[qt/qt/qtinterfaceframework-taglib]: Summary of bulk changes made
KDE Git Services - Bulk Change <[email protected]>
| Newsgroups | gmane.comp.kde.cvs |
|---|---|
| Message-ID | <[email protected]> |
Git repository change summary for qt/qt/qtinterfaceframework-taglib Pushed by mirror-service into branch 'upstream/master'. Changed from 0a13a11bad3c9c9a2a6f88db2981ccbfcad43bb0 to fa4c623ab17dfee5fc92b003eec0888fc2682713 Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository. This change contains the following new commits: Git commit fa4c623ab17dfee5fc92b003eec0888fc2682713 by GitHub (on behalf of Acts1631) on 18/08/2026 at 19:27.. Bound ASF header-extension child parsing (#1426) ASF header extensions trusted their nested data size and accepted zero-sized child objects. A crafted file could make parsing continue outside the enclosing object while retaining one object per child header, exhausting process memory when opened. Bound nested data to the enclosing object, require a complete child header, and cap the nested object count. https://invent.kde.org/qt/qt/qtinterfaceframework-taglib/-/commit/fa4c623ab17dfee5fc92b003eec0888fc2682713