[qt/qt/qtquick3dphysics]: Summary of bulk changes made

KDE Git Services - Bulk Change <[email protected]>
Newsgroups gmane.comp.kde.cvs
Message-ID <[email protected]>
Git repository change summary for qt/qt/qtquick3dphysics
Pushed by mirror-service into branch '6.11'.
Changed from 5b8640456746143e391edcecedc6a3668eaf94fd to a63d9d756142c6109a57ca9d9c375e54557742a6
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit a63d9d756142c6109a57ca9d9c375e54557742a6 by Qt Cherry-pick Bot (on behalf of Jonas Karlsson) on 14/08/2026 at 11:29..
Fix stack-buffer-overflow in PhysX BucketPruner raycasts

precomputeRayData() in SqBucketPruner.cpp read 16 bytes via an SSE load
(_mm_loadu_ps) from the address of a PxVec3, which is only 12 bytes.
Callers that pass a bare stack PxVec3 with nothing guaranteed to follow
it -- such as CharacterController's internal ground-detection raycast,
Cct::Controller::findTouchedObject() -- trigger a 4-byte out-of-bounds
read past the object. This is caught as a stack-buffer-overflow under
AddressSanitizer and is undefined behavior in any build.

Fix by building the SSE vector from the 3 known components instead of
loading a phantom 4th float.

Pick-to: 6.8
Change-Id: I09b7c09bc83650ccf2c64ebe0f7a1b45f1978275
Reviewed-by: Kristoffer Skau <[email protected]>
(cherry picked from commit d9f7e5a38b2f38b1aa47da980b62a8211f6db5ad)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
(cherry picked from commit 4e913df734ca80640403da7c6346415caf93413a)
https://invent.kde.org/qt/qt/qtquick3dphysics/-/commit/a63d9d756142c6109a57ca9d9c375e54557742a6
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.