[qt/qt/qtquick3d-assimp]: Summary of bulk changes made

Git repository change summary for qt/qt/qtquick3d-assimp
Pushed by mirror-service into branch 'upstream/master'.
Changed from bd301ee4d128cec5bb11e16b266f4f9bcb6a8d58 to ea118b1c1ca05df6631ccb9c3b31cdd7c1f572b8
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 4229c79f608c247b35db01848f8b2a721718c051 by GitHub (on behalf of alb3e3) on 29/07/2026 at 12:44..
Reject MD5 element indices that wrap when the container is grown (#6749)

* Add regression tests for overflowing MD5 element indices

Three crafted .md5mesh files use 4294967295 as the vert, tri and weight
index. On master each one resizes the target container to zero and then
indexes it with the original value.

Assisted-by: Claude Code (Claude Opus 5)

* Reject MD5 element indices that wrap when the container is grown

The mesh parser grew its vertex, face and weight containers with
resize(idx + 1) using the file-supplied index. strtoul10() does not
check for overflow, so an index of 0xffffffff makes idx + 1 wrap to
zero: the container is emptied and then addressed with the original
index, which reads and writes out of bounds (assimp#6710).

Move the three sites onto a shared helper that rejects the wrapping
index and does the arithmetic in size_t.

Assisted-by: Claude Code (Claude Opus 5)

---------

Co-authored-by: Kim Kulling <[email protected]>
https://invent.kde.org/qt/qt/qtquick3d-assimp/-/commit/4229c79f608c247b35db01848f8b2a721718c051

Git commit ea118b1c1ca05df6631ccb9c3b31cdd7c1f572b8 by GitHub (on behalf of zayeem shaikh) on 29/07/2026 at 13:36..
bound face uv and color indices in ase BuildUniqueRepresentation (#6752)

Co-authored-by: Kim Kulling <[email protected]>
https://invent.kde.org/qt/qt/qtquick3d-assimp/-/commit/ea118b1c1ca05df6631ccb9c3b31cdd7c1f572b8