From ca26e804501d0fba45b703e281f48b3e90584335 Mon Sep 17 00:00:00 2001
From: Eirik Aavitsland <eirik.aavitsland@qt.io>
Date: Mon, 10 Mar 2025 14:39:53 +0100
Subject: [PATCH] Doc: QPicture uses QDataStream, forward warning against
 untrusted data

Make this explicit, with a link.

Pick-to: 6.9 6.8
Change-Id: I8b8b64c88daacba43df1eecf5a347c0a89d837e1
Reviewed-by: Eskil Abrahamsen Blomfeldt <eskil.abrahamsen-blomfeldt@qt.io>
---
 src/gui/image/qpicture.cpp | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/gui/image/qpicture.cpp b/src/gui/image/qpicture.cpp
index 9e902d69b82..e52f8244550 100644
--- a/src/gui/image/qpicture.cpp
+++ b/src/gui/image/qpicture.cpp
@@ -69,6 +69,10 @@ void qt_format_text(const QFont &fnt, const QRectF &_r,
     picture is available, for example, size(), isNull() and
     boundingRect().
 
+    \note QPicture uses QDataStream for serialization. The
+    \l {QDataStream#Corruption and Security}{same reservations} against
+    reading untrusted data apply.
+
     \sa QMovie
 */