[qt/qt/qtbase]: Summary of bulk changes made

Git repository change summary for qt/qt/qtbase
Pushed by mirror-service into branch '6.11'.
Changed from d86ae6acb990b1c3497ac439d47d029aa82e6e68 to ddbe7042c0e5a1eee3ed1aa29f2f60b6e913d2fe
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit f13003601e89eb2ec671f8c08d39548111a4e199 by Qt Cherry-pick Bot (on behalf of Tatiana Borisova) on 29/07/2026 at 15:01..
Fix a build issue

- If configure Qt with the following command:
cmake ../qt5/ -GNinja -DCMAKE_BUILD_TYPE=Release -DQT_BUILD_EXAMPLES=ON -DQT_BUILD_TESTS=ON

I observe the following issue on building:
qtbase/tests/auto/corelib/kernel/qvariant/relocatable_change.h:11:10: fatal error: QTest: No such file or directory
   11 | #include <QTest>
      |          ^~~~~~~

Change-Id: If01c39456a820b14e7a698bd91ef9c5baabbe978
Reviewed-by: Alexandru Croitor <[email protected]>
(cherry picked from commit 6c1a003dbd8b211fefd18b84842d7ffab701ca24)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
(cherry picked from commit 3ffbfc32457ad788d9ebad23e42483c3e4d38368)
https://invent.kde.org/qt/qt/qtbase/-/commit/f13003601e89eb2ec671f8c08d39548111a4e199

Git commit e0e9e59a64042eeb6d46e1425df2af38b8a869c7 by Qt Cherry-pick Bot (on behalf of Marc Mutz) on 29/07/2026 at 18:38..
QMessageAuthenticationCode: fix UB (nullptr passed to memcpy()) on setKey(nullptr)

QMessageAuthenticationCodePrivate::setKey() (called from the public
class' setKey(), ctor, and static hash() function, so user-accessible)
passed the argument QByteArrayView to QSmallByteArray::assign().

The assign() implementation passed std::data(c) to memcpy, which, if
nullptr, consitutes UB. We actually tested this, but I guess no-one
ever ran this test in ubsan :(

Says ubsan:

  qsmallbytearray_p.h:60:15: runtime error: null pointer passed as argument 2, which is declared to never be null
     #0 0x7f71a61abdd7 in void QSmallByteArray<144ul>::assign<QByteArrayView>(QByteArrayView const&) qsmallbytearray_p.h:60
     #1 0x7f71a61abdd7 in QMessageAuthenticationCodePrivate::setKey(QByteArrayView) qcryptographichash.cpp:1446
     #2 0x7f71a7a2a3bf in QMessageAuthenticationCode::QMessageAuthenticationCode(QCryptographicHash::Algorithm, QByteArrayView) qcryptographichash.cpp:1525
     #3 0x55f144489bf3 in tst_QMessageAuthenticationCode::repeated_setKey() tst_qmessageauthenticationcode.cpp:56
     [...]

Fix by adding a size check before calling memcpy().

Also Extract Method assign_impl() from the assign() function template
to separate the template-argument-dependent parts from the independent
ones (SCARY).

Amends 1fb0dca140c1dbf3e66b322af837b7bf650f2e77 (picked to 6.5).

Pick-to: 6.8 6.5
Change-Id: Iad0a33b561aec555c20758b7158192303086c49a
Reviewed-by: Thiago Macieira <[email protected]>
(cherry picked from commit 768b71282c25e793ce5eb1b70d431da9e05b412d)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
(cherry picked from commit 28c91df6f76b9568c3b587acf9264d4f5c798cc8)
https://invent.kde.org/qt/qt/qtbase/-/commit/e0e9e59a64042eeb6d46e1425df2af38b8a869c7

Git commit ed1116816cc26152ddadca8d2838a0160da84d9f by Qt Cherry-pick Bot (on behalf of Kai Köhne) on 29/07/2026 at 18:38..
CMake: Add requestedExecutionLevel asInvoker to all qt tool executables

Extend the added manifest files so that tools like lupdate are not
considered as installers on Windows. This is already default for MSVC,
but the setting was missing so far for MinGW executables.

Note that this is only for Qt's own tools. User applications do use the
logic in qt_add_executable() to set requestExecutionLevel instead.

Pick-to: 6.8 6.5
Fixes: QTBUG-147634
Change-Id: I14eb6b43472f8fb04e9b367b96a4b679d2e78500
Reviewed-by: Joerg Bornemann <[email protected]>
(cherry picked from commit d6d19366263499040dc4df5e590369042690b9b9)
Reviewed-by: Alexandru Croitor <[email protected]>
(cherry picked from commit 32a6df94ff4deee9511a17b67c479de2fd0bace2)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/ed1116816cc26152ddadca8d2838a0160da84d9f

Git commit 3d97bf18b90286c5a5d3e1a1f6bde9263558d61e by Qt Cherry-pick Bot (on behalf of Laszlo Agocs) on 29/07/2026 at 18:38..
QtOpenGL: make the gradient color table fill more bounded

The issue likely cannot happen in practice since QGradient rejects > 1.0
stop positions. Correct the legacy OpenGL paint engine nonetheless so
that generating a table with size == 1024 (paletteSize()) and an output
buffer of [1024] does not try to write at index 1024 when the first stop
is > 1.0. Code analysis / AI tools tend do flag this potential memory
safety issue.

Pick-to: 6.8
Change-Id: If386b84388d790d12bcf22281cf844cbccd0b7cd
Reviewed-by: Eirik Aavitsland <[email protected]>
(cherry picked from commit 1dc332a10a70fc8d5ad1c58d0f69e982fcad05d4)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
(cherry picked from commit 85d8dd5f1e87a328881fb99dbd2a63607df86c32)
https://invent.kde.org/qt/qt/qtbase/-/commit/3d97bf18b90286c5a5d3e1a1f6bde9263558d61e

Git commit 7bc9290592d6ca05f8cb61e6dc1e134a73987beb by Qt Cherry-pick Bot (on behalf of Laszlo Agocs) on 29/07/2026 at 18:38..
QtOpenGL: use qsizetype to avoid theoretical overflow

floatSizeInBytes that is passed to malloc and memcpy is calculated as
vertexCount * 8, do not use int for this, in order to satisfy code
analysis tools. Code analysis / AI tools tend do flag this potential
memory safety issue.

Pick-to: 6.8
Change-Id: If6a8dbf8879e087e6b7d9b2aed59bc5b50a92c24
Reviewed-by: Eirik Aavitsland <[email protected]>
(cherry picked from commit 901104d0e9727adfbde4b3cca51c202af1768030)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
(cherry picked from commit 8ec18990bd82ac16032588f9548a23036e64758f)
https://invent.kde.org/qt/qt/qtbase/-/commit/7bc9290592d6ca05f8cb61e6dc1e134a73987beb

Git commit ddbe7042c0e5a1eee3ed1aa29f2f60b6e913d2fe by Qt Cherry-pick Bot (on behalf of Laszlo Agocs) on 29/07/2026 at 18:38..
QtOpenGL: cap max glyph run count

The index buffer is GLushort. Have an appropriate check for avoiding out
of bounds index values. Code analysis / AI tools tend do flag this
potential memory safety issue.

Pick-to: 6.8
Change-Id: Ic67358660f1a7fd742de0c3a17f25989bf25537b
Reviewed-by: Eirik Aavitsland <[email protected]>
(cherry picked from commit 399aec74c5caaf238996090a97ada70ca237faa5)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
(cherry picked from commit ffa60ef956c8807420a4706218f02172cab971bc)
https://invent.kde.org/qt/qt/qtbase/-/commit/ddbe7042c0e5a1eee3ed1aa29f2f60b6e913d2fe