[qt/qt/qtinterfaceframework-taglib]: Summary of bulk changes made

KDE Git Services - Bulk Change <[email protected]>
Newsgroups gmane.comp.kde.cvs
Message-ID <[email protected]>
Git repository change summary for qt/qt/qtinterfaceframework-taglib
Pushed by mirror-service into branch 'upstream/master'.
Changed from 5530420d088fa25f72d58349c6cc118b8f22d9bf to 04993427d7056c70df24f6350384df5362afa755
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 586a658650aed6ea62484470f7878785d9e4bd11 by GitHub (on behalf of Acts1631) on 02/08/2026 at 06:14..
Prevent DSDIFF chunk size wrap (#1388)

A crafted DSDIFF chunk size could wrap the parser boundary check,
seek backwards, and make the parser loop indefinitely.

Compare chunk sizes with remaining bytes before seeking at each DSDIFF
chunk nesting level.
https://invent.kde.org/qt/qt/qtinterfaceframework-taglib/-/commit/586a658650aed6ea62484470f7878785d9e4bd11

Git commit 04993427d7056c70df24f6350384df5362afa755 by GitHub (on behalf of Acts1631) on 02/08/2026 at 06:23..
Bound ASF attribute parsing to object data (#1389)

A truncated ASF attribute object could declare a large count and make
the parser create empty attributes after reaching the end of its data.

Validate each attribute object's data extent and stop parsing when an
attribute would exceed it.
https://invent.kde.org/qt/qt/qtinterfaceframework-taglib/-/commit/04993427d7056c70df24f6350384df5362afa755
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.