[qt/qt/qtinterfaceframework]: Summary of bulk changes made
KDE Git Services - Bulk Change <[email protected]> Wed, 5 Aug 2026 12:16:01 +0000 (UTC)
| Newsgroups | gmane.comp.kde.cvs |
|---|---|
| Message-ID | <[email protected]> |
Git repository change summary for qt/qt/qtinterfaceframework Pushed by mirror-service into branch 'dev'. Changed from 74357845fff6292e181cfad99aa1b2d28f00b6c5 to 6ced94de08776ec97dc15c8681d26555c1817f86 Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository. This change contains the following new commits: Git commit 6ced94de08776ec97dc15c8681d26555c1817f86 by Dominik Holland on 05/08/2026 at 06:34.. Validate the peer-supplied start index in QIfPagingModel::onDataFetched In the DataChanged loading type the start index from the backend was used as a write offset into the item list without a lower-bound check. An untrusted QtRemoteObjects source could send a negative (or overflowing) start, bypass the range check and cause an out-of-bounds write into m_itemList. Validate start before using it, mirroring onDataChanged(), and use 64-bit arithmetic to avoid a signed overflow. Change-Id: I90ad0a73753cfb2d260868861357cb4fce9ce2de Pick-to: 6.8 6.11 6.12 Fixes: QTBUG-148538 Reviewed-by: Robert Griebl <[email protected]> https://invent.kde.org/qt/qt/qtinterfaceframework/-/commit/6ced94de08776ec97dc15c8681d26555c1817f86