[qt/qt/qtquick3dphysics]: Summary of bulk changes made
KDE Git Services - Bulk Change <[email protected]>
| Newsgroups | gmane.comp.kde.cvs |
|---|---|
| Message-ID | <[email protected]> |
Git repository change summary for qt/qt/qtquick3dphysics Pushed by mirror-service into branch '6.11'. Changed from 5b8640456746143e391edcecedc6a3668eaf94fd to a63d9d756142c6109a57ca9d9c375e54557742a6 Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository. This change contains the following new commits: Git commit a63d9d756142c6109a57ca9d9c375e54557742a6 by Qt Cherry-pick Bot (on behalf of Jonas Karlsson) on 14/08/2026 at 11:29.. Fix stack-buffer-overflow in PhysX BucketPruner raycasts precomputeRayData() in SqBucketPruner.cpp read 16 bytes via an SSE load (_mm_loadu_ps) from the address of a PxVec3, which is only 12 bytes. Callers that pass a bare stack PxVec3 with nothing guaranteed to follow it -- such as CharacterController's internal ground-detection raycast, Cct::Controller::findTouchedObject() -- trigger a 4-byte out-of-bounds read past the object. This is caught as a stack-buffer-overflow under AddressSanitizer and is undefined behavior in any build. Fix by building the SSE vector from the 3 known components instead of loading a phantom 4th float. Pick-to: 6.8 Change-Id: I09b7c09bc83650ccf2c64ebe0f7a1b45f1978275 Reviewed-by: Kristoffer Skau <[email protected]> (cherry picked from commit d9f7e5a38b2f38b1aa47da980b62a8211f6db5ad) Reviewed-by: Qt Cherry-pick Bot <[email protected]> (cherry picked from commit 4e913df734ca80640403da7c6346415caf93413a) https://invent.kde.org/qt/qt/qtquick3dphysics/-/commit/a63d9d756142c6109a57ca9d9c375e54557742a6