| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The QtRemoteObjects serialization is built on top of QDataStream, but
QDataStream is not secure. Mark all files parsing data as security
critical.
The security is dependent on the backend used. The local and QNX
backends communicate only locally but are insecure on a compromised
host. The TCP backend is by default insecure, but it supports TLS,
and can be secure if that is used.
The two files in the repparser directory are used for parsing, but
only at build time, and are therefore kept at security significant.
The remaining files are marked as security signifcant.
QUIP: 23
Task-number: QTBUG-135570
Pick-to: 6.10 6.9 6.8
Change-Id: I11176c036d95f8c706bd05e1cab1ba499003f683
Reviewed-by: Edward Welbourne <edward.welbourne@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
| |
Replace the current license disclaimer in files by
a SPDX-License-Identifier.
License files are organized under LICENSES directory.
Pick-to: 6.4
Task-number: QTBUG-67283
Change-Id: I315d7ce1d6c6c3497afdfe8b61a113fdc181c935
Reviewed-by: Jörg Bornemann <joerg.bornemann@qt.io>
|
| |
|
|
|
|
|
| |
Task-number: QTBUG-90685
Change-Id: Iba9ee0a28ec0ceeca5ae318204deb14190042533
Reviewed-by: Qt CI Bot <qt_ci_bot@qt-project.org>
Reviewed-by: Brett Stottlemyer <bstottle@ford.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
All these are relatively easily verified to be safe: They clearly
don't modify the container they iterate over, are already const or
trivially marked as such.
In QRegistrySource::removeServer(), merge with an adjacent loop.
In tst_modelview.cpp, replaced a loop over QHash::keys() + QHash::op[]
with an STL-style loop and it.key()/it.value().
In tst_signature.cpp, replaced a QStringList with a C array of
QLatin1Strings, saving a qAsConst call.
Add some reserve() as a drive-by.
Change-Id: Ibf09371ca8b58437834734c3bab997527219c823
Reviewed-by: Michael Brasser <michael.brasser@live.com>
Reviewed-by: Lars Knoll <lars.knoll@qt.io>
Reviewed-by: Mårten Nordheim <marten.nordheim@qt.io>
|
| |
|
|
|
|
|
|
|
|
| |
Always prepend the module and use headers directly.
Qt for Python requires the modules to be present.
Task-number: PYSIDE-862
Fixes: QTBUG-72675
Change-Id: I94e38fbab0f041370ca9d67ca13c78f0d33816b7
Reviewed-by: Brett Stottlemyer <bstottle@ford.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Unify licensing as it is in other submodules
- Src is licensed under Commercial, LGPLv3, GPLv2 and GPLv3 licenses
- Examples are licensed under Commercial and BSD licenses
- Tools and tests are licensed under commercial and GPLv3 license with
some exceptions
Task-number: QTBUG-58921
Change-Id: I4494bf8b705568b243340c98316bedd706145db5
Reviewed-by: Lars Knoll <lars.knoll@qt.io>
Reviewed-by: Brett Stottlemyer <bstottle@ford.com>
|
| |
|
|
|
|
|
|
| |
Change-Id: I3cf39180b08b80ea65c46e7b6a9e81f3aa79d1af
Reviewed-by: Kevin Funk <kevin.funk@kdab.com>
Reviewed-by: Continuous Integration (KDAB) <build@kdab.com>
Reviewed-by: Qt CI Bot <qt_ci_bot@qt-project.org>
Reviewed-by: Simon Hausmann <simon.hausmann@qt.io>
|
| |
|
|
|
|
|
|
|
| |
Extend QRemoteObjectSourceLocation to also carry the type name of the
object.
Change-Id: Ic50b3682343b92099a5e2f6c564bd10cc543356c
Reviewed-by: Continuous Integration (KDAB) <build@kdab.com>
Reviewed-by: Brett Stottlemyer <bstottle@ford.com>
|
| |
|
|
|
| |
Change-Id: I5ff3c30c58e2e44e850ec560de717bcd415c4592
Reviewed-by: BogDan Vatra <bogdan@kde.org>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The fix part is that connectionclient and connectionserver
were creating a new QDataStream each time read() was
called. This could "abandon" bytes if read() finished
with bytes left in the stream. Now the stream is created
once and kept.
The constant QRemoteObjectPackets::dataStreamVersion was
also created and set to QDataStream::Qt_5_0. This is
used to consistently set the version of all QDataStreams
used, which will help with compatibility between QtRO
versions.
Change-Id: Idca6d12ec3a5ef07ba6d5a88b00a139c16116b1a
Reviewed-by: Continuous Integration (KDAB) <build@kdab.com>
Reviewed-by: Björn Breitmeyer <bjoern.breitmeyer@kdab.com>
|
| |
|
|
|
|
|
|
|
| |
Without these includes it fails when compiling against Qt 5.5.
Change-Id: I23fa2f79a6dcba369fd5ea5f6a6dba56fcb9ec75
Reviewed-by: Kevin Funk <kevin.funk@kdab.com>
Reviewed-by: Milian Wolff <milian.wolff@kdab.com>
Reviewed-by: Brett Stottlemyer <bstottle@ford.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
This adds support for creating the Registry Host whenever, it no longer
needs to be created before Registry Replicas are used. It also provides
warnings if a Source is enabled that is already in the Registry.
To support consistency, connections are only made when the Registry is
valid. This prevents the edge case of a locally hosted source getting
connected to and then having a duplicate in the Registry when it connects.
Change-Id: Iffc21a41a72edf5e3c3b4e80d6de23d0b85c4d49
Reviewed-by: Björn Breitmeyer <bjoern.breitmeyer@kdab.com>
|
|
|
With the exception of the (internal) connection parts of QtRO, all of
the file names start with qremoteobject<element>, with the exception of
the two qregistrysource files. This fixes that inconsistency.
Change-Id: I639ee4b3184e97ebc1d7b519bb9df133df809bfb
Reviewed-by: Björn Breitmeyer <bjoern.breitmeyer@kdab.com>
|