[qt/qt/qtinterfaceframework]: Summary of bulk changes made

KDE Git Services - Bulk Change <[email protected]> Wed, 5 Aug 2026 12:16:01 +0000 (UTC)
Newsgroups gmane.comp.kde.cvs
Message-ID <[email protected]>
Git repository change summary for qt/qt/qtinterfaceframework
Pushed by mirror-service into branch 'dev'.
Changed from 74357845fff6292e181cfad99aa1b2d28f00b6c5 to 6ced94de08776ec97dc15c8681d26555c1817f86
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 6ced94de08776ec97dc15c8681d26555c1817f86 by Dominik Holland on 05/08/2026 at 06:34..
Validate the peer-supplied start index in QIfPagingModel::onDataFetched

In the DataChanged loading type the start index from the backend was used
as a write offset into the item list without a lower-bound check. An
untrusted QtRemoteObjects source could send a negative (or overflowing)
start, bypass the range check and cause an out-of-bounds write into
m_itemList. Validate start before using it, mirroring onDataChanged(), and
use 64-bit arithmetic to avoid a signed overflow.

Change-Id: I90ad0a73753cfb2d260868861357cb4fce9ce2de
Pick-to: 6.8 6.11 6.12
Fixes: QTBUG-148538
Reviewed-by: Robert Griebl <[email protected]>
https://invent.kde.org/qt/qt/qtinterfaceframework/-/commit/6ced94de08776ec97dc15c8681d26555c1817f86