Details
-
Task
-
Resolution: Done
-
P1: Critical
-
None
-
None
Description
If an app loads untrusted images without checking their size first, it can easily run into memory/cpu overload because of image files having, or claiming to have, huge sizes. Introduce a settable limit with a sensible default to QImageReader, and make all the format handlers adhere to it.
Attachments
| For Gerrit Dashboard: QTBUG-85037 | ||||||
|---|---|---|---|---|---|---|
| # | Subject | Branch | Project | Status | CR | V |
| 303312,5 | Introduce a settable allocation limit on image loading | dev | qt/qtbase | Status: MERGED | +2 | 0 |
| 303313,4 | QImageIO: use the new allocation checker in the format handlers | dev | qt/qtbase | Status: MERGED | +2 | 0 |
| 491456,3 | Imageformats: remove unneeded size checks | dev | qt/qtbase | Status: ABANDONED | -1 | 0 |