qiurui
/
qtbase
mirror of https://github.com/qt/qtbase.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

CRA: rectify androidcontentfileengine.cpp and extract.cpp files 

Under androidcontentfileengine.cpp, mainly parsing and
encoding/decoding of file paths are done, so a more
accurate reason is data-parser instead of file-handling.

Under extract.cpp, the criticality is not very accurate
either, as the only way we're using this code is to extract
Android system style, and it's not expected to have security
concerns or be affected by a 3rd party.

Amends a6caa394ba.

Pick-to: 6.10 6.9 6.8
Task-number: QTBUG-136818
Task-number: QTBUG-135178
Task-number: QTBUG-136816
Change-Id: Id582d92befb000afbe4d9b01f79ef220e274711e
Reviewed-by: Dimitrios Apostolou <jimis@qt.io>
This commit is contained in:
Assam Boudjelthia 2025-07-12 18:00:30 +03:00
parent fbb80d525f
commit 8c626ad667
2 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/plugins/platforms/android/androidcontentfileengine.cpp
View File

@ -1,7 +1,7 @@
// Copyright (C) 2019 Volker Krause <vkrause@kde.org>
// Copyright (C) 2022 The Qt Company Ltd.
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
// Qt-Security score:critical reason:file-handling
// Qt-Security score:critical reason:data-parser
#include "androidcontentfileengine.h"

1
src/plugins/platforms/android/extract.cpp
View File

@ -1,7 +1,6 @@
// Copyright (C) 2021 The Qt Company Ltd.
// Copyright (C) 2014 BogDan Vatra <bogdan@kde.org>
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
// Qt-Security score:critical reason:data-serializing
#include <QtCore/QJniEnvironment>