Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-23529

[Security] qHash(): consider using random hash functions to prevent collision attacks

    XMLWordPrintable

Details

    • c01eaa438200edc9a3bbcd8ae1e8ded058bea268

    Description

      This is more a problem on the server side, but still we should be aware of this. It looks like one could create collisions with our qHash(QString) which would eat up CPU, see http://events.ccc.de/congress/2011/Fahrplan/events/4680.en.html

      Attachments

        Issue Links

          is required for

          Task - A task that needs to be done. QTBUG-25005 Critical issues for Qt5 Beta 1

          • P0: Blocker - MUST be fixed ASAP. This includes issues that prevent/block further Qt development; Legal issues & Serious data loss issues.
          • Closed
          For Gerrit Dashboard: QTBUG-23529
          # Subject Branch Project Status CR V
          20410,12 QHash security fix (1/2): add global QHash seed api_changes qt/qtbase Status: MERGED +2 0
          21323,8 QHash security fix (1.5/2): qHash two arguments overload support api_changes qt/qtbase Status: MERGED +2 0
          22422,2 QHash security fix (2/2): enable QHash random seed api_changes qt/qtbase Status: MERGED +2 0

          Activity

            People

              Unassigned Unassigned
              phartman Peter Hartmann (closed Nokia identity) (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes