qtbase-opensource-src.git
2 years agofix buffer overflow in Qt SVG
Debian Qt/KDE Maintainers [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
fix buffer overflow in Qt SVG

Origin: upstream, https://download.qt.io/official_releases/qt/5.15/CVE-2023-32763-qtbase-5.15.diff
Last-Update: 2023-05-22

Adds qAddOverflow and qMulOverflow definitions to QFixed.

Gbp-Pq: Name CVE-2023-32763.diff

2 years agodo not set Qt::ToolTip flag for QShapedPixmapWindow
Debian Qt/KDE Maintainers [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
do not set Qt::ToolTip flag for QShapedPixmapWindow

Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=180b496b537089b8
Bug: https://bugreports.qt.io/browse/QTBUG-98048
Last-Update: 2023-05-20

This hint is not really needed in the first place and only causes
problems in some environments.

For example in KDE, the compositor animates changes in position and size
for all ToolTip windows. However, this is not wanted here because we use
this window as a thumbnail for a drag-and-drop operation.
Before this patch the dragged element would lag significantly behind the
cursor. Now it works as expected, i.e. the dragged element follows the
cursor immediately.

Gbp-Pq: Name qshapedpixmapwindow_no_tooltip.diff

2 years agoFix denial-of-service in Qt SQL ODBC driver plugin
Debian Qt/KDE Maintainers [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
Fix denial-of-service in Qt SQL ODBC driver plugin

Origin: upstream, https://download.qt.io/official_releases/qt/5.15/CVE-2023-24607-qtbase-5.15.diff
Last-Update: 2023-02-26

Gbp-Pq: Name CVE-2023-24607.diff

2 years agoset geometry property in QXcbWindow after checking minimum size
Debian Qt/KDE Maintainers [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
set geometry property in QXcbWindow after checking minimum size

Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=6a3627b6c5aa5109
Last-Update: 2023-01-04

QXcbWindow::create() bound the window's size to windowMinimumSize(),
after its size had been inherited from parent().
QPlatformWindow::setGeometry() was called before that sanity check.

When a fullscreen window is re-mapped from a deactivated screen to the
remaining screen, the call to QPlatformWindow::setGeometry() assigns
an invalid QRect to QPlatformWindowPrivate::rect
The negative int values x2 and/or y2 cause
QXcbBackingStoreImage::flushPixmap to address unmapped memory and
crash.

This patch moves the call to QPlatformWindow::setGeometry() from
before to after bounding to a minimum value. That assures a valid
rectangle to be assigned in all cases.

Gbp-Pq: Name qxcbwindow_set_geometry.diff

2 years agofix deletion order in QImageReader/Writer destructors
Debian Qt/KDE Maintainers [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
fix deletion order in QImageReader/Writer destructors

Origin: upstream, commits
 https://code.qt.io/cgit/qt/qtbase.git/commit/?id=f091026be1deb4b4
 https://code.qt.io/cgit/qt/qtbase.git/commit/?id=5633cb69f68ca3d3
Last-Update: 2023-02-26

The device would be deleted before the image format handler, and hence
be a dangling pointer that could easily cause a crash if the handler
or codec would access it on destruction, e.g. for cleanup.

Gbp-Pq: Name image_deletion_order.diff

2 years agofix Alt+` shortcut on non-US layouts
Debian Qt/KDE Maintainers [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
fix Alt+` shortcut on non-US layouts

Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit?id=62e697fd568f6acd
Last-Update: 2022-12-03

Make it possible for non-letter-keys with Latin 1 symbols (`, !, @ etc.)
to participate in shortcuts also, when the keys generate national
symbols on non-Latin layout.

For example, in Russian layout, "`" key generates cyrillic "ё" letter of
national alphabet, so shortcuts with the key should still work
regardless of the actual layout.

Gbp-Pq: Name fix_alt_backtick.diff

2 years agouse wayland platform plugin on GNOME wayland sessions by default
Debian Qt/KDE Maintainers [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
use wayland platform plugin on GNOME wayland sessions by default

Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=dda7dab8274991e4
Last-Update: 2022-10-16

Qt wayland platform plugin has improved quite a lot and it is now pretty
much usable on Gnome. It also improves user experience a lot on HiDPI
displays.

Gbp-Pq: Name gnome_wayland.diff

2 years agowidgets: setTransientParent() when a QMenu is a window
Debian Qt/KDE Maintainers [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
widgets: setTransientParent() when a QMenu is a window

Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=493a85a9e4688744
Last-Update: 2022-10-16

On some platforms, such as X11 and Wayland with some compositors,
QMenu could be a popup window, which should be set a transient parent
to get relative position, which is requested by Wayland.

Added transientParentWindow() for QMenuPrivate like QDialogPrivate.

Gbp-Pq: Name qmenu_set_transient_parent.diff

2 years agoupdate function argument of SSL_CTX_set_options
Debian Qt/KDE Maintainers [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
update function argument of SSL_CTX_set_options

Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=e995bfc0ea783c15
 Backported for 5.15 by the patch author, Michael Saxl.
Last-Update: 2022-08-07

openssl3 uses uint64_t for the options argument in SSL_CTX_set_options,
older ones used long.
sizeof(long) is not the same on any platform as sizeof(uint64_t)

Gbp-Pq: Name openssl_set_options.diff

2 years agoupstream fixes to support OpenSSL 3.0
Debian Qt/KDE Maintainers [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
upstream fixes to support OpenSSL 3.0

Origin: upstream, commits
 https://code.qt.io/cgit/qt/qtbase.git/commit/?id=3186ca3e3972cf46
 https://code.qt.io/cgit/qt/qtbase.git/commit/?id=408656c6f9de326c
 https://code.qt.io/cgit/qt/qtbase.git/commit/?id=ae6590e360fbb04d
 and a small part of
 https://code.qt.io/cgit/qt/qtbase.git/commit/?id=4c0f81490ba0c4ec
Last-Update: 2021-12-09

Gbp-Pq: Name openssl3.diff

2 years agoQPushButton/fusion style: don't ignore QIcon::On icon
Debian Qt/KDE Maintainers [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
QPushButton/fusion style: don't ignore QIcon::On icon

Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=e9ccdf4d84157173
Last-Update: 2021-08-10

The fusion style did ignore the QIcon::On icon because it reset
State_On to avoid the visual shift of a pressed button.
But it's not needed to reset this flag - the shift does not happen
because the fusion style does return 0 as offset for
PM_ButtonShiftHorizontal/PM_ButtonShiftVertical so no shifting will
happen.

Gbp-Pq: Name fusion_checkable_qpushbutton.diff

2 years agoadjust QMimeDatabase implementation
Debian Qt/KDE Maintainers [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
adjust QMimeDatabase implementation

Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=0cbbba2aa5b47224
Last-Update: 2021-06-12

When multiple globs match, and the result from magic sniffing is
unrelated to any of those globs, globs have priority and one of them
should be picked up.

Gbp-Pq: Name mime_globs.diff

2 years agoqtbase-opensource-src (5.15.10+dfsg-4) unstable; urgency=medium
Dmitry Shachnev [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
qtbase-opensource-src (5.15.10+dfsg-4) unstable; urgency=medium

  * Backport upstream patch to fix build with libxkbcommon 1.6.0.
  * Update symbols files from buildds’ logs.

[dgit import unpatched qtbase-opensource-src 5.15.10+dfsg-4]

2 years agoImport qtbase-opensource-src_5.15.10+dfsg-4.debian.tar.xz
Dmitry Shachnev [Tue, 24 Oct 2023 11:07:10 +0000 (14:07 +0300)]
Import qtbase-opensource-src_5.15.10+dfsg-4.debian.tar.xz

[dgit import tarball qtbase-opensource-src 5.15.10+dfsg-4 qtbase-opensource-src_5.15.10+dfsg-4.debian.tar.xz]

2 years agoImport qtbase-opensource-src_5.15.10+dfsg.orig.tar.xz
Dmitry Shachnev [Fri, 9 Jun 2023 08:08:39 +0000 (11:08 +0300)]
Import qtbase-opensource-src_5.15.10+dfsg.orig.tar.xz

[dgit import orig qtbase-opensource-src_5.15.10+dfsg.orig.tar.xz]