[qt/qt/qtinterfaceframework]: Summary of bulk changes made

Git repository change summary for qt/qt/qtinterfaceframework
Pushed by mirror-service into branch '6.12'.
Changed from 594c36615baf99a7b37f29ab18a3c2a50d3bc694 to c5f8696088623c82db5f3ae03574567390d42340
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit c5f8696088623c82db5f3ae03574567390d42340 by Qt Cherry-pick Bot (on behalf of Dominik Holland) on 05/08/2026 at 06:55..
Validate the peer-supplied start index in QIfPagingModel::onDataFetched

In the DataChanged loading type the start index from the backend was used
as a write offset into the item list without a lower-bound check. An
untrusted QtRemoteObjects source could send a negative (or overflowing)
start, bypass the range check and cause an out-of-bounds write into
m_itemList. Validate start before using it, mirroring onDataChanged(), and
use 64-bit arithmetic to avoid a signed overflow.

Change-Id: I90ad0a73753cfb2d260868861357cb4fce9ce2de
Pick-to: 6.11 6.8
Fixes: QTBUG-148538
Reviewed-by: Robert Griebl <[email protected]>
(cherry picked from commit 6ced94de08776ec97dc15c8681d26555c1817f86)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtinterfaceframework/-/commit/c5f8696088623c82db5f3ae03574567390d42340