1berry/qtbase
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Mark qtbase/src/android files as security sensitive

Browse Source 
QtApkFileEngine.java
-File/Data parsing

QtClipboardManager.java
-Text/Url parsing

QtEditText.java
-Password input type

Pick-to: 6.8
Fixes: QTBUG-136730
Task-number: QTBUG-135178
Change-Id: Ib2b574825e1f4acdc96c7bc781dbae00a274bd50
Reviewed-by: Assam Boudjelthia <assam.boudjelthia@qt.io>
(cherry picked from commit 30f5ad0329867d266529a4e88db287f3a5d49749)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
This commit is contained in:
Jani Korteniemi 2025-05-13 13:26:07 +03:00 committed by Qt Cherry-pick Bot
parent c2915c84c5
commit 3938b87d91
3 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/android/jar/src/org/qtproject/qt/android/QtApkFileEngine.java
View File

@ -1,5 +1,6 @@
// Copyright (C) 2024 The Qt Company Ltd. // Copyright (C) 2024 The Qt Company Ltd.
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only // SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
// Qt-Security score:critical reason:file-handling
package org.qtproject.qt.android; package org.qtproject.qt.android;

1
src/android/jar/src/org/qtproject/qt/android/QtClipboardManager.java
View File

@ -1,5 +1,6 @@
// Copyright (C) 2023 The Qt Company Ltd. // Copyright (C) 2023 The Qt Company Ltd.
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only // SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
// Qt-Security score:critical reason:data-parser
package org.qtproject.qt.android; package org.qtproject.qt.android;

1
src/android/jar/src/org/qtproject/qt/android/QtEditText.java
View File

@ -1,6 +1,7 @@
// Copyright (C) 2016 The Qt Company Ltd. // Copyright (C) 2016 The Qt Company Ltd.
// Copyright (C) 2012 BogDan Vatra <bogdan@kde.org> // Copyright (C) 2012 BogDan Vatra <bogdan@kde.org>
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only // SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
// Qt-Security score:critical reason:password-input-type
package org.qtproject.qt.android; package org.qtproject.qt.android;