[qt/qt/qtinterfaceframework]: Summary of bulk changes made

KDE Git Services - Bulk Change <[email protected]> Wed, 5 Aug 2026 12:16:01 +0000 (UTC)
Newsgroups gmane.comp.kde.cvs
Message-ID <[email protected]>
Git repository change summary for qt/qt/qtinterfaceframework
Pushed by mirror-service into branch '6.11'.
Changed from f33496c44f032d1a8c15bc715dfdf0d552c0cb46 to b82099564fbb1e378f0133d5b75a9d2ade99085d
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 6b7aa898f1ee2129604464e38985537217ee1dac by Qt Submodule Update Bot on 05/08/2026 at 05:28..
Update dependencies on '6.11' in qt/qtinterfaceframework

Change-Id: Ib912a457ddc344af5cc9805836810f3fe60a1170
Reviewed-by: Qt Submodule Update Bot <[email protected]>
https://invent.kde.org/qt/qt/qtinterfaceframework/-/commit/6b7aa898f1ee2129604464e38985537217ee1dac

Git commit b82099564fbb1e378f0133d5b75a9d2ade99085d by Qt Cherry-pick Bot (on behalf of Dominik Holland) on 05/08/2026 at 08:28..
Validate the peer-supplied start index in QIfPagingModel::onDataFetched

In the DataChanged loading type the start index from the backend was used
as a write offset into the item list without a lower-bound check. An
untrusted QtRemoteObjects source could send a negative (or overflowing)
start, bypass the range check and cause an out-of-bounds write into
m_itemList. Validate start before using it, mirroring onDataChanged(), and
use 64-bit arithmetic to avoid a signed overflow.

Change-Id: I90ad0a73753cfb2d260868861357cb4fce9ce2de
Pick-to: 6.8
Fixes: QTBUG-148538
Reviewed-by: Robert Griebl <[email protected]>
(cherry picked from commit 6ced94de08776ec97dc15c8681d26555c1817f86)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
(cherry picked from commit c5f8696088623c82db5f3ae03574567390d42340)
https://invent.kde.org/qt/qt/qtinterfaceframework/-/commit/b82099564fbb1e378f0133d5b75a9d2ade99085d