[qt/qt/qtbase]: Summary of bulk changes made

KDE Git Services - Bulk Change <[email protected]>
Newsgroups gmane.comp.kde.cvs
Message-ID <[email protected]>
Git repository change summary for qt/qt/qtbase
Pushed by mirror-service into branch 'dev'.
Changed from b4629d968c1a9f89eb99633c039fc5d55d30c907 to 2a819525180418d49834aa4dea3aa41796cd5d92
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 2a819525180418d49834aa4dea3aa41796cd5d92 by Ivan Solovev on 22/07/2026 at 06:44..
QMachOParser: add size checks in encryption command handling

The QMachOParser::parse() method correctly validates the size of each
processed command against the size of the mmapped file.
However, the helper isEncrypted() function iterates through all the
commands in the header again and does not do such validation.
This could lead to a situation when a malformed or corrupted command
with a too large size results in an out-of-bounds read.

Fix it by extending the isEncrypted() function with the similar checks.

Amends 667aec810f71ac378a618032846df4bb6d76c647, which cherry-picks to
6.2 and 5.15 were abandoned. So, picking only down to 6.5.

Fixes: QTBUG-148364
Pick-to: 6.12 6.11 6.8 6.5
Change-Id: Ibb37367173f1cea4c2fa1608f0d679cd6887d4e2
Reviewed-by: Thiago Macieira <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/2a819525180418d49834aa4dea3aa41796cd5d92
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.