rich text: limit size of text object
authorDebian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Thu, 11 Dec 2025 10:02:24 +0000 (13:02 +0300)
committerDmitry Shachnev <mitya57@debian.org>
Thu, 11 Dec 2025 10:02:24 +0000 (13:02 +0300)
commit5983d6c56406268f2f2b7ee5029b2e3ba7d99189
tree0e0fd7e061823e0aad9057108a5a71aef8b7005e
parent70d3e46827957b27fd6567fc953c86cccae9bdf8
rich text: limit size of text object

Origin: upstream, https://code.qt.io/cgit/qt/qtdeclarative.git/commit/?id=144ce34e846b3f73
 Backported to 5.15 by Dmitry Shachnev: validate allocation manually
 instead of using QImageIOHandler::allocateImage().
Last-Update: 2025-12-11

When we draw a text object, we need to store this in RAM
since the QTextObjectInterface is QPainter-based. This
could lead to over-allocation if the text object size
was set to be very large. We use the existing image IO
infrastructure for making sure allocations are within
reasonable (and configurable) limits.

Gbp-Pq: Name CVE-2025-12385-part2.patch
src/quick/items/qquicktextnodeengine.cpp
tests/auto/quick/qquicktext/tst_qquicktext.cpp