Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-23529

[Security] qHash(): consider using random hash functions to prevent collision attacks

XMLWordPrintable

    • c01eaa438200edc9a3bbcd8ae1e8ded058bea268

      This is more a problem on the server side, but still we should be aware of this. It looks like one could create collisions with our qHash(QString) which would eat up CPU, see http://events.ccc.de/congress/2011/Fahrplan/events/4680.en.html

        For Gerrit Dashboard: QTBUG-23529
        # Subject Branch Project Status CR V
        20410,12 QHash security fix (1/2): add global QHash seed api_changes qt/qtbase Status: MERGED +2 0
        21323,8 QHash security fix (1.5/2): qHash two arguments overload support api_changes qt/qtbase Status: MERGED +2 0
        22422,2 QHash security fix (2/2): enable QHash random seed api_changes qt/qtbase Status: MERGED +2 0

            Unassigned Unassigned
            phartman Peter Hartmann (closed Nokia identity) (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved:

                There are no open Gerrit changes