[qt/qt/qtimageformats]: Summary of bulk changes made

Git repository change summary for qt/qt/qtimageformats
Pushed by mirror-service into branch '6.12'.
Changed from bb8a016b9ba6602f208acea9c45cf931e66732c7 to 86deb0e762dc6507c9318d800eca37cb1d6eeb96
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit ba27b083a23538f1ec285652115360a9820662c6 by Qt Cherry-pick Bot (on behalf of Eirik Aavitsland) on 24/07/2026 at 12:15..
Harden the JP2 handler

Check input dimensions early: More than 4 color components, or image
dimenions outside int range, could lead to OOB writes.

Task-number: QTBUG-148331
Pick-to: 6.11 6.8 6.5 5.15
Change-Id: I36bc42d63cdc02a37a720533266e75289fa2a0a4
Reviewed-by: Eskil Abrahamsen Blomfeldt <[email protected]>
(cherry picked from commit 3d4cb983875b013327c8100fb7d80c6276bfa31b)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtimageformats/-/commit/ba27b083a23538f1ec285652115360a9820662c6

Git commit 86deb0e762dc6507c9318d800eca37cb1d6eeb96 by Qt Cherry-pick Bot (on behalf of Eirik Aavitsland) on 24/07/2026 at 12:15..
Harden the mng handler

mygetcanvasline() callback: Ensure that the iLinenr parameter from
libmng is in range. A buggy value could cause an OOB pointer to be
returned to libmng.

readData(): If a read on the input QIODevice should fail, the error
return value (-1) would be cast to unsigned and interpreted as a
successful 4GB read, potentially leading to OOB reading or crash.

myprocessterm(): Clamp a hypothetical >2B loop count to 2B, which is
anyway interpreted as infinite, instead of random negative int value.

writeData(): Not reachable since the handler is read-only, for
completeness only: same pattern as readData() above.

Pick-to: 6.11 6.8 6.5 5.15
Task-number: QTBUG-148330
Change-Id: I369f87617f294aeb7a303877050eac66105a43cf
Reviewed-by: Eskil Abrahamsen Blomfeldt <[email protected]>
(cherry picked from commit 5b090f58ad4d21436673230bc9f397fa3d2ad057)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtimageformats/-/commit/86deb0e762dc6507c9318d800eca37cb1d6eeb96