[qt/qt/qtbase]: Summary of bulk changes made
KDE Git Services - Bulk Change <[email protected]>
| Newsgroups | gmane.comp.kde.cvs |
|---|---|
| Message-ID | <[email protected]> |
Git repository change summary for qt/qt/qtbase Pushed by mirror-service into branch '6.12'. Changed from 2fa57f020f9b5b8d1131ca7e97d1199050f182d6 to 6c61210bccd7d67166f5d773d22dfb15ef512687 Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository. This change contains the following new commits: Git commit 6c61210bccd7d67166f5d773d22dfb15ef512687 by Qt Cherry-pick Bot (on behalf of Ivan Solovev) on 22/07/2026 at 10:27.. QMachOParser: add size checks in encryption command handling The QMachOParser::parse() method correctly validates the size of each processed command against the size of the mmapped file. However, the helper isEncrypted() function iterates through all the commands in the header again and does not do such validation. This could lead to a situation when a malformed or corrupted command with a too large size results in an out-of-bounds read. Fix it by extending the isEncrypted() function with the similar checks. Amends 667aec810f71ac378a618032846df4bb6d76c647, which cherry-picks to 6.2 and 5.15 were abandoned. So, picking only down to 6.5. Fixes: QTBUG-148364 Pick-to: 6.11 6.8 6.5 Change-Id: Ibb37367173f1cea4c2fa1608f0d679cd6887d4e2 Reviewed-by: Thiago Macieira <[email protected]> (cherry picked from commit 2a819525180418d49834aa4dea3aa41796cd5d92) Reviewed-by: Qt Cherry-pick Bot <[email protected]> https://invent.kde.org/qt/qt/qtbase/-/commit/6c61210bccd7d67166f5d773d22dfb15ef512687