[qt/qt/qtinterfaceframework-taglib]: Summary of bulk changes made
KDE Git Services - Bulk Change <[email protected]>
| Newsgroups | gmane.comp.kde.cvs |
|---|---|
| Message-ID | <[email protected]> |
Git repository change summary for qt/qt/qtinterfaceframework-taglib Pushed by mirror-service into branch 'upstream/master'. Changed from 5530420d088fa25f72d58349c6cc118b8f22d9bf to 04993427d7056c70df24f6350384df5362afa755 Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository. This change contains the following new commits: Git commit 586a658650aed6ea62484470f7878785d9e4bd11 by GitHub (on behalf of Acts1631) on 02/08/2026 at 06:14.. Prevent DSDIFF chunk size wrap (#1388) A crafted DSDIFF chunk size could wrap the parser boundary check, seek backwards, and make the parser loop indefinitely. Compare chunk sizes with remaining bytes before seeking at each DSDIFF chunk nesting level. https://invent.kde.org/qt/qt/qtinterfaceframework-taglib/-/commit/586a658650aed6ea62484470f7878785d9e4bd11 Git commit 04993427d7056c70df24f6350384df5362afa755 by GitHub (on behalf of Acts1631) on 02/08/2026 at 06:23.. Bound ASF attribute parsing to object data (#1389) A truncated ASF attribute object could declare a large count and make the parser create empty attributes after reaching the end of its data. Validate each attribute object's data extent and stop parsing when an attribute would exceed it. https://invent.kde.org/qt/qt/qtinterfaceframework-taglib/-/commit/04993427d7056c70df24f6350384df5362afa755