[qt/qt/qtinterfaceframework-taglib]: Summary of bulk changes made

Git repository change summary for qt/qt/qtinterfaceframework-taglib
Pushed by mirror-service into branch 'upstream/master'.
Changed from fd97c86bcb924bd23e4c99bd25ffdf85f3a162b8 to 2ada48a77f9b5158f6a4313ed7a90de8efc4eb75
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit cb92e0aec4e3ced74010fe536f9c76356d3949fe by GitHub (on behalf of Acts1631) on 03/08/2026 at 13:46..
MPC: validate SV8 packet size (#1391)

SV8 packet parsing subtracted its header size from an unchecked
unsigned packet length. An undersized value could wrap and make the
parser allocate the remainder of a large file.

Reject packet lengths smaller than their header or beyond the remaining
file data before reading the payload.
https://invent.kde.org/qt/qt/qtinterfaceframework-taglib/-/commit/cb92e0aec4e3ced74010fe536f9c76356d3949fe

Git commit c0f2a939b446809f0a05fc2fbaf492cbdd24dba5 by GitHub (on behalf of Acts1631) on 03/08/2026 at 15:46..
MP4: limit atoms in nested containers (#1392)

Nested MP4 containers did not enforce the atom count limit applied at
the root level. A small file with many child atoms could consume
disproportionate memory while building the atom tree.

Apply the per-level limit to container children and reject files that
exceed it.
https://invent.kde.org/qt/qt/qtinterfaceframework-taglib/-/commit/c0f2a939b446809f0a05fc2fbaf492cbdd24dba5

Git commit af2010ff392be1941890bfad7b4565b3c21eb953 by GitHub (on behalf of Acts1631) on 03/08/2026 at 16:30..
Matroska: limit elements in EBML containers (#1393)

EBML containers could contain an unbounded number of small elements.
The parser retained each element, allowing a crafted Matroska file to
consume disproportionate memory.

Reject containers that exceed a per-level element count limit.
https://invent.kde.org/qt/qt/qtinterfaceframework-taglib/-/commit/af2010ff392be1941890bfad7b4565b3c21eb953

Git commit a1d0488dc62809785654356376e6eca9c51d6439 by GitHub (on behalf of Acts1631) on 03/08/2026 at 16:35..
RIFF: limit parsed chunk count (#1394)

RIFF files could contain an unbounded number of small chunks. The
parser retained a descriptor for each chunk, allowing a crafted file
to consume disproportionate memory.

Reject files that exceed a maximum parsed chunk count.
https://invent.kde.org/qt/qt/qtinterfaceframework-taglib/-/commit/a1d0488dc62809785654356376e6eca9c51d6439

Git commit 2ada48a77f9b5158f6a4313ed7a90de8efc4eb75 by GitHub (on behalf of Acts1631) on 03/08/2026 at 16:46..
ASF: limit header object count (#1395)

ASF header parsing retained an unbounded number of objects. A crafted
file with many small objects could consume disproportionate memory.

Reject files whose header object count exceeds the parser limit.
https://invent.kde.org/qt/qt/qtinterfaceframework-taglib/-/commit/2ada48a77f9b5158f6a4313ed7a90de8efc4eb75