Details
-
Task
-
Resolution: Fixed
-
Not Evaluated
-
None
-
None
-
None
-
50ba77085 (dev), bade23a54 (6.9), 1d31d6844 (6.8), 5a6edaea3 (dev), ef2e631c6 (6.9), 9c123a030 (6.8)
Description
The task is to review all code mentioned in the task title for the presence of code that is considered security-critical, according to https://contribute.qt-project.org/quips/23. In particular, we are looking for parsers that touch untrusted data directly. Such code should have the security header
// Qt-Security score:critical reason:data-parser
Definition of done:
1. All code mentioned in the task header is reviewed
2. If security critical code is found, the header is added.