[qt/qt/qtbase]: Summary of bulk changes made

KDE Git Services - Bulk Change <[email protected]>
Newsgroups gmane.comp.kde.cvs
Message-ID <[email protected]>
Git repository change summary for qt/qt/qtbase
Pushed by mirror-service into branch '6.12'.
Changed from 2fa57f020f9b5b8d1131ca7e97d1199050f182d6 to 6c61210bccd7d67166f5d773d22dfb15ef512687
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 6c61210bccd7d67166f5d773d22dfb15ef512687 by Qt Cherry-pick Bot (on behalf of Ivan Solovev) on 22/07/2026 at 10:27..
QMachOParser: add size checks in encryption command handling

The QMachOParser::parse() method correctly validates the size of each
processed command against the size of the mmapped file.
However, the helper isEncrypted() function iterates through all the
commands in the header again and does not do such validation.
This could lead to a situation when a malformed or corrupted command
with a too large size results in an out-of-bounds read.

Fix it by extending the isEncrypted() function with the similar checks.

Amends 667aec810f71ac378a618032846df4bb6d76c647, which cherry-picks to
6.2 and 5.15 were abandoned. So, picking only down to 6.5.

Fixes: QTBUG-148364
Pick-to: 6.11 6.8 6.5
Change-Id: Ibb37367173f1cea4c2fa1608f0d679cd6887d4e2
Reviewed-by: Thiago Macieira <[email protected]>
(cherry picked from commit 2a819525180418d49834aa4dea3aa41796cd5d92)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/6c61210bccd7d67166f5d773d22dfb15ef512687
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.