingCurve: cubicBezier() not present in installed headers
- QFile: std::optional overloads cause codegen errors
- QJsonObject: cbegin()/cend() removed in Qt 6
- QMetaType: rawId() not available in installed Qt headers

Change-Id: I2ccc3912fd97fd0cfc24ccf0abc4d1466897a4f0
Reviewed-by: Frederic Lefebvre <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/1bd861f48de1cf56e22aaa070a5179443224a84e

Git commit d31dac8a3891a5c9450a8ec9e0ada80f7834b5c8 by Axel Spoerl on 16/07/2026 at 22:28..
tests/fuzz: expand skiplists based on macOS build testing

Add classes and methods that fail to compile against Qt 6.11 installed
headers because they reference symbols present in a newer source tree
but not yet shipped (QAccessibilityHints, QHostInfo::clearCache,
QImageReader::effectiveSize). Also skip QPA internals, QRhi value types,
QShader* types, and other classes whose installed public headers are
absent.

SKIPLIST.Darwin gains QSslConfiguration because the DTLS family of
methods is not built on macOS.

Change-Id: Ief5e2d5dad8221c066900a17fe870a1c36ff2a91
Reviewed-by: Alex Blasche <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/d31dac8a3891a5c9450a8ec9e0ada80f7834b5c8
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.