[qt/qt/qtdeclarative]: Summary of bulk changes made

KDE Git Services - Bulk Change <[email protected]>
Newsgroups gmane.comp.kde.cvs
Message-ID <[email protected]>
Git repository change summary for qt/qt/qtdeclarative
Pushed by mirror-service into branch '6.11'.
Changed from 90070c7772617140b1a849a7d09285353a58650d to 0aba8c7674dbbbaaa142775247249e297a339c85
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 0aba8c7674dbbbaaa142775247249e297a339c85 by Qt Cherry-pick Bot (on behalf of Volker Hilsheimer) on 06/08/2026 at 08:04..
QQuickSvgParser: respect end iterator when skipping whitespace

The code contained a number of while loops to eat all whitespace or
parse all digits without respecting the end-sentinel. An input string
ending with whitespace or digit results in a possibly unterminated
out-of-bounds read.

To fix this in parsePathDataFast, remove the special handling of
whitespace in this code, and instead just continue the outer loop if the
current character is whitespace.

Pass the end sentinel to the parseNumbersArray and toDouble helpers so
that we can consistently test whether incrementing the str point has
reached the end.

Add test coverage, both to the QML svgpath test case, and to the
QQuickPath test using the private parsePathDataFast API directly. The
input data is the same in both cases. Note that running these tests
without the fix might only fail in an ASAN-enabled build.

Pick-to: 6.8 6.5 5.15
Fixes: QTBUG-148526
Change-Id: I3623e97510926b831daaa8b85e1fd5496faf27a1
Reviewed-by: Dimitrios Apostolou <[email protected]>
Reviewed-by: Hatem ElKharashy <[email protected]>
(cherry picked from commit 9ead7460ef95321c837b161b8f7951546711d03e)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
(cherry picked from commit 1854ebceebae5af54d9e32509d61e838c8643585)
https://invent.kde.org/qt/qt/qtdeclarative/-/commit/0aba8c7674dbbbaaa142775247249e297a339c85
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.