Commit Graph

992 Commits

Author SHA1 Message Date
Marc Mutz 184ab317f1 Mark documentation files as security-insignificant
That includes .qdoc files as well as snippets.

QUIP: 23
Task-number: QTBUG-135745
Pick-to: 6.10 6.8
Change-Id: I701c49578a872dd6c6e385d68ed3db0005522abf
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
2025-09-23 11:32:16 +00:00
Marc Mutz 42f2fff72b Mark remaining QTextCodec headers are security-critical
These headers contain macros and inline functions that are no longer
trivial, and are probably used in many QTextCodec implementations.

Some of this stuff could be de-inlined, so leave a comment.

QUIP: 23
Task-number: QTBUG-135745
Pick-to: 6.10 6.8
Change-Id: I8a7d7afd51b4ddab56c87ee42e5b3c0ab4c6aa01
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
2025-09-23 11:32:12 +00:00
Marc Mutz 98f2f7c220 Mark most QTextCodec headers as security-significant
They either contain only declarations, or only trivial implementation
(like inline forwarders from virtual name() to static _name()).

A follow-up patch will handle the remaining headers that don't fit
these categories.

QUIP: 23
Task-number: QTBUG-135745
Pick-to: 6.10 6.8
Change-Id: I7f9035a8491de14ad57acf084f77604869ec484b
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
2025-09-23 08:25:53 +00:00
Marc Mutz 57fda8d6e1 De-inline ~QJpUnicodeConv()
Destructors of virtual classes should be out-of-line, to avoid
-Wweak-vtables, and all the complications weak vtables entail.

Task-number: QTBUG-45582
Task-number: QTBUG-140401
Pick-to: 6.10 6.8 6.5
Change-Id: I6bf136d6c5f6b78829fbe179cf7f713d0e05cc68
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
2025-09-23 10:25:17 +02:00
Marc Mutz a8c238586b QBinaryJsonObject: replace qSwap with qt_ptr_swap
Amends b4f927dc94, see that commit for
rationale.

Task-number: QTBUG-97601
Pick-to: 6.10 6.8 6.5
Change-Id: I06ab5f2a8e59f08846eade2cc97f531093477ee3
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
2025-09-23 10:25:04 +02:00
Marc Mutz a284da2667 Mark QLinkedList as security-significant
This class does not handle external input, so is significant
(the default).

Task-number: QTBUG-135745
Pick-to: 6.10 6.8
Change-Id: I95cde0545782400bdbb0e53d5a559f28a1184f06
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
2025-09-22 08:24:58 +00:00
Qt Submodule Update Bot cf0d956a99 Update dependencies on 'dev' in qt/qt5compat
Change-Id: Ic7da523a1d46a054a46e39569b309cb7a705d0d5
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-09-20 14:14:44 +00:00
Marc Mutz f15c1606ae Mark all QTextCodec implementation files as security-critical
QStringConverter is, so these should be, too.

Task-number: QTBUG-135745
Pick-to: 6.10 6.8
Change-Id: I2360bf3ae5ee280dd81f482999f4620c7ffd5134
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
2025-09-19 22:30:28 +02:00
Marc Mutz 32bc8f4dfd Inline cp949codetbl_p.h into its only user
There doesn't seem to be a generator that creates this file, so that
can't be the reason to have it as a separate header.

There's also only qeuckrcodec.cpp which includes the header, so
multiple users, too, can't be the reason.

Since there's no reason to have it as a separate header, don't. Inline
the contents into qeuckrcodec.cpp.

As a drive-by, make the table constexpr instead of just const.

This avoids having to mark the file with Qt-Security headers.

Task-number: QTBUG-135745
Pick-to: 6.10 6.8
Change-Id: Ie0487bc62ab2e88727bbfa442ab85549670bbf57
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
2025-09-19 22:30:21 +02:00
Marc Mutz 151f8e307a Mark SAX classes as security-critical
QDom and QXmlStreamReader are, too.

The public header is trivial-impl-only, but the private one has some
more implementation.

I didn't check whether it's beyond anyone's limit for trivial
implementation, because I think this header should be inlined into its
only #include'er, qxml.cpp.

Add a comment to that effect, and leave the header as "critical".

Task-number: QTBUG-135745
Pick-to: 6.10.0 6.10 6.9 6.8
Change-Id: Ic02450967b483add4225e8c27c7b4b6eddb68640
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
2025-09-18 15:09:11 +02:00
Marc Mutz 4953c20511 Mark QStringRef as security-critical
QString and QStringView are, too.

The header contains a smidge too much implementation to mark it
trivial-impl-only, add a comment to de-inline such stuff.

Task-number: QTBUG-135745
Pick-to: 6.10.0 6.10 6.9 6.8
Change-Id: I55a664d4e71ecf2bf754389a30ec13ee2e9b9e8a
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
2025-09-18 15:09:11 +02:00
Marc Mutz 7e5989257a Mark QRegExp as security-critical
QRegularExpression is, too, and, unlike QRegularExpression, this class
does the pattern parsing and matching completely by itself
(QRegularExpression hands it over to libpcre).

The header only contains trivial forwarders between (char*, int) and
(QString) overloads, so mark it as trivial-impl-only.

Task-number: QTBUG-135745
Pick-to: 6.10 6.10.0 6.9 6.8
Change-Id: I65a9e2b521919d3f6eb604560bba701f46f8d0d8
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
2025-09-18 15:09:11 +02:00
Qt Submodule Update Bot 3952e2998d Update dependencies on 'dev' in qt/qt5compat
Change-Id: I2ffd5ff05148c5cb6f1e44aef85bf57bc778f416
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-09-18 10:38:02 +00:00
Qt Submodule Update Bot 6f41f02e47 Update dependencies on 'dev' in qt/qt5compat
Change-Id: I8d49b6a76fd73d250170be39ffc6ab0a81c67d03
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-09-05 13:31:39 +00:00
Qt Submodule Update Bot d06523f4e3 Update dependencies on 'dev' in qt/qt5compat
Change-Id: I6fe398b38d7257d6045b845a66c85a85fbdaf885
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-09-01 20:59:35 +00:00
Qt Submodule Update Bot 7f5d93ec79 Update dependencies on 'dev' in qt/qt5compat
Change-Id: Ie834478af3483814e32334caba9c7d1ea2c3f376
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-08-08 22:40:36 +00:00
Topi Reinio 533e758dba Doc: Fix incorrect usage of \generatelist
The \generatelist command takes an optional argument
that affect how the members are listed, for example,
`classesbymodule` which creates an annotated list of
the classes in a named C++ module.

`groupsbymodule` is not recognized or documented. QDoc
falls back to generating a list of all members of a
group in this case. While the end result is correct,
this relies on an undocumented feature that is likely
to change and break.

Replace these instances with an explicit \annotatedlist
command that produces the same output.

Pick-to: 6.10
Task-number: QTBUG-138901
Change-Id: I4486d19f59c6c1fd085f15a6a296226a6a8a20b0
Reviewed-by: Paul Wicking <paul.wicking@qt.io>
2025-08-06 09:14:30 +00:00
Qt Submodule Update Bot a145cf51cb Update dependencies on 'dev' in qt/qt5compat
Change-Id: I6da6d9e45050aa1d84062b9f984018625e9458a3
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-08-05 10:45:56 +00:00
Qt Submodule Update Bot cd1913dccd Update dependencies on 'dev' in qt/qt5compat
Change-Id: Iabcf05898b12b2275166d95e69c96f6270643142
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-07-18 13:52:15 +00:00
Qt Submodule Update Bot 4bc68541bf Update dependencies on 'dev' in qt/qt5compat
Change-Id: Ie52ba44b98ddd8bee01529cb24f47ef3c4d07116
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-07-15 08:35:21 +00:00
Lucie Gérard ed512b5195 Remove year from Qt Copyright in REUSE.toml
Change-Id: I40bc4a0cba77f9fe28e6dbaac31a8e268439d47f
Reviewed-by: Joerg Bornemann <joerg.bornemann@qt.io>
2025-07-14 09:46:28 +02:00
Qt Submodule Update Bot c1b30a42a2 Update dependencies on 'dev' in qt/qt5compat
Change-Id: Iafb154facf747b1040846b57d73804527b15c03c
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-07-07 10:37:02 +00:00
Dheerendra Purohit f3f8ce097b Doc: Add textual description for javaiterators1.png in QtCore5Compat doc
Add textual description for javaiterators1.png in the QtCore5Compat
documentation to ensure QDoc generates alt text.

Pick-to: 6.10 6.9 6.8
Fixes: QTBUG-136146
Change-Id: I8474cbcf0900ea117e1e6e78aff8b8b2b985085b
Reviewed-by: Axel Spoerl <axel.spoerl@qt.io>
2025-07-04 06:18:42 +00:00
Qt Submodule Update Bot 326179e055 Update dependencies on 'dev' in qt/qt5compat
Change-Id: Ie671ccfc8ac64da17b7c6120d3921835094b8806
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-07-03 15:33:58 +00:00
Qt Submodule Update Bot 2e57ca66e2 Update dependencies on 'dev' in qt/qt5compat
Change-Id: Ibe00786f264a1d0f53c90fb5a83677ab57796ea4
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-07-01 22:39:07 +00:00
Qt Submodule Update Bot 62c73547c6 Update dependencies on 'dev' in qt/qt5compat
Change-Id: I71f60cf66fc65cb1677e34febb48b2b14479301c
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-06-30 14:25:42 +00:00
Qt Submodule Update Bot 4d3ee2478f Update dependencies on 'dev' in qt/qt5compat
Change-Id: If1f4f957300dead3e5ab94f51922908b1d38a4be
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-06-27 16:24:57 +00:00
Qt Submodule Update Bot b4c15d456d Update dependencies on 'dev' in qt/qt5compat
Change-Id: Ice32d30432a3efbe4e1e39504953381514c9e8ac
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-06-25 21:08:24 +00:00
Cristian Le 5a98be6905 Move `qt_internal_project_setup` as early as possible
The earliest we can move this is right after `BuildInternals`. This
allows us to add function calls before navigating the `find_package`
tree of the dependents.

Task-number: QTBUG-135233
Change-Id: I74d73979b4084ddf535bd1e3b41bbf91dbc0a22e
Reviewed-by: Alexandru Croitor <alexandru.croitor@qt.io>
2025-06-20 15:25:14 +02:00
Dheerendra Purohit ad6de177ae Doc:ColorOverlay Docs to use correct colorize format
The ColorOverlay documentation incorrectly stated that the color format
is RGBA .The fix changed to ARGB as per the actual usage and QML color
format specification.

Pick-to: 6.10 6.9
Fixes: QTBUG-71541
Change-Id: If0ddacb1baba696b7095f6494629feb5cee78238
Reviewed-by: Axel Spoerl <axel.spoerl@qt.io>
2025-06-19 10:26:02 +05:30
Qt Submodule Update Bot 3cf5bd05b6 Update dependencies on 'dev' in qt/qt5compat
Change-Id: I9f0b49dbb858fc97167c90d8893d4b32fd3b2d4e
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-06-18 00:35:32 +00:00
Qt Submodule Update Bot 0cc8149245 Update dependencies on 'dev' in qt/qt5compat
Change-Id: I03dee0c01bc40c80d0a2f5f7334c87f0a98df740
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-06-14 05:00:49 +00:00
Jani Heikkinen 153efeabdf Bump version to 6.11.0
Change-Id: I9842785c95234d73944158468c465a4474a8e887
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-06-14 06:00:48 +01:00
Alexandru Croitor 0bf495f662 CMake: Add PURL and CPE info to 3rd party attribution files
[ChangeLog][Third-Party Code] Added PURL and CPE information to the
attribution files of 3rd party sources.

Pick-to: 6.5 6.8 6.9 6.10
Fixes: QTBUG-137188
Task-number: QTBUG-129602
Change-Id: I3b7282ae913af1028072825e0bae1a6927002535
Reviewed-by: Joerg Bornemann <joerg.bornemann@qt.io>
2025-06-04 14:04:21 +02:00
Topi Reinio f704d2e8aa Doc: Enable automatic linking to sources on code.qt.io
Since 6.10, QDoc is capable of generating links to the declaration in
the source code for each documented C++ API entity in their `Detailed
description`.

Add the required configuration to enable this feature for Qt 5 Core
Compatibility APIs.

Change-Id: Ic88dc5e1595c19e0a82aa6797ff300638d046e8b
Reviewed-by: Paul Wicking <paul.wicking@qt.io>
2025-05-27 09:24:40 +00:00
Qt Submodule Update Bot 2964961c22 Update dependencies on 'dev' in qt/qt5compat
Change-Id: Ia0bdb9bfae1c7560c4ec998fc78760f833f267c9
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-05-23 22:20:36 +00:00
Qt Submodule Update Bot 2074869adc Update dependencies on 'dev' in qt/qt5compat
Change-Id: Ia37494ebc02cc44973c2f0eee4b35244819a5a0f
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-05-21 09:42:44 +00:00
Qt Submodule Update Bot 69abea6b17 Update dependencies on 'dev' in qt/qt5compat
Change-Id: I4c62cf280e2505a2fe6d61e4fb9c8b76425ac292
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-05-18 11:06:21 +00:00
Qt Submodule Update Bot 249cb4a960 Update dependencies on 'dev' in qt/qt5compat
Change-Id: Icc468fd3f6a8125fec1bb9c52737cc6998612b76
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-05-13 16:09:28 +00:00
Juha Vuolle 9be52337fd Skip sax autotests if XML is disabled
Qt lite configurations may disable XML altogether (-no-feature-xml).
Sax autotests link and rely on XML => disable tests when XML is
disabled.

Fixes: QTBUG-136673
Change-Id: Idd837781651d2b834a28ee8cd52516886a95b744
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
2025-05-13 11:48:42 +03:00
Qt Submodule Update Bot 6d6637757f Update dependencies on 'dev' in qt/qt5compat
Change-Id: I97c881cbf51a4438de429dfaea013015eb7a36aa
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-05-08 15:24:45 +00:00
Qt Submodule Update Bot bd407c33e7 Update dependencies on 'dev' in qt/qt5compat
Change-Id: I7684483efb3a26e5834004575e8e0ce33886e435
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-05-03 02:19:20 +00:00
Qt Submodule Update Bot 444c148716 Update dependencies on 'dev' in qt/qt5compat
Change-Id: I7ca3464c3cef972f1adbd2d1f9fe37ec2f0a56ac
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-05-01 08:58:23 +00:00
Qt Submodule Update Bot f5962d6989 Update dependencies on 'dev' in qt/qt5compat
Change-Id: Id88c6d5f2e448add1128d8139750e372752afab0
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-04-29 11:44:17 +00:00
Qt Submodule Update Bot f21a6a33d8 Update dependencies on 'dev' in qt/qt5compat
Change-Id: I92de71d4c124b2a2c6e0fde46196defdeaeb5e3a
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-04-24 09:35:09 +00:00
Qt Submodule Update Bot aaec5f909b Update dependencies on 'dev' in qt/qt5compat
Change-Id: Iee92ad8993669903b98b65cf56d093f314d74e3c
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-04-22 14:05:23 +00:00
Qt Submodule Update Bot 3c1956a150 Update dependencies on 'dev' in qt/qt5compat
Change-Id: I88d809afa3a7a9b63eaf29da6ef9af22d9095b68
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-04-15 11:31:05 +00:00
Qt Submodule Update Bot 3a73433230 Update dependencies on 'dev' in qt/qt5compat
Change-Id: I3a47a726622fcfa885bd29638810b8227e1ea353
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-04-09 23:56:26 +00:00
Qt Submodule Update Bot e287a65eb7 Update dependencies on 'dev' in qt/qt5compat
Change-Id: I586991be84d1b6daabedb4778c06a9af75b484fd
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-04-03 15:51:11 +00:00
Qt Submodule Update Bot 935a28b23b Update dependencies on 'dev' in qt/qt5compat
Change-Id: I5c56cc230d441ff2d464c6ce544fe83fd459457c
Reviewed-by: Qt Submodule Update Bot <qt_submodule_update_bot@qt-project.org>
2025-04-01 12:48:37 +00:00