hero123457/qtmqtt
1
0
Fork 0
mirror of https://github.com/qt/qtmqtt.git synced 2026-10-25 16:16:26 +00:00
Code Issues Projects Releases Wiki Activity

Mark more files as security-critical

Browse Source 
The qmqttclient.cpp file contains parts of the MQTT protocol
implementation, and hence marked as security-critical.

The qmqtttopicname.cpp file contains the code that validates the topic
name and also parses the levels -> it is a data-parser, so should be
security-critical as well.

Amends 18548033e1, which incorrectly
marked these files as significant.

Not picking to 6.9 anymore, because that branch is already closed.

Task-number: QTBUG-135764
Pick-to: 6.10 6.8
Change-Id: I0e8b72fb1d24b7bbf6ac5edab63e137f9d36dd30
Reviewed-by: Maurice Kalinowski <maurice.kalinowski@qt.io>
This commit is contained in:
Ivan Solovev 2025-10-07 11:54:36 +02:00
parent 6740c49752
commit b5c1e3aeb6
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/mqtt/qmqttclient.cpp
View File

@ -1,6 +1,6 @@
// Copyright (C) 2017 The Qt Company Ltd.
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR GPL-3.0-only
// Qt-Security score:significant reason:default
// Qt-Security score:critical reason:network-protocol
#include "qmqttclient.h"
#include "qmqttclient_p.h"

2
src/mqtt/qmqtttopicname.cpp
View File

@ -1,6 +1,6 @@
// Copyright (C) 2017 Lorenz Haas
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR GPL-3.0-only
// Qt-Security score:significant reason:default
// Qt-Security score:critical reason:data-parser
#include "qmqtttopicname.h"