[qt/qt/qtbase]: Summary of bulk changes made

Git repository change summary for qt/qt/qtbase
Pushed by mirror-service into branch '6.12'.
Changed from 2a3d589f944380b429a7e66b8e1ec3805fe63828 to 28c91df6f76b9568c3b587acf9264d4f5c798cc8
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 32a6df94ff4deee9511a17b67c479de2fd0bace2 by Kai Köhne on 29/07/2026 at 11:50..
CMake: Add requestedExecutionLevel asInvoker to all qt tool executables

Extend the added manifest files so that tools like lupdate are not
considered as installers on Windows. This is already default for MSVC,
but the setting was missing so far for MinGW executables.

Note that this is only for Qt's own tools. User applications do use the
logic in qt_add_executable() to set requestExecutionLevel instead.

Pick-to: 6.11 6.8 6.5
Fixes: QTBUG-147634
Change-Id: I14eb6b43472f8fb04e9b367b96a4b679d2e78500
Reviewed-by: Joerg Bornemann <[email protected]>
(cherry picked from commit d6d19366263499040dc4df5e590369042690b9b9)
Reviewed-by: Alexandru Croitor <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/32a6df94ff4deee9511a17b67c479de2fd0bace2

Git commit d639a2ae5b2e573db546171950f1ff82c2f1823c by Qt Cherry-pick Bot (on behalf of Thiago Macieira) on 29/07/2026 at 11:50..
QObject: avoid duplicate .loadRelaxed()

They should be collapsed by the compiler *because* they are relaxed,
but in practice compilers aren't that smart about atomics, even in
2026.

Change-Id: I38b76438ca12ef9fa202fffd3f7c564843eecef0
Reviewed-by: Fabian Kosmale <[email protected]>
(cherry picked from commit dd4718cd65caca4f458d64a48e8ff4913ba2c953)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/d639a2ae5b2e573db546171950f1ff82c2f1823c

Git commit 85d8dd5f1e87a328881fb99dbd2a63607df86c32 by Qt Cherry-pick Bot (on behalf of Laszlo Agocs) on 29/07/2026 at 11:50..
QtOpenGL: make the gradient color table fill more bounded

The issue likely cannot happen in practice since QGradient rejects > 1.0
stop positions. Correct the legacy OpenGL paint engine nonetheless so
that generating a table with size == 1024 (paletteSize()) and an output
buffer of [1024] does not try to write at index 1024 when the first stop
is > 1.0. Code analysis / AI tools tend do flag this potential memory
safety issue.

Pick-to: 6.11 6.8
Change-Id: If386b84388d790d12bcf22281cf844cbccd0b7cd
Reviewed-by: Eirik Aavitsland <[email protected]>
(cherry picked from commit 1dc332a10a70fc8d5ad1c58d0f69e982fcad05d4)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/85d8dd5f1e87a328881fb99dbd2a63607df86c32

Git commit 8ec18990bd82ac16032588f9548a23036e64758f by Qt Cherry-pick Bot (on behalf of Laszlo Agocs) on 29/07/2026 at 11:50..
QtOpenGL: use qsizetype to avoid theoretical overflow

floatSizeInBytes that is passed to malloc and memcpy is calculated as
vertexCount * 8, do not use int for this, in order to satisfy code
analysis tools. Code analysis / AI tools tend do flag this potential
memory safety issue.

Pick-to: 6.11 6.8
Change-Id: If6a8dbf8879e087e6b7d9b2aed59bc5b50a92c24
Reviewed-by: Eirik Aavitsland <[email protected]>
(cherry picked from commit 901104d0e9727adfbde4b3cca51c202af1768030)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/8ec18990bd82ac16032588f9548a23036e64758f

Git commit ffa60ef956c8807420a4706218f02172cab971bc by Qt Cherry-pick Bot (on behalf of Laszlo Agocs) on 29/07/2026 at 11:50..
QtOpenGL: cap max glyph run count

The index buffer is GLushort. Have an appropriate check for avoiding out
of bounds index values. Code analysis / AI tools tend do flag this
potential memory safety issue.

Pick-to: 6.11 6.8
Change-Id: Ic67358660f1a7fd742de0c3a17f25989bf25537b
Reviewed-by: Eirik Aavitsland <[email protected]>
(cherry picked from commit 399aec74c5caaf238996090a97ada70ca237faa5)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/ffa60ef956c8807420a4706218f02172cab971bc

Git commit ffe1c2800557f6af84292c59fc9903f8d3bae506 by Qt Cherry-pick Bot (on behalf of Shawn Rutledge) on 29/07/2026 at 11:50..
Markdown parser: for image title, set both title and tooltip attributes

Fixes: QTBUG-148545
Change-Id: Ib5f8b69a09598c413011e7ae0e9922da3ec46254
Reviewed-by: Oliver Eftevaag <[email protected]>
(cherry picked from commit 7e8829b01a5556fe1f76a1751d931b42a13e97c6)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/ffe1c2800557f6af84292c59fc9903f8d3bae506

Git commit ac3fa39e949c3d24c8530fe1abcc2da018c4083f by Qt Cherry-pick Bot (on behalf of Shawn Rutledge) on 29/07/2026 at 11:50..
HTML export: emit the title attribute for tool tips

QTextHtmlParser reads the "title" attribute of an <a> element into
QTextCharFormat::toolTip() (the TextToolTip property), and that tool tip is
shown on hover by the widgets (QWidgetTextControl::showToolTip) as well as
by Qt Quick's Text and TextEdit hoveredToolTip property. But the HTML
exporter wrote only the href, so a link tool tip was silently dropped by
toHtml() and did not round-trip - even though the Markdown writer already
preserves it, and images already export their title.

Any HTML tag can have a `title` attribute. We now emit it as part of a
<a> <img> or <span> tag when the char format specifies a tooltip.
For links and images, this round-trips consistently between HTML and
Markdown import/export. (Markdown doesn't have a way to specify titled
spans though.)

Task-number: QTBUG-148550
Change-Id: I89f6eec6a64b873bee3519320509966b33470fe5
Reviewed-by: Oliver Eftevaag <[email protected]>
(cherry picked from commit dfc302353cbb67ba5fd5d7e57fbf7e00a4f032f8)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/ac3fa39e949c3d24c8530fe1abcc2da018c4083f

Git commit 5cc4be4392ef5cff369faa51e4346ba0f017e1e7 by Qt Cherry-pick Bot (on behalf of Shawn Rutledge) on 29/07/2026 at 11:50..
HTML export: emit the title attribute for table cells

A QTextTableCellFormat is a QTextCharFormat and can carry a tool tip
(toolTip() / TextToolTip), which the HTML importer sets from a <td>/<th>
title attribute. The exporter wrote colspan, rowspan, background and cell
styling but not the tool tip, so a cell title was dropped on export and did
not round-trip. Emit it as the cell's title attribute, matching the anchor,
image and span cases.

Add a toHtml() data row for a table cell with a tool tip.

Fixes: QTBUG-148550
Change-Id: Ie94e635922aec210bf0f17f97f552563c414c387
Reviewed-by: Oliver Eftevaag <[email protected]>
(cherry picked from commit 3d732f70bc5b0f7fa5e14a570e7762a5e50fd74d)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/5cc4be4392ef5cff369faa51e4346ba0f017e1e7

Git commit 28c91df6f76b9568c3b587acf9264d4f5c798cc8 by Qt Cherry-pick Bot (on behalf of Marc Mutz) on 29/07/2026 at 11:50..
QMessageAuthenticationCode: fix UB (nullptr passed to memcpy()) on setKey(nullptr)

QMessageAuthenticationCodePrivate::setKey() (called from the public
class' setKey(), ctor, and static hash() function, so user-accessible)
passed the argument QByteArrayView to QSmallByteArray::assign().

The assign() implementation passed std::data(c) to memcpy, which, if
nullptr, consitutes UB. We actually tested this, but I guess no-one
ever ran this test in ubsan :(

Says ubsan:

  qsmallbytearray_p.h:60:15: runtime error: null pointer passed as argument 2, which is declared to never be null
     #0 0x7f71a61abdd7 in void QSmallByteArray<144ul>::assign<QByteArrayView>(QByteArrayView const&) qsmallbytearray_p.h:60
     #1 0x7f71a61abdd7 in QMessageAuthenticationCodePrivate::setKey(QByteArrayView) qcryptographichash.cpp:1446
     #2 0x7f71a7a2a3bf in QMessageAuthenticationCode::QMessageAuthenticationCode(QCryptographicHash::Algorithm, QByteArrayView) qcryptographichash.cpp:1525
     #3 0x55f144489bf3 in tst_QMessageAuthenticationCode::repeated_setKey() tst_qmessageauthenticationcode.cpp:56
     [...]

Fix by adding a size check before calling memcpy().

Also Extract Method assign_impl() from the assign() function template
to separate the template-argument-dependent parts from the independent
ones (SCARY).

Amends 1fb0dca140c1dbf3e66b322af837b7bf650f2e77 (picked to 6.5).

Pick-to: 6.11 6.8 6.5
Change-Id: Iad0a33b561aec555c20758b7158192303086c49a
Reviewed-by: Thiago Macieira <[email protected]>
(cherry picked from commit 768b71282c25e793ce5eb1b70d431da9e05b412d)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/28c91df6f76b9568c3b587acf9264d4f5c798cc8